Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 17:59:04.947 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 17:59:05.000 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 17:59:05.000 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 17:59:05.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 17:58:56.429 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43310 10 6452 1 2025-12-08 17:59:05.193 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 17:59:56.793 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-12-08 18:00:57.156 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-12-08 18:01:57.514 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43152 10 6452 1 2025-12-08 17:58:12.838 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 17:58:12.838 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:02:57.881 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47944 10 6452 1 2025-12-08 18:04:05.519 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:03:58.288 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33228 10 6452 1 2025-12-08 18:04:05.447 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:04:05.162 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:04:05.202 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:04:05.284 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:04:58.693 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33714 10 6452 1 2025-12-08 18:05:59.118 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46640 10 6452 1 2025-12-08 18:06:59.484 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-12-08 18:07:59.898 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52140 10 6452 1 2025-12-08 18:04:12.841 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:04:12.837 00:05:02.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:09:04.967 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:09:05.276 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:09:05.334 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:09:05.290 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:09:05.193 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:09:00.311 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40348 10 6452 1 2025-12-08 18:10:00.716 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46254 10 6452 1 2025-12-08 18:11:01.129 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41142 10 6452 1 2025-12-08 18:12:01.527 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52554 10 6452 1 2025-12-08 18:13:01.940 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41608 10 6452 1 2025-12-08 18:14:05.412 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:14:05.325 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:14:05.466 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:14:05.373 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:14:05.329 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:14:02.353 00:00:16.883 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 10 6452 1 2025-12-08 18:10:12.845 00:05:02.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:10:12.844 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:15:09.278 00:00:10.666 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-12-08 18:16:09.979 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45662 10 6452 1 2025-12-08 18:17:10.382 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60832 10 6452 1 2025-12-08 18:18:10.744 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 10 6452 1 2025-12-08 18:19:05.458 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:19:05.464 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:19:05.342 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:19:05.397 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:19:05.480 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:19:11.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36518 10 6452 1 2025-12-08 18:16:12.843 00:05:02.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:16:12.841 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:20:11.555 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45462 10 6452 1 2025-12-08 18:21:11.956 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44054 10 6452 1 2025-12-08 18:22:12.361 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34192 10 6452 1 2025-12-08 18:23:12.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40714 10 6452 1 2025-12-08 18:24:05.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:24:05.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:24:05.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:24:05.683 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:24:05.767 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:24:13.132 00:00:10.489 TCP 1.101.0.1:3000 -> 23.104.0.1:54386 14 10479 1 2025-12-08 18:25:13.667 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43890 10 6452 1 2025-12-08 18:22:12.842 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:22:12.844 00:05:02.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:26:14.068 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48756 10 6452 1 2025-12-08 18:27:14.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 10 6452 1 2025-12-08 18:28:14.875 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49310 10 6452 1 2025-12-08 18:29:05.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:29:05.612 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:29:05.416 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:29:05.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:29:05.882 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:29:15.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56798 10 6452 1 2025-12-08 18:30:15.680 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48802 10 6452 1 2025-12-08 18:31:16.118 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36930 10 6452 1 2025-12-08 18:28:12.845 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:28:12.843 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:32:16.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6452 1 2025-12-08 18:33:16.925 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46698 10 6452 1 2025-12-08 18:34:05.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:34:05.859 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:34:05.410 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:34:05.666 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:34:05.749 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:34:17.313 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45316 10 6452 1 2025-12-08 18:35:17.728 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 10 6452 1 2025-12-08 18:36:18.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36854 10 6452 1 2025-12-08 18:37:18.538 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54942 10 6452 1 2025-12-08 18:34:12.849 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:34:12.852 00:05:02.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:38:18.941 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47708 10 6452 1 2025-12-08 18:39:05.590 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:39:05.711 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:39:05.618 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:39:05.873 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:39:05.955 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:39:19.357 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 10 6452 1 2025-12-08 18:40:19.831 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39548 10 6452 1 2025-12-08 18:41:20.246 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6452 1 2025-12-08 18:42:20.649 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 10 6452 1 2025-12-08 18:43:21.055 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51596 10 6452 1 2025-12-08 18:44:06.138 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:44:05.925 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:44:05.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:44:05.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:44:06.009 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:40:12.852 00:05:02.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:40:12.851 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:44:21.456 00:00:10.470 TCP 1.101.0.1:3000 -> 23.104.0.1:33650 10 6452 1 2025-12-08 18:45:21.965 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53124 10 6452 1 2025-12-08 18:46:22.366 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39312 10 6452 1 2025-12-08 18:47:22.763 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51228 10 6452 1 2025-12-08 18:48:23.137 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57692 10 6452 1 2025-12-08 18:49:06.141 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:49:05.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:49:06.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:49:06.101 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:49:06.184 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:49:23.536 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42776 10 6452 1 2025-12-08 18:46:12.850 00:05:02.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:46:12.852 00:05:02.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:50:23.911 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33666 10 6452 1 2025-12-08 18:51:24.313 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53726 10 6452 1 2025-12-08 18:52:24.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55318 10 6452 1 2025-12-08 18:53:25.131 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52200 10 6452 1 2025-12-08 18:54:06.113 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:54:06.121 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:54:06.172 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:54:06.184 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:54:06.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:54:25.529 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40232 10 6452 1 2025-12-08 18:55:25.892 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2025-12-08 18:52:12.854 00:05:02.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:52:12.852 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 18:56:26.308 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53334 10 6452 1 2025-12-08 18:57:26.707 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55886 10 6452 1 2025-12-08 18:58:27.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54208 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 929, avg pps: 0, avg bpp: 411 Time window: 2025-12-08 17:58:12 - 2025-12-08 18:58:37 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0046s User: 0.0009s Wall: 0.0018s flows/second: 77436.7 Runtime: 0.0018s