Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 08:58:47.545 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33910 10 6452 1 2025-09-17 08:59:24.188 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 08:59:24.180 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 08:59:24.082 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 08:59:24.069 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 08:59:24.152 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 08:59:47.952 00:00:10.911 TCP 1.101.0.1:3000 -> 23.104.0.1:59766 10 6452 1 2025-09-17 09:00:48.900 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 12 6556 1 2025-09-17 09:01:49.313 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33102 10 6452 1 2025-09-17 08:57:30.845 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:02:49.725 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52744 10 6452 1 2025-09-17 09:03:50.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 10 6452 1 2025-09-17 09:04:24.365 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:04:24.192 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:04:24.164 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:04:24.282 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:04:24.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:04:50.514 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59236 10 6452 1 2025-09-17 09:00:30.879 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:05:50.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53646 10 6452 1 2025-09-17 09:06:51.280 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37442 10 6452 1 2025-09-17 09:07:51.690 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40024 10 6452 1 2025-09-17 09:08:52.111 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39644 10 6452 1 2025-09-17 09:09:24.279 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:09:24.286 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:09:24.280 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:09:24.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:09:24.305 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:04:30.847 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:09:52.520 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47682 10 6452 1 2025-09-17 09:10:52.934 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:55034 10 6452 1 2025-09-17 09:11:53.354 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56208 10 6452 1 2025-09-17 09:07:30.880 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:12:53.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55648 10 6452 1 2025-09-17 09:13:54.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39342 10 6452 1 2025-09-17 09:14:24.612 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:14:24.652 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:14:24.538 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:14:24.537 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:14:24.619 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:14:54.544 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33632 10 6452 1 2025-09-17 09:15:54.909 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-09-17 09:11:30.848 00:06:00.037 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:16:55.293 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-09-17 09:17:55.693 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58386 10 6452 1 2025-09-17 09:18:56.107 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 10 6452 1 2025-09-17 09:19:24.468 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:19:24.259 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:19:24.372 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:19:24.374 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:19:24.455 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:14:30.884 00:05:59.999 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:19:56.516 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 12 10365 1 2025-09-17 09:20:56.995 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41700 10 6452 1 2025-09-17 09:21:57.402 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 10 6452 1 2025-09-17 09:22:57.767 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48966 10 6452 1 2025-09-17 09:18:30.849 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:23:58.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54040 10 6452 1 2025-09-17 09:24:24.857 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:24:24.819 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:24:24.557 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:24:24.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:24:24.939 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:24:58.587 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 12 10367 1 2025-09-17 09:25:59.029 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-09-17 09:21:30.884 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:26:59.425 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35532 10 6452 1 2025-09-17 09:27:59.828 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51740 10 6452 1 2025-09-17 09:29:00.230 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37706 10 6452 1 2025-09-17 09:29:24.632 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:29:24.559 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:29:24.695 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:29:24.772 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:29:24.779 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:30:00.601 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48310 10 6452 1 2025-09-17 09:25:30.861 00:06:00.028 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:31:01.006 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57844 10 6452 1 2025-09-17 09:32:01.403 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6452 1 2025-09-17 09:33:01.805 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6452 1 2025-09-17 09:28:30.886 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:34:02.208 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43040 10 6452 1 2025-09-17 09:34:24.792 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:34:24.784 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:34:24.459 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:34:24.855 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:34:24.939 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:35:02.609 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:60244 12 10576 1 2025-09-17 09:36:03.109 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34384 10 6661 1 2025-09-17 09:37:03.481 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54438 10 6661 1 2025-09-17 09:32:30.863 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:38:03.846 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45156 10 6661 1 2025-09-17 09:39:04.272 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 10 6661 1 2025-09-17 09:39:24.966 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:39:24.886 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:39:24.935 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:39:24.866 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:39:24.884 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:40:04.641 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50382 10 6661 1 2025-09-17 09:35:30.888 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:41:05.056 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33594 10 6661 1 2025-09-17 09:42:05.428 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47612 10 6661 1 2025-09-17 09:43:05.834 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54656 10 6661 1 2025-09-17 09:44:06.260 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6661 1 2025-09-17 09:44:24.911 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:44:24.912 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:44:24.906 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:44:25.044 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:44:24.988 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:39:30.865 00:06:00.029 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:45:06.675 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:60986 10 6661 1 2025-09-17 09:46:07.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 10 6661 1 2025-09-17 09:47:07.457 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52248 10 6661 1 2025-09-17 09:42:30.890 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:48:07.863 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 10 6661 1 2025-09-17 09:49:08.243 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33398 10 6661 1 2025-09-17 09:49:24.974 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:49:25.043 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:49:25.251 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:49:25.313 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:49:25.333 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:50:08.659 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41516 10 6661 1 2025-09-17 09:51:09.023 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:36076 10 6661 1 2025-09-17 09:46:30.867 00:06:00.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 09:52:09.384 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6661 1 2025-09-17 09:53:09.781 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6661 1 2025-09-17 09:54:10.195 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6661 1 2025-09-17 09:54:25.396 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 09:54:25.312 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 09:54:25.307 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 09:54:25.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:54:25.312 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 09:49:30.892 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 09:55:10.562 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 10 6661 1 2025-09-17 09:56:10.979 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36582 10 6661 1 2025-09-17 09:57:11.386 00:00:10.731 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 10 6661 1 2025-09-17 09:58:12.159 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 10 6661 1 2025-09-17 09:53:30.868 00:06:00.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 430828, total packets: 970, avg bps: 926, avg pps: 0, avg bpp: 444 Time window: 2025-09-17 08:57:30 - 2025-09-17 09:59:30 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0011s User: 0.0034s Wall: 0.0022s flows/second: 61960.3 Runtime: 0.0022s