Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 01:58:56.930 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 10 6452 1 2025-08-24 01:59:57.310 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57736 10 6452 1 2025-08-24 02:00:57.715 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45942 10 6452 1 2025-08-24 02:01:58.122 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55444 10 6452 1 2025-08-24 02:02:35.272 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:02:35.076 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:02:35.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:02:35.098 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:02:35.189 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:02:58.533 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38298 10 6452 1 2025-08-24 02:03:58.895 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54826 12 6556 1 2025-08-24 01:59:18.293 00:06:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 01:59:18.310 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:04:59.303 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58604 10 6452 1 2025-08-24 02:05:59.707 00:00:10.658 TCP 1.101.0.1:3000 -> 23.104.0.1:56416 10 6452 1 2025-08-24 02:07:00.403 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 10 6452 1 2025-08-24 02:07:35.072 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:07:35.277 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:07:35.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:07:35.123 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:07:34.989 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:08:00.805 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37898 10 6452 1 2025-08-24 02:09:01.205 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6452 1 2025-08-24 02:10:01.604 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37962 10 6452 1 2025-08-24 02:11:02.020 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34110 10 6452 1 2025-08-24 02:06:18.297 00:06:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 02:06:18.311 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:12:02.380 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:37234 12 10365 1 2025-08-24 02:12:35.455 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:12:35.288 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:12:35.496 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:12:35.406 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:12:35.372 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:13:02.866 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 10 6452 1 2025-08-24 02:14:03.238 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53746 10 6452 1 2025-08-24 02:15:03.649 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-08-24 02:16:04.102 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40482 10 6452 1 2025-08-24 02:17:04.468 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55404 10 6452 1 2025-08-24 02:17:35.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:17:35.470 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:17:35.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:17:35.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:17:35.588 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:13:18.299 00:06:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 02:18:04.884 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 10 6452 1 2025-08-24 02:13:18.315 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:19:05.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6452 1 2025-08-24 02:20:05.725 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:60502 10 6452 1 2025-08-24 02:21:06.144 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 10 6452 1 2025-08-24 02:22:06.548 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:59290 11 6504 1 2025-08-24 02:22:35.768 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:22:35.650 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:22:35.590 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:22:35.420 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:22:35.686 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:23:07.005 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32788 10 6452 1 2025-08-24 02:24:07.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49608 10 6452 1 2025-08-24 02:25:07.808 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 10 6452 1 2025-08-24 02:20:18.304 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 02:20:18.317 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:26:08.222 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-08-24 02:27:08.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-08-24 02:27:35.675 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:27:35.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:27:35.339 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:27:35.569 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:27:35.651 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:28:09.034 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57846 10 6452 1 2025-08-24 02:29:09.434 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51248 10 6452 1 2025-08-24 02:30:09.842 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:39584 10 6452 1 2025-08-24 02:31:10.230 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57824 10 6452 1 2025-08-24 02:27:18.308 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 02:27:18.318 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:32:10.629 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 11 6492 1 2025-08-24 02:32:35.686 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:32:35.745 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:32:35.556 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:32:35.535 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:32:35.617 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:33:10.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54294 10 6452 1 2025-08-24 02:34:11.395 00:00:10.759 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 11 6504 1 2025-08-24 02:35:12.195 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59936 10 6452 1 2025-08-24 02:36:12.606 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-08-24 02:37:13.010 00:00:10.642 TCP 1.101.0.1:3000 -> 23.104.0.1:49164 10 6452 1 2025-08-24 02:37:35.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:37:35.779 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:37:35.716 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:37:35.836 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:37:35.918 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:38:13.690 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-08-24 02:34:18.318 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:34:18.310 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 02:39:14.113 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38236 10 6452 1 2025-08-24 02:40:14.542 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36508 10 6452 1 2025-08-24 02:41:14.947 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56482 10 6452 1 2025-08-24 02:42:15.362 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40952 10 6452 1 2025-08-24 02:42:35.949 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:42:36.042 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:42:35.965 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:42:35.947 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:42:36.030 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:43:15.724 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37066 10 6452 1 2025-08-24 02:44:16.144 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-08-24 02:45:16.555 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51272 10 6452 1 2025-08-24 02:41:18.326 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:41:18.312 00:06:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 02:46:16.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52364 10 6452 1 2025-08-24 02:47:17.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47888 10 6452 1 2025-08-24 02:47:35.945 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:47:36.065 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:47:35.677 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:47:35.754 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:47:35.861 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:48:17.761 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50710 10 6452 1 2025-08-24 02:49:18.174 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55714 10 6452 1 2025-08-24 02:50:18.573 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51644 10 6452 1 2025-08-24 02:51:18.981 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35708 10 6452 1 2025-08-24 02:52:19.388 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60758 10 6452 1 2025-08-24 02:52:36.030 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:52:35.918 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:52:35.918 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:52:36.214 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:52:36.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:48:18.313 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 02:48:18.328 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:53:19.794 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47772 10 6452 1 2025-08-24 02:54:20.207 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51388 10 6452 1 2025-08-24 02:55:20.611 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58396 12 6556 1 2025-08-24 02:56:21.019 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55222 10 6452 1 2025-08-24 02:57:21.419 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-08-24 02:57:36.417 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:57:36.137 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 02:57:36.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 02:57:36.167 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 02:57:36.500 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 02:58:21.779 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55616 10 6452 1 Summary: total flows: 136, total bytes: 417369, total packets: 957, avg bps: 933, avg pps: 0, avg bpp: 436 Time window: 2025-08-24 01:58:56 - 2025-08-24 02:58:32 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0026s User: 0.0017s Wall: 0.0029s flows/second: 46913.8 Runtime: 0.0029s