Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 15:59:01.305 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:37958 10 6452 1 2025-08-24 16:00:01.674 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40250 10 6452 1 2025-08-24 16:01:02.118 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35808 10 6452 1 2025-08-24 16:02:02.475 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46898 10 6452 1 2025-08-24 16:02:52.008 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:02:51.668 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:02:51.758 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:02:51.803 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:02:51.925 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:03:02.842 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41190 10 6452 1 2025-08-24 16:04:03.261 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46440 10 6452 1 2025-08-24 15:59:18.623 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 15:59:18.608 00:06:00.019 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:05:03.626 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55126 10 6452 1 2025-08-24 16:06:04.046 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:35158 10 6452 1 2025-08-24 16:07:04.517 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49696 10 6452 1 2025-08-24 16:07:51.699 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:07:52.010 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:07:51.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:07:51.940 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:07:51.616 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:08:04.887 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:35024 10 6452 1 2025-08-24 16:09:05.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38092 10 6452 1 2025-08-24 16:10:05.721 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53776 10 6452 1 2025-08-24 16:06:18.611 00:06:00.023 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:11:06.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47668 10 6452 1 2025-08-24 16:06:18.627 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 16:12:06.549 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-08-24 16:12:52.017 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:12:52.109 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:12:51.848 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:12:51.893 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:12:51.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:13:06.957 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41212 10 6452 1 2025-08-24 16:14:07.364 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42662 10 6452 1 2025-08-24 16:15:07.765 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35810 10 6452 1 2025-08-24 16:16:08.184 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42332 10 6452 1 2025-08-24 16:17:08.589 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50406 10 6452 1 2025-08-24 16:17:52.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:17:52.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:17:52.081 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:17:52.318 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:17:52.401 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:13:18.632 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 16:18:08.994 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:42402 11 6504 1 2025-08-24 16:13:18.613 00:06:00.024 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:19:09.454 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55304 10 6452 1 2025-08-24 16:20:09.854 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:60404 10 6452 1 2025-08-24 16:21:10.235 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:43188 12 10367 1 2025-08-24 16:22:10.711 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-08-24 16:22:52.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:22:52.088 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:22:52.332 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:22:52.247 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:22:52.415 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:23:11.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 2025-08-24 16:24:11.514 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57402 10 6452 1 2025-08-24 16:20:18.634 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 16:20:18.615 00:06:00.025 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:25:11.879 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36512 10 6452 1 2025-08-24 16:26:12.241 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56086 10 6452 1 2025-08-24 16:27:12.607 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46066 10 6452 1 2025-08-24 16:27:52.386 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:27:52.466 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:27:52.063 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:27:52.279 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:27:52.363 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:28:12.968 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38010 10 6452 1 2025-08-24 16:29:13.369 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43996 10 6452 1 2025-08-24 16:30:13.768 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-08-24 16:31:14.175 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51050 10 6452 1 2025-08-24 16:27:18.636 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 16:27:18.617 00:06:00.024 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:32:14.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46666 10 6452 1 2025-08-24 16:32:52.459 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:32:52.247 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:32:52.341 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:32:52.326 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:32:52.330 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:33:14.944 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:59974 10 6452 1 2025-08-24 16:34:15.336 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49634 10 6452 1 2025-08-24 16:35:15.738 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51538 10 6452 1 2025-08-24 16:36:16.111 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:40770 10 6452 1 2025-08-24 16:37:16.498 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 10 6452 1 2025-08-24 16:37:52.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:37:52.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:37:52.504 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:37:52.554 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:37:52.741 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:38:16.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33140 10 6452 1 2025-08-24 16:34:18.616 00:06:00.025 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:34:18.639 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 16:39:17.317 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55278 10 6452 1 2025-08-24 16:40:17.718 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59242 10 6452 1 2025-08-24 16:41:18.131 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 12 10367 1 2025-08-24 16:42:18.609 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 10 6452 1 2025-08-24 16:42:52.681 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:42:52.596 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:42:52.537 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:42:52.475 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:42:52.599 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:43:19.031 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33298 10 6452 1 2025-08-24 16:44:19.394 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43336 10 6452 1 2025-08-24 16:45:19.798 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37652 10 6452 1 2025-08-24 16:41:18.641 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 16:41:18.618 00:06:00.026 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:46:20.201 00:00:10.765 TCP 1.101.0.1:3000 -> 23.104.0.1:33008 10 6452 1 2025-08-24 16:47:21.006 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6452 1 2025-08-24 16:47:52.801 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:47:52.747 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:47:52.614 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:47:52.730 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:47:52.813 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:48:21.415 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56084 10 6452 1 2025-08-24 16:49:21.823 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39864 10 6452 1 2025-08-24 16:50:22.219 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36342 10 6452 1 2025-08-24 16:51:22.621 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37926 10 6452 1 2025-08-24 16:52:22.986 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 10 6452 1 2025-08-24 16:52:52.875 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:52:52.620 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:52:52.792 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:52:52.692 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:52:52.864 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:48:18.622 00:06:00.025 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 16:48:18.642 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 16:53:23.397 00:00:10.655 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6452 1 2025-08-24 16:54:24.106 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50544 10 6452 1 2025-08-24 16:55:24.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 10 6452 1 2025-08-24 16:56:24.910 00:00:10.652 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 12 6556 1 2025-08-24 16:57:25.594 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51524 10 6452 1 2025-08-24 16:57:52.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 16:57:52.661 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:57:52.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 16:57:52.876 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 16:57:53.005 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 16:58:26.012 00:00:10.679 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6452 1 Summary: total flows: 136, total bytes: 421090, total packets: 955, avg bps: 942, avg pps: 0, avg bpp: 440 Time window: 2025-08-24 15:59:01 - 2025-08-24 16:58:36 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0032s User: 0.0008s Wall: 0.0019s flows/second: 72306.4 Runtime: 0.0019s