Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-09 00:59:13.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 00:59:13.540 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 00:59:13.551 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:59:13.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 00:59:13.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 00:59:09.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34748 10 6452 1 2025-12-09 01:00:10.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36954 10 6452 1 2025-12-09 01:01:10.803 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56846 10 6452 1 2025-12-09 00:57:15.441 00:05:57.596 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 00:57:15.438 00:05:57.601 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:02:11.210 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40982 10 6452 1 2025-12-09 01:03:11.614 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41466 10 6452 1 2025-12-09 01:04:13.535 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:04:13.453 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:04:13.598 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:04:13.450 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:04:13.643 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:04:12.019 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:40316 12 10375 1 2025-12-09 01:05:12.499 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51470 10 6452 1 2025-12-09 01:06:12.907 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:59972 10 6452 1 2025-12-09 01:07:13.325 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38210 10 6452 1 2025-12-09 01:03:15.440 00:05:57.602 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:03:15.443 00:05:57.597 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:08:13.684 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39374 10 6452 1 2025-12-09 01:09:13.520 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:09:13.620 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:09:13.568 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:09:13.625 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:09:13.707 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:09:14.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59364 10 6452 1 2025-12-09 01:10:14.511 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 10 6452 1 2025-12-09 01:11:14.911 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54426 10 6452 1 2025-12-09 01:12:15.272 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49944 10 6452 1 2025-12-09 01:13:15.685 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46552 10 6452 1 2025-12-09 01:14:13.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:14:13.727 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:14:13.701 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:14:13.833 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:09:15.441 00:05:57.604 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:14:13.785 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:09:15.445 00:05:57.599 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:14:16.051 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47084 10 6452 1 2025-12-09 01:15:16.464 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48004 10 6452 1 2025-12-09 01:16:16.873 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49106 10 6452 1 2025-12-09 01:17:17.239 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42704 10 6452 1 2025-12-09 01:18:17.602 00:00:11.774 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2025-12-09 01:19:14.064 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:19:13.865 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:19:13.793 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:19:13.881 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:19:13.981 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:19:19.413 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42104 10 6452 1 2025-12-09 01:15:15.443 00:05:57.603 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:15:15.446 00:05:57.598 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:20:19.820 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33760 10 6452 1 2025-12-09 01:21:20.225 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-12-09 01:22:20.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36322 10 6452 1 2025-12-09 01:23:21.035 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51828 10 6452 1 2025-12-09 01:24:13.873 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:24:14.108 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:24:13.878 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:24:13.962 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:24:13.962 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:24:21.439 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33364 10 6452 1 2025-12-09 01:25:21.840 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:49456 10 6452 1 2025-12-09 01:21:15.446 00:05:57.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:21:15.449 00:05:57.600 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:26:22.219 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34360 10 6452 1 2025-12-09 01:27:22.624 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39238 10 6452 1 2025-12-09 01:28:22.991 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36790 10 6452 1 2025-12-09 01:29:14.173 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:29:14.125 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:29:13.986 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:29:14.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:29:14.252 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:29:23.396 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-12-09 01:30:23.800 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55342 10 6452 1 2025-12-09 01:31:24.203 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6452 1 2025-12-09 01:27:15.446 00:05:57.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:27:15.448 00:05:57.600 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:32:24.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38096 10 6452 1 2025-12-09 01:33:24.978 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6452 1 2025-12-09 01:34:14.262 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:34:14.492 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:34:13.916 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:34:14.126 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:34:14.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:34:25.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 10 6452 1 2025-12-09 01:35:25.793 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60284 10 6452 1 2025-12-09 01:36:26.223 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55264 10 6452 1 2025-12-09 01:37:26.631 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35004 10 6452 1 2025-12-09 01:33:15.446 00:05:57.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:33:15.450 00:05:57.603 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:38:27.040 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54834 10 6452 1 2025-12-09 01:39:14.814 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:39:14.816 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:39:14.743 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:39:14.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:39:14.684 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:39:27.446 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45444 10 6452 1 2025-12-09 01:40:27.847 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:57314 10 6452 1 2025-12-09 01:41:28.233 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46070 10 6452 1 2025-12-09 01:42:28.637 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 10 6452 1 2025-12-09 01:43:29.038 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-12-09 01:44:14.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:39:15.448 00:05:57.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:44:14.396 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:44:14.228 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:44:14.388 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:44:14.472 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:39:15.452 00:05:57.602 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:44:29.406 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43380 10 6452 1 2025-12-09 01:45:29.769 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35140 10 6452 1 2025-12-09 01:46:30.178 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39430 10 6452 1 2025-12-09 01:47:30.538 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52818 10 6452 1 2025-12-09 01:48:30.943 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50538 10 6452 1 2025-12-09 01:49:14.552 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:49:14.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:49:14.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:49:14.195 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:49:14.469 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:49:31.359 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38082 10 6452 1 2025-12-09 01:45:15.448 00:05:57.607 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:45:15.451 00:05:57.602 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:50:31.720 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33594 12 6556 1 2025-12-09 01:51:32.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38244 10 6452 1 2025-12-09 01:52:32.550 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40510 10 6452 1 2025-12-09 01:53:32.956 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56948 10 6452 1 2025-12-09 01:54:14.587 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 01:54:14.643 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 01:54:14.403 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 01:54:14.546 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:54:14.505 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 01:54:33.373 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50334 10 6452 1 2025-12-09 01:55:33.775 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42696 10 6452 1 2025-12-09 01:51:15.450 00:05:57.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 01:51:15.453 00:05:57.603 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 01:56:34.180 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60140 10 6452 1 2025-12-09 01:57:34.583 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53254 10 6452 1 2025-12-09 01:58:34.996 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59480 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 912, avg pps: 0, avg bpp: 411 Time window: 2025-12-09 00:57:15 - 2025-12-09 01:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0020s Wall: 0.0022s flows/second: 63605.1 Runtime: 0.0022s