Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 07:59:38.597 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36966 10 6452 1 2025-09-12 07:55:28.403 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:00:38.997 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-09-12 08:01:39.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60948 10 6452 1 2025-09-12 08:01:58.432 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:01:59.182 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:01:58.474 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:01:58.885 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:01:58.968 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 07:57:28.407 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 08:02:39.806 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42188 10 6452 1 2025-09-12 08:03:40.207 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:46868 12 10365 1 2025-09-12 08:04:40.644 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50342 10 6452 1 2025-09-12 08:05:41.055 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46048 10 6452 1 2025-09-12 08:06:58.581 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:06:41.456 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40868 10 6452 1 2025-09-12 08:06:58.502 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:06:58.504 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:06:58.547 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:06:58.498 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:02:28.407 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:07:41.863 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:33492 10 6452 1 2025-09-12 08:08:42.234 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:38718 12 10365 1 2025-09-12 08:04:28.409 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-12 08:09:42.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-09-12 08:10:43.110 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 2025-09-12 08:11:43.507 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37116 10 6452 1 2025-09-12 08:11:58.825 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:11:58.769 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:11:58.695 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:11:58.607 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:11:58.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:12:43.868 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37192 10 6452 1 2025-09-12 08:13:44.282 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44630 10 6452 1 2025-09-12 08:09:28.411 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:14:44.699 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60194 10 6452 1 2025-09-12 08:15:45.116 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52408 10 6452 1 2025-09-12 08:11:28.414 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 08:16:58.841 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:16:58.753 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:16:58.690 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:16:45.526 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-09-12 08:16:58.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:16:59.021 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:17:45.931 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46640 10 6452 1 2025-09-12 08:18:46.358 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59372 10 6452 1 2025-09-12 08:19:46.713 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-09-12 08:20:47.101 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50024 10 6452 1 2025-09-12 08:16:28.413 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:21:59.048 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:21:59.095 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:21:59.030 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:21:58.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:21:58.965 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:21:47.505 00:00:10.636 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 10 6452 1 2025-09-12 08:22:48.178 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6452 1 2025-09-12 08:18:28.416 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 757 1 2025-09-12 08:23:48.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40560 10 6452 1 2025-09-12 08:24:49.000 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45084 10 6452 1 2025-09-12 08:25:49.368 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:40580 10 6452 1 2025-09-12 08:26:59.166 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:26:59.127 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:26:59.075 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:26:59.008 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:26:59.084 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:26:49.763 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33372 10 6452 1 2025-09-12 08:27:50.185 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-09-12 08:23:28.415 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:28:50.546 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54002 10 6452 1 2025-09-12 08:29:50.906 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37682 10 6452 1 2025-09-12 08:25:28.419 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 08:30:51.274 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 10 6452 1 2025-09-12 08:31:59.258 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:31:59.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:31:59.181 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:31:59.425 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:31:59.508 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:31:51.681 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33946 10 6452 1 2025-09-12 08:32:52.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36966 10 6452 1 2025-09-12 08:33:52.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59560 10 6452 1 2025-09-12 08:34:52.909 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48166 10 6452 1 2025-09-12 08:30:28.415 00:06:00.011 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:35:53.313 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42688 10 6452 1 2025-09-12 08:36:59.431 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:36:59.299 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:36:59.231 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:36:59.113 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:36:59.196 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:36:53.713 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57550 10 6452 1 2025-09-12 08:32:28.421 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 08:37:54.140 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-09-12 08:38:54.550 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-09-12 08:39:54.963 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:40908 10 6452 1 2025-09-12 08:40:55.365 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48612 10 6452 1 2025-09-12 08:41:59.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:41:59.361 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:41:59.354 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:41:59.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:41:59.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:41:55.767 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33176 10 6452 1 2025-09-12 08:37:28.419 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:42:56.185 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-09-12 08:43:56.545 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50188 10 6452 1 2025-09-12 08:39:28.432 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 08:44:56.944 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55302 10 6452 1 2025-09-12 08:45:57.366 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34446 10 6452 1 2025-09-12 08:46:59.482 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:46:59.491 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:46:59.376 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:46:59.445 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:46:59.530 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:46:57.765 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33084 10 6452 1 2025-09-12 08:47:58.139 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-09-12 08:48:58.555 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42402 10 6452 1 2025-09-12 08:44:28.426 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:49:58.957 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41338 10 6452 1 2025-09-12 08:50:59.365 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50150 10 6452 1 2025-09-12 08:46:28.433 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 08:51:59.514 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:51:59.592 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:51:59.669 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:51:59.482 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:51:59.596 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:51:59.733 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46636 10 6452 1 2025-09-12 08:53:00.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50610 10 6452 1 2025-09-12 08:54:00.552 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42900 10 6452 1 2025-09-12 08:55:00.977 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46788 10 6452 1 2025-09-12 08:56:01.391 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:47076 10 6452 1 2025-09-12 08:51:28.430 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 08:56:59.900 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 08:56:59.895 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 08:56:59.782 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:56:59.950 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 08:57:00.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 08:57:01.824 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41262 10 6452 1 2025-09-12 08:58:02.225 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6452 1 2025-09-12 08:53:28.434 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 Summary: total flows: 137, total bytes: 416564, total packets: 977, avg bps: 867, avg pps: 0, avg bpp: 426 Time window: 2025-09-12 07:55:28 - 2025-09-12 08:59:28 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0040s User: 0.0010s Wall: 0.0030s flows/second: 45485.6 Runtime: 0.0030s