Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 02:59:22.203 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36048 10 6452 1 2025-08-24 02:55:18.328 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 02:55:18.316 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:00:22.604 00:00:10.490 TCP 1.101.0.1:3000 -> 23.104.0.1:50468 10 6452 1 2025-08-24 03:01:23.135 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47928 10 6452 1 2025-08-24 03:02:23.499 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44370 10 6452 1 2025-08-24 03:02:36.299 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:02:36.295 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:02:36.207 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:02:36.216 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:02:36.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:03:23.904 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51290 10 6452 1 2025-08-24 03:04:24.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39468 10 6452 1 2025-08-24 03:05:24.685 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33322 10 6452 1 2025-08-24 03:06:25.116 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34042 10 6452 1 2025-08-24 03:02:18.318 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:02:18.331 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:07:36.270 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:07:36.279 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:07:36.353 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:07:25.525 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43820 10 6452 1 2025-08-24 03:07:36.348 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:07:36.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:08:25.888 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45670 10 6452 1 2025-08-24 03:09:26.309 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59268 10 6452 1 2025-08-24 03:10:26.714 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37486 10 6452 1 2025-08-24 03:11:27.135 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57204 10 6452 1 2025-08-24 03:12:36.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:12:36.467 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:12:27.541 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52524 10 6452 1 2025-08-24 03:12:36.398 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:12:36.345 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:12:36.551 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:13:27.946 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56898 10 6452 1 2025-08-24 03:09:18.333 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:09:18.319 00:06:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:14:28.359 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60238 10 6452 1 2025-08-24 03:15:28.769 00:00:10.783 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 10 6452 1 2025-08-24 03:16:29.599 00:00:10.710 TCP 1.101.0.1:3000 -> 23.104.0.1:41170 10 6452 1 2025-08-24 03:17:36.886 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:17:37.117 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:17:36.623 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:17:36.654 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:17:36.737 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:17:30.349 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58954 10 6452 1 2025-08-24 03:18:30.751 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59032 10 6452 1 2025-08-24 03:19:31.155 00:00:10.725 TCP 1.101.0.1:3000 -> 23.104.0.1:60312 10 6452 1 2025-08-24 03:20:31.920 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 10 6452 1 2025-08-24 03:16:18.338 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:16:18.323 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:21:32.330 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35042 10 6452 1 2025-08-24 03:22:36.832 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:22:36.804 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:22:36.749 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:22:36.739 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:22:36.651 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:22:32.697 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-08-24 03:23:33.108 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54014 10 6452 1 2025-08-24 03:24:33.474 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54566 10 6452 1 2025-08-24 03:25:33.879 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:43826 11 6504 1 2025-08-24 03:26:34.333 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43386 10 6452 1 2025-08-24 03:27:36.777 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:27:36.823 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:27:36.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:27:36.702 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:27:36.694 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:27:34.757 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-08-24 03:23:18.339 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:23:18.325 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:28:35.172 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50718 10 6452 1 2025-08-24 03:29:35.585 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43274 10 6452 1 2025-08-24 03:30:35.990 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37080 10 6452 1 2025-08-24 03:31:36.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33294 10 6452 1 2025-08-24 03:32:36.928 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:32:36.969 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:32:36.867 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:32:36.964 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:32:37.047 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:32:36.758 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:57222 10 6452 1 2025-08-24 03:33:37.178 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44414 10 6452 1 2025-08-24 03:34:37.579 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34648 10 6452 1 2025-08-24 03:30:18.341 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:30:18.331 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:35:37.982 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60508 10 6452 1 2025-08-24 03:36:38.389 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:57262 12 10365 1 2025-08-24 03:37:36.908 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:37:36.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:37:36.998 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:37:36.757 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:37:36.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:37:38.871 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43574 10 6452 1 2025-08-24 03:38:39.277 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2025-08-24 03:39:39.682 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46538 10 6452 1 2025-08-24 03:40:40.055 00:00:10.843 TCP 1.101.0.1:3000 -> 23.104.0.1:58496 10 6452 1 2025-08-24 03:41:40.936 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 10 6452 1 2025-08-24 03:37:18.333 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:37:18.341 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:42:36.908 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:42:37.172 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:42:36.928 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:42:36.931 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:42:37.016 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:42:41.361 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35718 10 6452 1 2025-08-24 03:43:41.737 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60948 10 6452 1 2025-08-24 03:44:42.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53446 10 6452 1 2025-08-24 03:45:42.557 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41744 10 6452 1 2025-08-24 03:46:42.966 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49546 10 6452 1 2025-08-24 03:47:37.106 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:47:37.277 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:47:36.877 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:47:37.111 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:47:37.194 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:47:43.369 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44492 10 6452 1 2025-08-24 03:48:43.768 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-08-24 03:44:18.343 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:44:18.334 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:49:44.180 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53460 10 6452 1 2025-08-24 03:50:44.547 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53378 10 6452 1 2025-08-24 03:51:44.948 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-08-24 03:52:37.029 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:52:37.268 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:52:37.268 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:52:36.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:52:36.945 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:52:45.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56020 10 6452 1 2025-08-24 03:53:45.758 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-08-24 03:54:46.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55816 10 6452 1 2025-08-24 03:55:46.589 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48116 10 6452 1 2025-08-24 03:51:18.336 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 03:51:18.347 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 03:56:46.947 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35334 10 6452 1 2025-08-24 03:57:37.327 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 03:57:37.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 03:57:37.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:57:37.321 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 03:57:37.403 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 03:57:47.326 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 Summary: total flows: 137, total bytes: 411975, total packets: 962, avg bps: 876, avg pps: 0, avg bpp: 428 Time window: 2025-08-24 02:55:18 - 2025-08-24 03:57:57 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0030s User: 0.0020s Wall: 0.0025s flows/second: 54301.6 Runtime: 0.0025s