Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 23:59:12.212 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 23:59:12.119 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:59:12.282 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 23:59:12.384 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 23:59:12.366 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 23:59:36.794 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57826 10 6452 1 2025-12-09 00:00:37.194 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:49594 10 6452 1 2025-12-09 00:01:37.568 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33176 10 6452 1 2025-12-08 23:58:12.978 00:05:02.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 23:58:12.980 00:05:02.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:02:37.965 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44876 10 6452 1 2025-12-09 00:03:38.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44824 10 6452 1 2025-12-09 00:04:12.200 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:04:12.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:04:12.258 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:04:12.368 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:04:12.450 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:04:38.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34484 10 6452 1 2025-12-09 00:05:39.185 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45350 10 6452 1 2025-12-09 00:06:39.587 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46234 10 6452 1 2025-12-09 00:07:40.000 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41740 10 6452 1 2025-12-09 00:04:12.979 00:05:02.440 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:04:12.976 00:05:02.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:08:40.402 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2025-12-09 00:09:12.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:09:12.589 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:09:12.489 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:09:12.538 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:09:12.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:09:40.808 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56936 10 6452 1 2025-12-09 00:10:41.247 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45600 10 6452 1 2025-12-09 00:11:41.647 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59688 10 6452 1 2025-12-09 00:12:42.054 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58758 10 6452 1 2025-12-09 00:13:42.457 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47264 10 6452 1 2025-12-09 00:14:12.591 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:14:12.467 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:14:12.600 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:14:12.668 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:14:12.682 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:10:12.980 00:05:02.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:10:12.977 00:05:02.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:14:42.871 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-12-09 00:15:43.283 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38456 10 6452 1 2025-12-09 00:16:43.645 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53704 10 6452 1 2025-12-09 00:17:44.066 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55668 10 6452 1 2025-12-09 00:18:44.468 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 10 6452 1 2025-12-09 00:19:12.739 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:19:12.657 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:19:12.496 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:19:12.583 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:19:12.411 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:19:44.877 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49186 10 6452 1 2025-12-09 00:16:12.981 00:05:02.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:16:12.978 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:20:45.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39200 10 6452 1 2025-12-09 00:21:45.690 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48592 10 6452 1 2025-12-09 00:22:46.064 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34274 10 6452 1 2025-12-09 00:23:46.463 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 10 6452 1 2025-12-09 00:24:12.960 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:24:12.724 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:24:12.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:24:12.925 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:24:12.877 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:24:46.825 00:00:17.501 TCP 1.101.0.1:3000 -> 23.104.0.1:56838 11 6504 1 2025-12-09 00:25:54.387 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44020 10 6452 1 2025-12-09 00:22:12.982 00:05:02.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:22:12.980 00:05:02.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:26:54.791 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51382 10 6452 1 2025-12-09 00:27:55.200 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49730 10 6452 1 2025-12-09 00:28:55.603 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50540 10 6452 1 2025-12-09 00:29:13.240 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:29:13.082 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:29:12.847 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:29:13.245 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:29:13.327 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:29:56.014 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48370 10 6452 1 2025-12-09 00:30:56.417 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49946 10 6452 1 2025-12-09 00:31:56.824 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56898 10 6452 1 2025-12-09 00:28:12.985 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:28:12.983 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:32:57.231 00:00:10.725 TCP 1.101.0.1:3000 -> 23.104.0.1:59882 10 6452 1 2025-12-09 00:33:57.993 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34666 10 6452 1 2025-12-09 00:34:13.021 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:34:13.029 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:34:13.029 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:34:12.815 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:34:12.938 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:34:58.406 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-12-09 00:35:58.808 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59496 10 6452 1 2025-12-09 00:36:59.214 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:38890 10 6452 1 2025-12-09 00:37:59.609 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34970 10 6452 1 2025-12-09 00:34:12.988 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:34:12.985 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:39:13.338 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:39:12.867 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:39:13.138 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:39:13.000 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:39:13.255 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:39:00.013 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57904 10 6452 1 2025-12-09 00:40:00.412 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47984 10 6452 1 2025-12-09 00:41:00.777 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41028 10 6452 1 2025-12-09 00:42:01.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 10 6452 1 2025-12-09 00:43:01.588 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49422 10 6452 1 2025-12-09 00:40:12.988 00:05:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 11 667 1 2025-12-09 00:44:13.663 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:44:13.655 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:44:13.881 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:44:13.662 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:44:01.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40964 10 6452 1 2025-12-09 00:44:13.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:40:12.987 00:05:00.013 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 686 1 2025-12-09 00:45:02.400 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6452 1 2025-12-09 00:46:02.800 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-12-09 00:47:03.207 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58284 10 6452 1 2025-12-09 00:48:03.604 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38752 10 6452 1 2025-12-09 00:49:13.442 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:49:13.140 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:49:13.153 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:49:13.264 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:49:04.007 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42770 10 6452 1 2025-12-09 00:49:13.359 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:50:04.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55032 10 6452 1 2025-12-09 00:45:15.435 00:05:57.596 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:45:15.437 00:05:57.592 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:51:04.820 00:00:10.777 TCP 1.101.0.1:3000 -> 23.104.0.1:43284 10 6452 1 2025-12-09 00:52:05.642 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48664 10 6452 1 2025-12-09 00:53:06.049 00:00:10.793 TCP 1.101.0.1:3000 -> 23.104.0.1:58798 12 6556 1 2025-12-09 00:54:13.461 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:54:13.375 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:54:13.378 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:54:13.334 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:54:13.378 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:54:06.880 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:48170 12 10375 1 2025-12-09 00:55:07.322 00:00:11.020 TCP 1.101.0.1:3000 -> 23.104.0.1:34872 10 6452 1 2025-12-09 00:51:15.440 00:05:57.597 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:51:15.437 00:05:57.601 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 00:56:08.406 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60476 10 6452 1 2025-12-09 00:57:08.808 00:00:10.762 TCP 1.101.0.1:3000 -> 23.104.0.1:33166 10 6452 1 2025-12-09 00:58:09.590 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49548 10 6452 1 Summary: total flows: 139, total bytes: 414504, total packets: 1013, avg bps: 919, avg pps: 0, avg bpp: 409 Time window: 2025-12-08 23:58:12 - 2025-12-09 00:58:19 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0048s User: 0.0012s Wall: 0.0019s flows/second: 74334.9 Runtime: 0.0019s