Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 03:59:13.468 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34960 10 6452 1 2025-08-25 04:00:13.868 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51274 10 6452 1 2025-08-25 04:01:14.272 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36960 10 6452 1 2025-08-25 04:02:14.673 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42188 10 6452 1 2025-08-25 04:03:06.081 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:03:06.415 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:03:06.409 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:03:06.231 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:03:05.998 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:03:15.103 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-08-25 04:04:15.467 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50274 10 6452 1 2025-08-25 04:00:18.822 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:00:18.829 00:06:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:05:15.867 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37288 10 6452 1 2025-08-25 04:06:16.284 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:59938 10 6452 1 2025-08-25 04:07:16.641 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32990 10 6452 1 2025-08-25 04:08:06.549 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:08:06.469 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:08:06.417 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:08:06.346 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:08:06.297 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:08:17.007 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:60468 10 6452 1 2025-08-25 04:09:17.364 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54842 10 6452 1 2025-08-25 04:10:17.772 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44796 10 6452 1 2025-08-25 04:11:18.178 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 10 6452 1 2025-08-25 04:07:18.832 00:06:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:07:18.830 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:12:18.538 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52162 10 6452 1 2025-08-25 04:13:06.464 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:13:06.455 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:13:06.378 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:13:06.385 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:13:06.381 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:13:18.964 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39734 10 6452 1 2025-08-25 04:14:19.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6452 1 2025-08-25 04:15:19.765 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37434 10 6452 1 2025-08-25 04:16:20.186 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 10 6452 1 2025-08-25 04:17:20.547 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-08-25 04:18:06.655 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:18:06.618 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:18:06.515 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:18:06.518 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:18:06.573 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:18:20.949 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-08-25 04:14:18.833 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:14:18.832 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:19:21.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38564 10 6452 1 2025-08-25 04:20:21.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45170 10 6452 1 2025-08-25 04:21:22.179 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40004 10 6452 1 2025-08-25 04:22:22.587 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43952 10 6452 1 2025-08-25 04:23:06.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:23:06.613 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:23:06.727 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:23:06.754 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:23:06.809 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:23:22.954 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 10 6452 1 2025-08-25 04:24:23.359 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46190 10 6452 1 2025-08-25 04:25:23.757 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 10 6452 1 2025-08-25 04:21:18.832 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:21:18.834 00:06:00.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:26:24.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34034 10 6452 1 2025-08-25 04:27:24.519 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37234 11 6504 1 2025-08-25 04:28:06.996 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:28:07.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:28:06.912 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:28:06.865 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:28:06.914 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:28:24.934 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 10 6452 1 2025-08-25 04:29:25.365 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40284 10 6452 1 2025-08-25 04:30:25.719 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44852 10 6452 1 2025-08-25 04:31:26.105 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 10 6452 1 2025-08-25 04:32:26.473 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60436 10 6452 1 2025-08-25 04:33:07.138 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:33:07.056 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:33:06.860 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:33:07.049 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:33:06.657 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:28:18.835 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:28:18.837 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:33:26.880 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54954 10 6452 1 2025-08-25 04:34:27.242 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36138 10 6452 1 2025-08-25 04:35:27.646 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53982 10 6452 1 2025-08-25 04:36:28.009 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38246 10 6452 1 2025-08-25 04:37:28.418 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51770 10 6452 1 2025-08-25 04:38:06.993 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:38:06.989 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:38:06.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:38:06.828 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:38:06.911 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:38:28.823 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2025-08-25 04:39:29.223 00:00:15.812 TCP 1.101.0.1:3000 -> 23.104.0.1:50970 10 6452 1 2025-08-25 04:35:18.844 00:06:00.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:35:18.842 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:40:35.102 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36170 10 6452 1 2025-08-25 04:41:35.506 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35118 10 6452 1 2025-08-25 04:42:35.905 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49298 10 6452 1 2025-08-25 04:43:06.975 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:43:07.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:43:07.009 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:43:07.104 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:43:07.187 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:43:36.309 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37950 10 6452 1 2025-08-25 04:44:36.673 00:00:10.597 TCP 1.101.0.1:3000 -> 23.104.0.1:39410 10 6452 1 2025-08-25 04:45:37.310 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-08-25 04:46:37.668 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57562 10 6452 1 2025-08-25 04:42:18.845 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:42:18.848 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:47:38.098 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37470 10 6452 1 2025-08-25 04:48:07.131 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:48:07.257 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:48:07.070 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:48:06.923 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:48:07.007 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:48:38.509 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51754 10 6452 1 2025-08-25 04:49:38.907 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57290 10 6452 1 2025-08-25 04:50:39.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44192 10 6452 1 2025-08-25 04:51:39.672 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56878 10 6452 1 2025-08-25 04:52:40.101 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40412 10 6452 1 2025-08-25 04:53:07.225 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:53:07.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:53:07.281 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:53:07.302 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:53:07.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 04:53:40.458 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44268 10 6452 1 2025-08-25 04:49:18.849 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:49:18.847 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 04:54:40.873 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 10 6452 1 2025-08-25 04:55:41.278 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60834 10 6452 1 2025-08-25 04:56:41.684 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35610 10 6452 1 2025-08-25 04:57:42.105 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6452 1 2025-08-25 04:58:07.495 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 04:58:07.693 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 04:58:07.353 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:58:07.477 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 04:58:07.560 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 135, total bytes: 409616, total packets: 995, avg bps: 927, avg pps: 0, avg bpp: 411 Time window: 2025-08-25 03:59:13 - 2025-08-25 04:58:07 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0021s User: 0.0021s Wall: 0.0020s flows/second: 68146.7 Runtime: 0.0020s