Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 18:58:47.723 00:00:10.463 TCP 1.101.0.1:3000 -> 23.104.0.1:47434 12 10352 1 2025-07-20 18:59:48.243 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42760 10 6438 1 2025-07-20 19:00:48.650 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53904 10 6438 1 2025-07-20 19:01:04.636 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 18:56:59.727 00:05:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:01:04.660 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 18:56:59.726 00:05:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:01:04.695 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:01:04.552 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:01:04.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:01:49.062 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58910 10 6438 1 2025-07-20 19:02:49.465 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 10 6438 1 2025-07-20 19:03:49.914 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46178 10 6438 1 2025-07-20 19:04:50.321 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 10 6438 1 2025-07-20 19:06:04.627 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:05:50.752 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39392 10 6438 1 2025-07-20 19:06:04.617 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:06:04.636 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:06:04.725 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:06:04.808 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:02:59.730 00:05:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:06:51.157 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6438 1 2025-07-20 19:02:59.728 00:05:00.620 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:07:51.561 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60628 10 6438 1 2025-07-20 19:08:51.957 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56790 10 6438 1 2025-07-20 19:09:52.362 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39956 10 6438 1 2025-07-20 19:11:05.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:10:52.765 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 10 6438 1 2025-07-20 19:11:04.801 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:11:04.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:11:05.268 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:11:05.279 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:11:53.183 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 10 6438 1 2025-07-20 19:08:59.727 00:05:00.622 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:12:53.539 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6438 1 2025-07-20 19:08:59.730 00:05:00.617 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:13:53.949 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 10 6438 1 2025-07-20 19:14:54.359 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6438 1 2025-07-20 19:16:04.881 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:16:04.803 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:16:04.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:16:04.926 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:15:54.760 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44748 10 6438 1 2025-07-20 19:16:05.010 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:16:55.167 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39396 10 6438 1 2025-07-20 19:17:55.564 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6438 1 2025-07-20 19:14:59.732 00:05:00.617 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:14:59.728 00:05:00.622 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:18:55.924 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59720 10 6438 1 2025-07-20 19:19:56.328 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6438 1 2025-07-20 19:21:04.922 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:21:04.761 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:21:04.918 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:21:04.989 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:20:56.727 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43738 10 6438 1 2025-07-20 19:21:05.002 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:21:57.146 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55982 10 6438 1 2025-07-20 19:22:57.565 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6438 1 2025-07-20 19:23:57.973 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55424 10 6438 1 2025-07-20 19:20:59.728 00:05:00.623 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:20:59.731 00:05:00.618 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:24:58.377 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50728 10 6438 1 2025-07-20 19:26:04.964 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:26:04.873 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:26:04.956 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:26:05.070 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:26:05.062 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:25:58.776 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 10 6438 1 2025-07-20 19:26:59.186 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6438 1 2025-07-20 19:27:59.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59238 10 6438 1 2025-07-20 19:29:00.009 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6438 1 2025-07-20 19:30:00.420 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39308 10 6438 1 2025-07-20 19:26:59.729 00:05:00.624 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:31:05.352 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:31:05.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:31:05.152 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:31:05.233 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:26:59.733 00:05:00.619 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:31:05.316 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:31:00.790 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41514 10 6438 1 2025-07-20 19:32:01.223 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 10 6438 1 2025-07-20 19:33:01.628 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36058 10 6438 1 2025-07-20 19:34:02.035 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54816 10 6438 1 2025-07-20 19:35:02.435 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6438 1 2025-07-20 19:36:05.330 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:36:05.062 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.246 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.329 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:36:02.839 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 10 6438 1 2025-07-20 19:32:59.731 00:05:00.626 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:32:59.733 00:05:00.622 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:37:03.261 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 10 6438 1 2025-07-20 19:38:03.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6438 1 2025-07-20 19:39:04.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55866 10 6438 1 2025-07-20 19:40:04.514 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47060 10 6438 1 2025-07-20 19:41:05.607 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:41:05.617 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:41:05.439 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:41:05.345 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:41:05.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:41:04.916 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41498 10 6438 1 2025-07-20 19:42:05.317 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 10 6438 1 2025-07-20 19:38:59.744 00:05:00.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:38:59.746 00:05:00.610 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:43:05.692 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6438 1 2025-07-20 19:44:06.109 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45498 10 6438 1 2025-07-20 19:45:06.484 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55136 10 6438 1 2025-07-20 19:46:05.573 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:46:05.493 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:46:05.493 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:46:05.377 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:46:05.490 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:46:06.883 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6438 1 2025-07-20 19:47:07.283 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40366 10 6438 1 2025-07-20 19:48:07.682 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40508 10 6438 1 2025-07-20 19:44:59.746 00:05:00.614 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:44:59.747 00:05:00.610 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:49:08.104 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 10 6438 1 2025-07-20 19:50:08.506 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56226 10 6438 1 2025-07-20 19:51:05.767 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:51:05.590 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:51:05.684 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:51:05.312 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:51:05.684 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:51:08.920 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6438 1 2025-07-20 19:52:09.332 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6438 1 2025-07-20 19:53:09.733 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57590 10 6438 1 2025-07-20 19:54:10.135 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6438 1 2025-07-20 19:50:59.751 00:05:00.610 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:50:59.754 00:05:00.605 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:55:10.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54568 10 6438 1 2025-07-20 19:56:06.050 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:56:06.431 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:56:05.867 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:56:05.967 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:56:06.430 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:56:10.902 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50316 10 6438 1 2025-07-20 19:57:11.304 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36102 10 6438 1 2025-07-20 19:58:11.704 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6438 1 Summary: total flows: 140, total bytes: 420074, total packets: 1022, avg bps: 912, avg pps: 0, avg bpp: 411 Time window: 2025-07-20 18:56:59 - 2025-07-20 19:58:22 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0021s Wall: 0.0019s flows/second: 74793.3 Runtime: 0.0019s