Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 03:59:01.868 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56238 10 6438 1 2025-07-22 04:00:02.237 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6438 1 2025-07-22 03:57:00.522 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:01:02.601 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58100 10 6438 1 2025-07-22 04:01:44.231 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:01:44.137 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:01:44.353 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:01:44.266 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:01:44.147 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:02:03.006 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48796 10 6438 1 2025-07-22 04:03:03.363 00:00:10.515 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 14 14266 1 2025-07-22 04:00:00.526 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:04:03.926 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55296 10 6438 1 2025-07-22 04:05:04.336 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45830 10 6438 1 2025-07-22 04:06:04.738 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59986 10 6438 1 2025-07-22 04:06:44.543 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:06:44.773 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:06:44.551 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:06:44.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:06:44.618 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:03:00.523 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:07:05.108 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43968 10 6438 1 2025-07-22 04:08:05.470 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40112 10 6438 1 2025-07-22 04:09:05.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42056 10 6438 1 2025-07-22 04:06:00.527 00:05:00.569 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:10:06.287 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57312 10 6438 1 2025-07-22 04:11:06.693 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36920 10 6438 1 2025-07-22 04:11:44.611 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:11:44.611 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:11:44.467 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:11:44.317 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:11:44.529 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:12:07.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6438 1 2025-07-22 04:09:00.524 00:05:00.585 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:13:07.512 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34208 10 6438 1 2025-07-22 04:14:07.886 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:36920 10 6438 1 2025-07-22 04:15:08.266 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33120 10 6438 1 2025-07-22 04:12:00.526 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:16:08.668 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33810 10 6438 1 2025-07-22 04:16:44.627 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:16:44.491 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:16:44.235 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:16:44.376 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:16:44.459 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:17:09.104 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41390 10 6438 1 2025-07-22 04:18:09.471 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 10 6438 1 2025-07-22 04:15:00.525 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:19:09.835 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42334 10 6438 1 2025-07-22 04:20:10.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40322 10 6438 1 2025-07-22 04:21:10.632 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6438 1 2025-07-22 04:21:44.809 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:21:44.753 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:21:44.772 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:21:44.869 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:21:44.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:18:00.528 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:22:11.037 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44000 10 6438 1 2025-07-22 04:23:11.399 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45648 10 6438 1 2025-07-22 04:24:11.762 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 12 6542 1 2025-07-22 04:21:00.526 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:25:12.173 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:39518 10 6438 1 2025-07-22 04:26:12.555 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59216 10 6438 1 2025-07-22 04:26:44.970 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:26:44.763 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:26:44.609 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:26:44.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:26:44.673 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:27:12.962 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57806 10 6438 1 2025-07-22 04:24:00.529 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:28:13.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 10 6438 1 2025-07-22 04:29:13.769 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43032 10 6438 1 2025-07-22 04:30:14.183 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55928 10 6438 1 2025-07-22 04:27:00.527 00:05:00.577 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:31:14.581 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42218 10 6438 1 2025-07-22 04:31:44.949 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:31:44.910 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:31:44.689 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:31:44.665 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:31:44.748 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:32:14.986 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44850 10 6438 1 2025-07-22 04:33:15.387 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:42054 12 10352 1 2025-07-22 04:30:00.532 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:34:15.828 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37078 10 6438 1 2025-07-22 04:35:16.250 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49112 10 6438 1 2025-07-22 04:36:16.665 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41910 10 6438 1 2025-07-22 04:36:44.840 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:36:45.308 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:36:45.226 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:36:45.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:36:45.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:33:00.529 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:37:17.095 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6438 1 2025-07-22 04:38:17.495 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46638 10 6438 1 2025-07-22 04:39:17.873 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47060 10 6438 1 2025-07-22 04:36:00.533 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:40:18.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47962 10 6438 1 2025-07-22 04:41:18.680 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39652 10 6438 1 2025-07-22 04:41:45.229 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:41:45.191 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:41:45.106 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:41:45.102 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:41:45.188 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:42:19.105 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51976 10 6438 1 2025-07-22 04:39:00.531 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:43:19.512 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56290 10 6438 1 2025-07-22 04:44:19.920 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53708 10 6438 1 2025-07-22 04:45:20.298 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6438 1 2025-07-22 04:42:00.534 00:05:00.571 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:46:20.698 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47856 10 6438 1 2025-07-22 04:46:45.215 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:46:45.324 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:46:45.136 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:46:45.133 00:00:00.020 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:46:45.216 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:47:21.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33494 10 6438 1 2025-07-22 04:48:21.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36894 10 6438 1 2025-07-22 04:45:00.532 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:49:21.912 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6438 1 2025-07-22 04:50:22.314 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53232 10 6438 1 2025-07-22 04:51:22.718 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6438 1 2025-07-22 04:51:45.274 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:51:45.567 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:51:45.111 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:51:45.607 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:51:45.689 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:48:00.537 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:52:23.123 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48694 10 6438 1 2025-07-22 04:53:23.484 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51206 10 6438 1 2025-07-22 04:54:23.883 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40792 10 6438 1 2025-07-22 04:51:00.536 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 04:55:24.289 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 10 6438 1 2025-07-22 04:56:24.695 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37454 10 6438 1 2025-07-22 04:56:45.247 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:56:45.427 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 04:56:45.249 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 04:56:45.137 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 04:56:45.330 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 04:57:25.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39440 10 6438 1 2025-07-22 04:54:00.538 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 04:58:25.513 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6438 1 Summary: total flows: 140, total bytes: 428006, total packets: 1028, avg bps: 920, avg pps: 0, avg bpp: 416 Time window: 2025-07-22 03:57:00 - 2025-07-22 04:59:01 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0019s flows/second: 74860.1 Runtime: 0.0019s