Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 06:59:19.999 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39600 10 6452 1 2025-08-24 07:00:20.395 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47418 10 6452 1 2025-08-24 07:01:20.796 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56860 10 6452 1 2025-08-24 07:02:21.163 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59838 10 6452 1 2025-08-24 07:02:41.084 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:02:41.090 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:02:41.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:02:41.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:02:41.273 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:03:21.526 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53382 10 6452 1 2025-08-24 07:04:21.929 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53874 10 6452 1 2025-08-24 07:00:18.405 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 07:00:18.404 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:05:22.353 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47868 10 6452 1 2025-08-24 07:06:22.731 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57918 10 6452 1 2025-08-24 07:07:23.150 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57500 10 6452 1 2025-08-24 07:07:41.305 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:07:41.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:07:40.996 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:07:41.279 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:07:41.223 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:08:23.556 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53392 10 6452 1 2025-08-24 07:09:23.958 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51758 10 6452 1 2025-08-24 07:10:24.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45738 10 6452 1 2025-08-24 07:11:24.765 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42884 10 6452 1 2025-08-24 07:07:18.407 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 549 1 2025-08-24 07:07:18.405 00:06:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:12:25.133 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-08-24 07:12:41.213 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:12:41.219 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:12:41.373 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:12:41.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:12:41.231 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:13:25.546 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57812 10 6452 1 2025-08-24 07:14:25.906 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40628 10 6452 1 2025-08-24 07:15:26.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37086 10 6452 1 2025-08-24 07:16:26.712 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-08-24 07:17:27.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55476 10 6452 1 2025-08-24 07:17:41.785 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:17:41.665 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:17:41.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:17:41.728 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:17:41.810 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:18:27.516 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 11 6504 1 2025-08-24 07:14:18.410 00:06:00.042 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 549 1 2025-08-24 07:14:18.405 00:06:00.008 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:19:27.967 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 2025-08-24 07:20:28.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35604 10 6452 1 2025-08-24 07:21:28.771 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 10 6452 1 2025-08-24 07:22:29.184 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53472 10 6452 1 2025-08-24 07:22:41.604 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:22:41.503 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:22:41.461 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:22:41.335 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:22:41.418 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:23:29.556 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39596 10 6452 1 2025-08-24 07:24:29.922 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 10 6452 1 2025-08-24 07:25:30.336 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6452 1 2025-08-24 07:21:18.410 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 549 1 2025-08-24 07:21:18.409 00:06:00.018 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:26:30.740 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32942 10 6452 1 2025-08-24 07:27:41.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:27:41.644 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:27:41.411 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:27:41.520 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:27:31.147 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37968 10 6452 1 2025-08-24 07:27:41.602 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:28:31.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55118 10 6452 1 2025-08-24 07:29:31.954 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-08-24 07:30:32.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36120 10 6452 1 2025-08-24 07:31:32.775 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34612 10 6452 1 2025-08-24 07:32:41.908 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:32:33.182 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6452 1 2025-08-24 07:32:41.750 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:32:41.725 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:32:41.826 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:32:41.698 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:28:18.424 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 07:28:18.413 00:06:00.016 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:33:33.555 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44542 10 6452 1 2025-08-24 07:34:33.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40748 10 6452 1 2025-08-24 07:35:34.362 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52332 10 6452 1 2025-08-24 07:36:34.738 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33618 10 6452 1 2025-08-24 07:37:42.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:37:42.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:37:41.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:37:42.048 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:37:42.131 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:37:35.161 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45800 10 6452 1 2025-08-24 07:38:35.559 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33912 10 6452 1 2025-08-24 07:39:35.964 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52402 10 6452 1 2025-08-24 07:35:18.427 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 07:35:18.414 00:06:00.019 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:40:36.331 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38208 10 6452 1 2025-08-24 07:41:36.728 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:36812 10 6452 1 2025-08-24 07:42:41.735 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:42:41.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:42:41.571 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:42:41.736 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:42:41.818 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:42:37.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40064 10 6452 1 2025-08-24 07:43:37.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 10 6452 1 2025-08-24 07:44:37.914 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34972 10 6452 1 2025-08-24 07:45:38.277 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48086 10 6452 1 2025-08-24 07:46:38.678 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:40266 12 10367 1 2025-08-24 07:42:18.430 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 07:42:18.416 00:06:00.019 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:47:41.776 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:47:41.958 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:47:41.881 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:47:41.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:47:41.693 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:47:39.118 00:00:10.985 TCP 1.101.0.1:3000 -> 23.104.0.1:40328 10 6452 1 2025-08-24 07:48:40.142 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-08-24 07:49:40.538 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39590 10 6452 1 2025-08-24 07:50:40.938 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44980 10 6452 1 2025-08-24 07:51:41.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46830 10 6452 1 2025-08-24 07:52:41.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:52:42.103 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:52:42.110 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:52:42.004 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:52:41.851 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:52:41.759 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 10 6452 1 2025-08-24 07:53:42.182 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53462 10 6452 1 2025-08-24 07:49:18.419 00:06:00.015 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 07:49:18.431 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 07:54:42.583 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57236 10 6452 1 2025-08-24 07:55:42.986 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:55842 11 6504 1 2025-08-24 07:56:43.444 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:39844 12 10367 1 2025-08-24 07:57:42.105 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 07:57:42.118 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:57:42.094 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 07:57:42.266 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 07:57:42.182 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 07:57:43.885 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:56766 10 6452 1 Summary: total flows: 135, total bytes: 415106, total packets: 954, avg bps: 944, avg pps: 0, avg bpp: 435 Time window: 2025-08-24 06:59:19 - 2025-08-24 07:57:54 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0023s User: 0.0015s Wall: 0.0013s flows/second: 102578.1 Runtime: 0.0013s