Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 07:59:23.875 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6438 1 2025-07-20 08:00:24.282 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46206 10 6438 1 2025-07-20 08:00:51.373 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:00:51.322 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:00:50.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:00:51.371 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:00:51.455 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 07:56:59.441 00:05:00.651 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 07:56:59.439 00:05:00.656 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:01:24.648 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46296 10 6438 1 2025-07-20 08:02:25.067 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47708 10 6438 1 2025-07-20 08:03:25.477 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39396 10 6438 1 2025-07-20 08:04:25.851 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59546 10 6438 1 2025-07-20 08:05:26.274 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6438 1 2025-07-20 08:05:51.247 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:05:51.410 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:05:51.165 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:05:51.331 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:05:51.415 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:06:26.672 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6438 1 2025-07-20 08:02:59.439 00:05:00.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:02:59.441 00:05:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:07:27.103 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59672 10 6438 1 2025-07-20 08:08:27.500 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6438 1 2025-07-20 08:09:27.859 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:36574 10 6438 1 2025-07-20 08:10:28.236 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40234 10 6438 1 2025-07-20 08:10:51.593 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:10:51.551 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:10:51.381 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:10:51.507 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:10:51.590 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:11:28.636 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50932 10 6438 1 2025-07-20 08:12:29.039 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42858 10 6438 1 2025-07-20 08:08:59.440 00:05:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:08:59.443 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:13:29.443 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59254 10 6438 1 2025-07-20 08:14:29.802 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59962 10 6438 1 2025-07-20 08:15:30.205 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48642 10 6438 1 2025-07-20 08:15:51.738 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:15:51.746 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:15:51.519 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:15:51.730 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:15:51.813 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:16:30.608 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56358 10 6438 1 2025-07-20 08:17:31.004 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48862 10 6438 1 2025-07-20 08:18:31.409 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60704 10 6438 1 2025-07-20 08:14:59.442 00:05:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:14:59.447 00:05:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:19:31.810 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57962 10 6438 1 2025-07-20 08:20:32.216 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58492 10 6438 1 2025-07-20 08:20:51.665 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:20:51.852 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:20:51.564 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:20:51.813 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:20:51.895 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:21:32.618 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 10 6438 1 2025-07-20 08:22:33.025 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60734 10 6438 1 2025-07-20 08:23:33.391 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6438 1 2025-07-20 08:24:33.799 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56212 10 6438 1 2025-07-20 08:20:59.443 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:20:59.445 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:25:34.200 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48866 10 6438 1 2025-07-20 08:25:51.808 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:25:51.671 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:25:51.719 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:25:51.796 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:25:51.803 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:26:34.587 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53984 10 6438 1 2025-07-20 08:27:34.990 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38892 10 6438 1 2025-07-20 08:28:35.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35098 10 6438 1 2025-07-20 08:29:35.798 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60266 10 6438 1 2025-07-20 08:30:36.205 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44134 10 6438 1 2025-07-20 08:30:51.899 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:30:51.838 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:30:51.769 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:30:51.842 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:30:51.925 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:26:59.451 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:26:59.448 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:31:36.606 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39808 10 6438 1 2025-07-20 08:32:36.978 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51332 10 6438 1 2025-07-20 08:33:37.388 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 10 6438 1 2025-07-20 08:34:37.753 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54780 10 6438 1 2025-07-20 08:35:38.168 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6438 1 2025-07-20 08:35:52.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:35:51.984 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:35:51.633 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:35:52.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:35:52.074 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:36:38.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58368 10 6438 1 2025-07-20 08:32:59.450 00:05:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:32:59.452 00:05:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:37:38.951 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59976 10 6438 1 2025-07-20 08:38:39.359 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:52410 13 13922 1 2025-07-20 08:39:39.846 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45542 10 6438 1 2025-07-20 08:40:52.064 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:40:52.058 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:40:51.703 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:40:40.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44630 10 6438 1 2025-07-20 08:40:52.061 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:40:52.144 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:41:40.687 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53320 10 6438 1 2025-07-20 08:42:41.107 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47194 10 6438 1 2025-07-20 08:38:59.452 00:05:00.659 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:38:59.450 00:05:00.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:43:41.465 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47604 10 6438 1 2025-07-20 08:44:41.863 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6438 1 2025-07-20 08:45:52.229 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:45:52.427 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:45:52.550 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:45:52.326 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:45:42.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60302 10 6438 1 2025-07-20 08:45:52.146 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:46:42.687 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44946 10 6438 1 2025-07-20 08:47:43.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52570 10 6438 1 2025-07-20 08:48:43.522 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41308 10 6438 1 2025-07-20 08:44:59.454 00:05:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:44:59.458 00:05:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:49:43.926 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6438 1 2025-07-20 08:50:52.305 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:50:52.419 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:50:52.290 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:50:44.333 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 10 6438 1 2025-07-20 08:50:52.377 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:50:52.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:51:44.742 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52620 10 6438 1 2025-07-20 08:52:45.147 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33546 10 6438 1 2025-07-20 08:53:45.554 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46578 10 6438 1 2025-07-20 08:54:45.957 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53618 10 6438 1 2025-07-20 08:50:59.457 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 08:50:59.455 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:55:52.241 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 08:55:52.325 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 08:55:52.276 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:55:52.477 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 08:55:52.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 08:55:46.329 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45680 10 6438 1 2025-07-20 08:56:46.734 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38530 10 6438 1 2025-07-20 08:57:47.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6438 1 Summary: total flows: 139, total bytes: 417206, total packets: 1013, avg bps: 912, avg pps: 0, avg bpp: 411 Time window: 2025-07-20 07:56:59 - 2025-07-20 08:57:57 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0000s Wall: 0.0024s flows/second: 58623.3 Runtime: 0.0024s