Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 22:59:11.165 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 22:59:11.239 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 22:59:11.117 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 22:59:11.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 22:59:11.365 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 22:59:11.832 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40580 10 6452 1 2025-12-08 23:00:12.243 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54260 10 6452 1 2025-12-08 23:01:12.604 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39512 10 6452 1 2025-12-08 22:58:12.947 00:05:02.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 22:58:12.944 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:02:13.009 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46878 10 6452 1 2025-12-08 23:03:13.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36756 10 6452 1 2025-12-08 23:04:11.253 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:04:11.193 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:04:11.189 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:04:11.252 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:04:11.272 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:04:13.774 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49984 10 6452 1 2025-12-08 23:05:14.189 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45716 10 6452 1 2025-12-08 23:06:14.554 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 10 6452 1 2025-12-08 23:07:14.968 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42360 10 6452 1 2025-12-08 23:04:12.948 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:04:12.946 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:08:15.373 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41314 10 6452 1 2025-12-08 23:09:11.489 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:09:11.324 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:09:11.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:09:11.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:09:11.407 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:09:15.736 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43632 10 6452 1 2025-12-08 23:10:16.107 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52426 10 6452 1 2025-12-08 23:11:16.508 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47804 10 6452 1 2025-12-08 23:12:16.911 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41740 10 6452 1 2025-12-08 23:13:17.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41316 10 6452 1 2025-12-08 23:14:11.359 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:14:11.447 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:14:11.504 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:14:11.507 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:14:11.530 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:10:12.947 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:10:12.949 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:14:17.730 00:00:10.487 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-12-08 23:15:18.257 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41208 10 6452 1 2025-12-08 23:16:18.657 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36250 10 6452 1 2025-12-08 23:17:19.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43978 10 6452 1 2025-12-08 23:18:19.508 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51770 10 6452 1 2025-12-08 23:19:11.358 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:19:11.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:19:11.408 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:19:11.452 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:19:11.535 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:19:19.909 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:47348 10 6452 1 2025-12-08 23:16:12.951 00:05:02.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:16:12.948 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:20:20.301 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48590 10 6452 1 2025-12-08 23:21:20.709 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36770 10 6452 1 2025-12-08 23:22:21.115 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54562 10 6452 1 2025-12-08 23:23:21.517 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42296 10 6452 1 2025-12-08 23:24:11.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:24:11.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:24:11.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:24:11.577 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:24:11.753 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:24:21.917 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57916 10 6452 1 2025-12-08 23:25:22.324 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32882 10 6452 1 2025-12-08 23:22:12.953 00:05:02.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:22:12.950 00:05:02.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:26:22.727 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58772 10 6452 1 2025-12-08 23:27:23.108 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38486 10 6452 1 2025-12-08 23:28:23.473 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 10 6452 1 2025-12-08 23:29:11.759 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:29:11.958 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:29:12.136 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:29:11.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:29:12.041 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:29:23.873 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42348 10 6452 1 2025-12-08 23:30:24.290 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54364 10 6452 1 2025-12-08 23:31:24.658 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52204 10 6452 1 2025-12-08 23:28:12.955 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:28:12.958 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:32:25.091 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36848 10 6452 1 2025-12-08 23:33:25.498 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49480 10 6452 1 2025-12-08 23:34:11.676 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:34:11.766 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:34:11.574 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:34:11.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:34:11.975 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:34:25.865 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 12 10375 1 2025-12-08 23:35:26.312 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 10 6452 1 2025-12-08 23:36:26.716 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-12-08 23:37:27.105 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60052 10 6452 1 2025-12-08 23:34:12.954 00:05:02.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:34:12.956 00:05:02.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:38:27.508 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6452 1 2025-12-08 23:39:11.750 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:39:11.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:39:11.870 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:39:11.957 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:39:11.805 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:39:27.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37708 10 6452 1 2025-12-08 23:40:28.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57824 10 6452 1 2025-12-08 23:41:28.723 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-12-08 23:42:29.132 00:00:11.285 TCP 1.101.0.1:3000 -> 23.104.0.1:56766 10 6452 1 2025-12-08 23:43:30.459 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35700 10 6452 1 2025-12-08 23:44:11.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:44:11.876 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:44:11.857 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:44:12.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:44:11.939 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:40:12.958 00:05:02.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:40:12.955 00:05:02.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:44:30.857 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-12-08 23:45:31.275 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50094 10 6452 1 2025-12-08 23:46:31.649 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44754 10 6452 1 2025-12-08 23:47:32.071 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43332 10 6452 1 2025-12-08 23:48:32.472 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40070 10 6452 1 2025-12-08 23:49:12.093 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:49:12.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:49:12.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:49:12.010 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:49:12.012 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:49:32.879 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43284 10 6452 1 2025-12-08 23:46:12.962 00:05:02.458 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:46:12.959 00:05:02.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:50:33.249 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44782 10 6452 1 2025-12-08 23:51:33.613 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41810 10 6452 1 2025-12-08 23:52:34.019 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44906 10 6452 1 2025-12-08 23:53:34.391 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53874 10 6452 1 2025-12-08 23:54:11.959 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:54:12.234 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:54:12.158 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:54:12.227 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:54:12.310 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:54:34.753 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38526 10 6452 1 2025-12-08 23:55:35.152 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56192 10 6452 1 2025-12-08 23:52:12.977 00:05:02.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 23:52:12.974 00:05:02.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:56:35.568 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51852 10 6452 1 2025-12-08 23:57:35.974 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-12-08 23:58:36.392 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 926, avg pps: 0, avg bpp: 411 Time window: 2025-12-08 22:58:12 - 2025-12-08 23:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0010s Wall: 0.0027s flows/second: 52340.0 Runtime: 0.0027s