Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-31 04:59:01.987 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55400 10 6452 1 2025-08-31 04:54:22.094 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-31 04:54:22.092 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:00:02.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33174 10 6452 1 2025-08-31 05:01:01.381 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:01:01.112 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:01:01.420 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:01:01.383 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:01:01.466 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:01:02.754 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 2025-08-31 05:02:03.159 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34396 10 6452 1 2025-08-31 05:03:03.587 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:38152 12 10365 1 2025-08-31 05:04:04.069 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33772 10 6452 1 2025-08-31 05:05:04.473 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50840 10 6452 1 2025-08-31 05:06:00.852 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:06:01.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:06:00.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:06:01.062 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:06:01.146 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:06:04.883 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51370 10 6452 1 2025-08-31 05:01:22.142 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:01:22.099 00:06:00.047 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:07:05.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-08-31 05:08:05.721 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45438 10 6452 1 2025-08-31 05:09:06.125 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50572 10 6452 1 2025-08-31 05:10:06.492 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56978 10 6452 1 2025-08-31 05:11:01.094 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:11:01.132 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:11:01.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:11:01.164 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:11:01.011 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:11:06.896 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48558 10 6452 1 2025-08-31 05:12:07.300 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41950 10 6452 1 2025-08-31 05:13:07.654 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44604 10 6452 1 2025-08-31 05:08:22.114 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:08:22.146 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:14:08.066 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56134 10 6452 1 2025-08-31 05:15:08.427 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56480 10 6452 1 2025-08-31 05:16:01.447 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:16:01.296 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:16:00.973 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:16:01.407 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:16:01.490 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:16:08.827 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39698 10 6452 1 2025-08-31 05:17:09.231 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43344 10 6452 1 2025-08-31 05:18:09.589 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-08-31 05:19:09.960 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-08-31 05:15:22.120 00:06:00.032 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:20:10.366 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46318 10 6452 1 2025-08-31 05:15:22.146 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:21:01.491 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:21:01.408 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:21:01.409 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:21:01.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:21:01.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:21:10.726 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49616 10 6452 1 2025-08-31 05:22:11.146 00:00:15.498 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 10 6452 1 2025-08-31 05:23:16.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-08-31 05:24:17.108 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 10 6452 1 2025-08-31 05:25:17.522 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38238 10 6452 1 2025-08-31 05:26:01.373 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:26:01.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:26:01.439 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:26:01.490 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:26:01.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:26:17.915 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44546 10 6452 1 2025-08-31 05:22:22.150 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:22:22.123 00:06:00.031 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:27:18.316 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55494 10 6452 1 2025-08-31 05:28:18.717 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:49976 10 6452 1 2025-08-31 05:29:19.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-08-31 05:30:19.548 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55522 10 6452 1 2025-08-31 05:31:02.286 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:31:02.219 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:31:02.183 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:31:01.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:31:02.204 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:31:19.955 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57720 10 6452 1 2025-08-31 05:32:20.359 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:35786 13 13939 1 2025-08-31 05:33:20.840 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 10 6452 1 2025-08-31 05:29:22.152 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:29:22.124 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:34:21.268 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51910 10 6452 1 2025-08-31 05:35:21.676 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-08-31 05:36:01.896 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:36:01.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:36:01.780 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:36:01.620 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:36:01.979 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:36:22.139 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-08-31 05:37:22.500 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43144 10 6452 1 2025-08-31 05:38:22.910 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48532 10 6452 1 2025-08-31 05:39:23.316 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:52886 11 6504 1 2025-08-31 05:40:23.786 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50274 10 6452 1 2025-08-31 05:41:01.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:41:02.059 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:41:02.162 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:41:01.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:41:01.894 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:36:22.156 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:36:22.130 00:06:00.029 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:41:24.189 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47664 10 6452 1 2025-08-31 05:42:24.597 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42254 10 6452 1 2025-08-31 05:43:24.961 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52714 10 6452 1 2025-08-31 05:44:25.359 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47202 10 6452 1 2025-08-31 05:45:25.762 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 10 6452 1 2025-08-31 05:46:02.039 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:46:01.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:46:01.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:46:01.933 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:46:01.919 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:46:26.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51288 10 6452 1 2025-08-31 05:47:26.583 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34360 10 6452 1 2025-08-31 05:43:22.131 00:06:00.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:43:22.157 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:48:26.951 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54108 10 6452 1 2025-08-31 05:49:27.378 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-08-31 05:50:27.794 00:00:10.939 TCP 1.101.0.1:3000 -> 23.104.0.1:33484 10 6452 1 2025-08-31 05:51:01.980 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:51:01.812 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:51:01.682 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:51:01.987 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:51:01.898 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:51:28.765 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58886 10 6452 1 2025-08-31 05:52:29.176 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59608 10 6452 1 2025-08-31 05:53:29.541 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58182 10 6452 1 2025-08-31 05:54:29.942 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44396 10 6452 1 2025-08-31 05:50:22.160 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 05:50:22.132 00:06:00.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 05:55:30.362 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32872 10 6452 1 2025-08-31 05:56:02.189 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 05:56:01.812 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:56:02.107 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 05:56:02.033 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 05:56:02.048 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 05:56:30.756 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60396 10 6452 1 2025-08-31 05:57:31.149 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 12 10365 1 2025-08-31 05:58:31.629 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 Summary: total flows: 138, total bytes: 430191, total packets: 984, avg bps: 891, avg pps: 0, avg bpp: 437 Time window: 2025-08-31 04:54:22 - 2025-08-31 05:58:41 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0036s User: 0.0009s Wall: 0.0020s flows/second: 67650.1 Runtime: 0.0021s