Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 01:59:13.785 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49000 10 6438 1 2025-07-22 02:00:14.186 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38324 10 6438 1 2025-07-22 01:57:00.485 00:05:00.579 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:01:14.584 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:43466 10 6438 1 2025-07-22 02:01:41.787 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:01:41.973 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:01:41.848 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:01:41.682 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:01:41.766 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:02:14.967 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34992 12 6542 1 2025-07-22 02:03:15.372 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60488 10 6438 1 2025-07-22 02:00:00.490 00:05:00.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:04:15.779 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59794 10 6438 1 2025-07-22 02:05:16.141 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49972 10 6438 1 2025-07-22 02:06:16.544 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42662 10 6438 1 2025-07-22 02:06:42.063 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:06:41.978 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:06:41.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:06:41.945 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:06:41.980 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:03:00.488 00:05:00.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:07:16.948 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43114 10 6438 1 2025-07-22 02:08:17.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6438 1 2025-07-22 02:09:17.721 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52942 10 6438 1 2025-07-22 02:06:00.491 00:05:00.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:10:18.135 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43380 10 6438 1 2025-07-22 02:11:18.534 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43110 10 6438 1 2025-07-22 02:11:41.962 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:11:41.753 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:11:42.089 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:11:42.063 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:11:42.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:12:18.896 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58704 12 6542 1 2025-07-22 02:09:00.489 00:05:00.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:13:19.311 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55570 10 6438 1 2025-07-22 02:14:19.714 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58774 10 6438 1 2025-07-22 02:15:20.125 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6438 1 2025-07-22 02:12:00.490 00:05:00.580 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:16:20.523 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6438 1 2025-07-22 02:16:42.181 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:16:42.197 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:16:41.859 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:16:42.267 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:16:42.350 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:17:20.895 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43086 10 6438 1 2025-07-22 02:18:21.310 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51468 10 6438 1 2025-07-22 02:15:00.489 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:19:21.672 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:43266 10 6438 1 2025-07-22 02:20:22.050 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53360 10 6438 1 2025-07-22 02:21:22.409 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35586 10 6438 1 2025-07-22 02:21:42.574 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:21:42.409 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:21:42.448 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:21:42.218 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:21:42.301 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:18:00.491 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:22:22.821 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59718 10 6438 1 2025-07-22 02:23:23.248 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58644 10 6438 1 2025-07-22 02:24:23.651 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56754 10 6438 1 2025-07-22 02:21:00.489 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:25:24.065 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:50636 10 6438 1 2025-07-22 02:26:24.439 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33702 10 6438 1 2025-07-22 02:26:42.510 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:26:42.482 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:26:42.331 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:26:42.284 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:26:42.593 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:27:24.839 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 11 6490 1 2025-07-22 02:24:00.494 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:28:25.320 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6438 1 2025-07-22 02:29:25.734 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6438 1 2025-07-22 02:30:26.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6438 1 2025-07-22 02:27:00.491 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:31:26.540 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32876 10 6438 1 2025-07-22 02:31:42.458 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:31:42.577 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:31:42.271 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:31:42.376 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:31:42.473 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:32:26.935 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60152 10 6438 1 2025-07-22 02:33:27.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36888 10 6438 1 2025-07-22 02:30:00.494 00:05:00.582 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:34:27.766 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49328 10 6438 1 2025-07-22 02:35:28.179 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55352 10 6438 1 2025-07-22 02:36:28.588 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48410 10 6438 1 2025-07-22 02:36:42.483 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:36:42.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:36:42.825 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:36:42.827 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:36:43.018 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:33:00.492 00:05:00.587 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:37:28.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54348 10 6438 1 2025-07-22 02:38:29.398 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55378 10 6438 1 2025-07-22 02:39:29.814 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37426 10 6438 1 2025-07-22 02:36:00.494 00:05:00.582 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:40:30.216 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43112 10 6438 1 2025-07-22 02:41:42.911 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:41:30.621 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6438 1 2025-07-22 02:41:42.795 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:41:42.802 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:41:42.902 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:41:42.993 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:42:31.025 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50430 10 6438 1 2025-07-22 02:39:00.493 00:05:00.588 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:43:31.423 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 10 6438 1 2025-07-22 02:44:31.837 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:40386 11 6478 1 2025-07-22 02:45:32.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6438 1 2025-07-22 02:42:00.496 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:46:42.914 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:46:42.832 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:46:32.639 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6438 1 2025-07-22 02:46:42.900 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:46:42.835 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:46:42.826 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:47:33.049 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36978 10 6438 1 2025-07-22 02:48:33.458 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39162 10 6438 1 2025-07-22 02:45:00.495 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:49:33.859 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:49994 10 6438 1 2025-07-22 02:50:34.229 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37210 10 6438 1 2025-07-22 02:51:42.898 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:51:42.971 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:51:34.635 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49400 10 6438 1 2025-07-22 02:51:43.150 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:51:43.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:51:43.055 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:48:00.499 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:52:35.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 10 6438 1 2025-07-22 02:53:35.435 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:48032 14 14266 1 2025-07-22 02:54:36.001 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47268 10 6438 1 2025-07-22 02:51:00.496 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 02:55:36.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34834 10 6438 1 2025-07-22 02:56:43.147 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 02:56:43.095 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 02:56:42.894 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 02:56:42.961 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:56:43.064 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 02:56:36.765 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34646 10 6438 1 2025-07-22 02:57:37.180 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41394 10 6438 1 2025-07-22 02:54:00.500 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 02:58:37.587 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58908 10 6438 1 Summary: total flows: 140, total bytes: 424288, total packets: 1030, avg bps: 912, avg pps: 0, avg bpp: 411 Time window: 2025-07-22 01:57:00 - 2025-07-22 02:59:01 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0024s User: 0.0012s Wall: 0.0014s flows/second: 97299.5 Runtime: 0.0015s