Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-09 18:59:35.105 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:59:29.426 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53944 10 6452 1 2025-12-09 18:59:35.163 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:59:35.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:59:34.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:59:35.245 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:00:29.826 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56596 10 6452 1 2025-12-09 19:01:30.227 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34388 10 6452 1 2025-12-09 18:57:15.846 00:05:57.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:57:15.848 00:05:57.579 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:02:30.590 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47426 10 6452 1 2025-12-09 19:03:31.001 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 10 6452 1 2025-12-09 19:04:35.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:04:35.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:04:35.344 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:04:35.262 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:04:35.371 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:04:31.409 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:39296 12 10375 1 2025-12-09 19:05:31.846 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57180 10 6452 1 2025-12-09 19:06:32.270 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-12-09 19:07:32.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41322 10 6452 1 2025-12-09 19:03:15.848 00:05:57.583 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:03:15.846 00:05:57.588 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:08:33.039 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41258 10 6452 1 2025-12-09 19:09:35.380 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:09:35.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:09:35.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:09:35.425 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:09:35.508 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:09:33.446 00:00:11.301 TCP 1.101.0.1:3000 -> 23.104.0.1:47666 10 6452 1 2025-12-09 19:10:34.787 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46128 10 6452 1 2025-12-09 19:11:35.158 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39796 10 6452 1 2025-12-09 19:12:35.558 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51174 10 6452 1 2025-12-09 19:13:35.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56724 10 6452 1 2025-12-09 19:09:15.849 00:05:57.584 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:09:15.848 00:05:57.589 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:14:35.387 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:14:35.185 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:14:35.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:14:35.458 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:14:35.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:14:36.327 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 10 6452 1 2025-12-09 19:15:36.729 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47328 10 6452 1 2025-12-09 19:16:37.143 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40560 10 6452 1 2025-12-09 19:17:37.506 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59782 10 6452 1 2025-12-09 19:18:37.926 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-12-09 19:19:35.437 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:19:35.591 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:19:35.176 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:19:35.598 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:19:35.682 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:19:38.347 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:56050 10 6452 1 2025-12-09 19:15:15.847 00:05:57.589 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:15:15.851 00:05:57.584 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:20:38.741 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6452 1 2025-12-09 19:21:39.147 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43194 10 6452 1 2025-12-09 19:22:39.514 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36112 10 6452 1 2025-12-09 19:23:39.931 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:55146 10 6452 1 2025-12-09 19:24:35.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:24:35.775 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:24:35.378 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:24:35.595 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:24:35.375 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:24:40.315 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42746 10 6452 1 2025-12-09 19:25:40.723 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-12-09 19:21:15.850 00:05:57.588 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:21:15.854 00:05:57.583 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:26:41.109 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36312 10 6452 1 2025-12-09 19:27:41.556 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49278 10 6452 1 2025-12-09 19:28:41.958 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49382 10 6452 1 2025-12-09 19:29:35.593 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:29:35.690 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:29:35.630 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:29:35.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:29:35.911 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:29:42.364 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 10 6452 1 2025-12-09 19:30:42.764 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 2025-12-09 19:31:43.185 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55494 10 6452 1 2025-12-09 19:27:15.860 00:05:57.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:27:15.857 00:05:57.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:32:43.601 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46204 10 6452 1 2025-12-09 19:33:44.005 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 10 6452 1 2025-12-09 19:34:36.068 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:34:36.112 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:34:35.763 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:34:36.080 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:34:36.163 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:34:44.410 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49248 10 6452 1 2025-12-09 19:35:44.816 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 10 6452 1 2025-12-09 19:36:45.217 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59726 10 6452 1 2025-12-09 19:37:45.583 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:41348 10 6452 1 2025-12-09 19:33:15.864 00:05:57.574 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:33:15.862 00:05:57.579 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:38:45.941 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41178 10 6452 1 2025-12-09 19:39:36.440 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:39:35.887 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:39:36.168 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:39:35.962 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:39:36.357 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:39:46.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47132 10 6452 1 2025-12-09 19:40:46.764 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47338 10 6452 1 2025-12-09 19:41:47.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-12-09 19:42:47.544 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34098 10 6452 1 2025-12-09 19:43:47.955 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-12-09 19:39:15.864 00:05:57.578 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:39:15.868 00:05:57.573 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:44:36.107 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:44:36.058 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:44:35.635 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:44:36.068 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:44:36.151 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:44:48.369 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40162 10 6452 1 2025-12-09 19:45:48.771 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46812 10 6452 1 2025-12-09 19:46:49.202 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 2025-12-09 19:47:49.604 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34684 10 6452 1 2025-12-09 19:48:50.009 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-12-09 19:49:36.156 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:49:36.211 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:49:36.160 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:49:36.181 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:49:36.239 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:49:50.380 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53772 10 6452 1 2025-12-09 19:45:15.866 00:05:57.578 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:45:15.870 00:05:57.573 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:50:50.783 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:60028 10 6452 1 2025-12-09 19:51:51.147 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41268 12 6556 1 2025-12-09 19:52:51.590 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6452 1 2025-12-09 19:53:51.993 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53116 10 6452 1 2025-12-09 19:54:36.109 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:54:36.264 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:54:36.255 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:54:36.230 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:54:36.192 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:54:52.365 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34610 10 6452 1 2025-12-09 19:55:52.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 2025-12-09 19:51:15.871 00:05:57.571 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:51:15.869 00:05:57.576 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:56:53.139 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-12-09 19:57:53.539 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58904 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 909, avg pps: 0, avg bpp: 408 Time window: 2025-12-09 18:57:15 - 2025-12-09 19:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0038s User: 0.0013s Wall: 0.0025s flows/second: 55551.0 Runtime: 0.0025s