Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 22:59:06.067 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 10 6452 1 2025-08-24 23:00:06.471 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44696 10 6452 1 2025-08-24 23:01:06.874 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49290 10 6452 1 2025-08-24 23:02:07.282 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34302 10 6452 1 2025-08-24 23:02:59.832 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:03:00.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:03:00.295 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:03:00.347 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:03:00.304 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:03:07.682 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54882 10 6452 1 2025-08-24 23:04:08.052 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51190 10 6452 1 2025-08-24 22:59:18.773 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 22:59:18.743 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:05:08.453 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 10 6452 1 2025-08-24 23:06:08.816 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33312 10 6452 1 2025-08-24 23:07:09.222 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53628 10 6452 1 2025-08-24 23:08:00.506 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:08:00.420 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:08:00.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:08:00.275 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:08:00.424 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:08:09.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51802 10 6452 1 2025-08-24 23:09:09.991 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43060 10 6452 1 2025-08-24 23:10:10.390 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52786 10 6452 1 2025-08-24 23:06:18.784 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 23:06:18.746 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:11:10.790 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34380 10 6452 1 2025-08-24 23:12:11.199 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59486 10 6452 1 2025-08-24 23:13:00.529 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:13:00.555 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:13:00.408 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:13:00.417 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:13:00.447 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:13:11.596 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:52528 10 6452 1 2025-08-24 23:14:11.952 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 10 6452 1 2025-08-24 23:15:12.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35278 10 6452 1 2025-08-24 23:16:12.766 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45692 10 6452 1 2025-08-24 23:17:13.144 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42462 10 6452 1 2025-08-24 23:18:00.525 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:18:00.566 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:18:00.589 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:18:00.593 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:18:00.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:13:18.785 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 23:13:18.749 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:18:13.559 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:33434 10 6452 1 2025-08-24 23:19:13.998 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59390 10 6452 1 2025-08-24 23:20:14.424 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40474 10 6452 1 2025-08-24 23:21:14.834 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6452 1 2025-08-24 23:22:15.260 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36978 10 6452 1 2025-08-24 23:23:00.772 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:23:00.691 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:23:00.685 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:23:00.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:23:00.486 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:23:15.634 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58814 10 6452 1 2025-08-24 23:24:16.041 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44214 10 6452 1 2025-08-24 23:20:18.749 00:06:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:20:18.786 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 23:25:16.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48764 10 6452 1 2025-08-24 23:26:16.810 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57236 10 6452 1 2025-08-24 23:27:17.226 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 10 6452 1 2025-08-24 23:28:00.808 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:28:00.648 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:28:00.927 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:28:00.478 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:28:00.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:28:17.589 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50502 10 6452 1 2025-08-24 23:29:17.992 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55204 10 6452 1 2025-08-24 23:30:18.397 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45216 10 6452 1 2025-08-24 23:31:18.759 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53384 10 6452 1 2025-08-24 23:27:18.790 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 23:27:18.750 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:32:19.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50416 10 6452 1 2025-08-24 23:33:01.050 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:33:01.050 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:33:00.967 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:33:00.860 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:33:00.968 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:33:19.589 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52496 10 6452 1 2025-08-24 23:34:19.950 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6452 1 2025-08-24 23:35:20.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6452 1 2025-08-24 23:36:20.764 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38414 10 6452 1 2025-08-24 23:37:21.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37898 10 6452 1 2025-08-24 23:38:01.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:38:00.899 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:38:00.872 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:38:00.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:38:00.915 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:38:21.589 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40516 10 6452 1 2025-08-24 23:34:18.791 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 23:34:18.752 00:06:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:39:21.957 00:00:10.942 TCP 1.101.0.1:3000 -> 23.104.0.1:38386 10 6452 1 2025-08-24 23:40:22.938 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40864 10 6452 1 2025-08-24 23:41:23.349 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59328 10 6452 1 2025-08-24 23:42:23.747 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 2025-08-24 23:43:00.957 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:43:01.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:43:00.897 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:43:00.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:43:00.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:43:24.146 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55668 10 6452 1 2025-08-24 23:44:24.547 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41378 10 6452 1 2025-08-24 23:45:24.909 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43296 10 6452 1 2025-08-24 23:41:18.793 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 23:41:18.754 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:46:25.278 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43872 10 6452 1 2025-08-24 23:47:25.691 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33216 10 6452 1 2025-08-24 23:48:01.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:48:01.127 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:48:00.974 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:48:01.103 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:48:01.058 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:48:26.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 10 6452 1 2025-08-24 23:49:26.520 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40522 10 6452 1 2025-08-24 23:50:26.889 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:38338 10 6452 1 2025-08-24 23:51:27.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57504 10 6452 1 2025-08-24 23:52:27.721 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43876 10 6452 1 2025-08-24 23:53:01.095 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:53:01.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:53:01.331 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:53:01.084 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:53:01.166 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:48:18.794 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 23:48:18.754 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 23:53:28.142 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42278 12 6556 1 2025-08-24 23:54:28.573 00:00:10.619 TCP 1.101.0.1:3000 -> 23.104.0.1:45948 10 6452 1 2025-08-24 23:55:29.234 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39804 10 6452 1 2025-08-24 23:56:29.634 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51788 10 6452 1 2025-08-24 23:57:30.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35914 10 6452 1 2025-08-24 23:58:01.513 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 23:58:01.098 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 23:58:01.349 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 23:58:01.095 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:58:01.431 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 23:58:30.437 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 Summary: total flows: 136, total bytes: 413208, total packets: 950, avg bps: 924, avg pps: 0, avg bpp: 434 Time window: 2025-08-24 22:59:06 - 2025-08-24 23:58:40 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0019s Wall: 0.0019s flows/second: 72963.1 Runtime: 0.0019s