Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 17:59:38.323 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:42718 11 6490 1 2025-07-22 18:00:38.792 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57752 10 6438 1 2025-07-22 17:57:00.859 00:05:00.534 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:01:39.201 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6438 1 2025-07-22 18:02:01.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:02:01.363 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:02:01.546 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:02:01.555 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:02:01.630 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:02:39.603 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33528 10 6438 1 2025-07-22 18:03:40.006 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:54486 12 10352 1 2025-07-22 18:00:00.863 00:05:00.528 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:04:40.477 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48052 10 6438 1 2025-07-22 18:05:40.872 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54080 10 6438 1 2025-07-22 18:06:41.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40630 10 6438 1 2025-07-22 18:07:01.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:07:01.263 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:03:00.861 00:05:00.532 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:07:01.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:07:01.126 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:07:01.254 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:07:41.693 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44090 10 6438 1 2025-07-22 18:08:42.111 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43992 10 6438 1 2025-07-22 18:09:42.478 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53674 10 6438 1 2025-07-22 18:06:00.865 00:05:00.528 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:10:42.887 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43684 12 6542 1 2025-07-22 18:11:43.298 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6438 1 2025-07-22 18:12:01.386 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:12:01.218 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:12:01.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:12:01.305 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:12:01.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:12:43.703 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39954 10 6438 1 2025-07-22 18:09:00.862 00:05:00.533 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:13:44.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 10 6438 1 2025-07-22 18:14:44.536 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45574 10 6438 1 2025-07-22 18:15:44.944 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43186 10 6438 1 2025-07-22 18:12:00.867 00:05:00.527 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:16:45.369 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33042 10 6438 1 2025-07-22 18:17:01.618 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:17:01.460 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:17:01.373 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:17:01.652 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:17:01.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:17:45.783 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36870 10 6438 1 2025-07-22 18:18:46.192 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 10 6438 1 2025-07-22 18:15:00.864 00:05:00.533 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:19:46.602 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46768 10 6438 1 2025-07-22 18:20:47.007 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48984 10 6438 1 2025-07-22 18:21:47.374 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48990 10 6438 1 2025-07-22 18:22:01.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:22:01.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:22:01.522 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:22:01.447 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:22:01.530 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:18:00.868 00:05:00.527 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:22:47.776 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 10 6438 1 2025-07-22 18:23:48.184 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:53512 12 10350 1 2025-07-22 18:24:48.665 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49230 11 6490 1 2025-07-22 18:21:00.867 00:05:00.531 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:25:49.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52698 10 6438 1 2025-07-22 18:26:49.527 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33420 10 6438 1 2025-07-22 18:27:02.206 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:27:01.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:27:01.913 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:27:01.866 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:27:02.124 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:27:49.936 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51868 10 6438 1 2025-07-22 18:24:00.871 00:05:00.526 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:28:50.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39172 10 6438 1 2025-07-22 18:29:50.760 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43496 10 6438 1 2025-07-22 18:27:00.868 00:05:00.530 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:30:51.196 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41750 10 6438 1 2025-07-22 18:32:01.776 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:32:01.527 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:32:01.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:32:01.673 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:31:51.600 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44112 10 6438 1 2025-07-22 18:32:01.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:32:51.963 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36128 10 6438 1 2025-07-22 18:33:52.367 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6438 1 2025-07-22 18:30:00.872 00:05:00.525 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:34:52.768 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6438 1 2025-07-22 18:35:53.185 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47554 10 6438 1 2025-07-22 18:37:01.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:33:00.870 00:05:00.531 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:37:01.758 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:37:01.850 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:36:53.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40462 10 6438 1 2025-07-22 18:37:01.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:37:01.998 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:37:53.970 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:38518 12 10350 1 2025-07-22 18:38:54.462 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53522 10 6438 1 2025-07-22 18:36:00.874 00:05:00.524 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:39:54.863 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51334 10 6438 1 2025-07-22 18:40:55.282 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43778 10 6438 1 2025-07-22 18:42:01.935 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:42:01.937 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:42:01.993 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:42:01.946 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:42:01.851 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:41:55.640 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52192 10 6438 1 2025-07-22 18:39:00.872 00:05:00.530 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:42:56.045 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53250 10 6438 1 2025-07-22 18:43:56.468 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 10 6438 1 2025-07-22 18:44:56.828 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38710 10 6438 1 2025-07-22 18:42:00.875 00:05:00.527 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:45:57.248 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42862 10 6438 1 2025-07-22 18:47:01.990 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:47:02.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:47:02.013 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:47:01.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:47:01.978 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:46:57.658 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 10 6438 1 2025-07-22 18:47:58.068 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33510 10 6438 1 2025-07-22 18:45:00.872 00:05:00.532 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:48:58.470 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6438 1 2025-07-22 18:49:58.870 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:54510 10 6438 1 2025-07-22 18:50:59.239 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55678 10 6438 1 2025-07-22 18:52:02.205 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:52:02.199 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:52:02.080 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:52:02.151 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:52:02.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:48:00.876 00:05:00.526 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:51:59.639 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58128 10 6438 1 2025-07-22 18:53:00.050 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6438 1 2025-07-22 18:54:00.456 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37614 10 6438 1 2025-07-22 18:51:00.875 00:05:00.531 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 18:55:00.872 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 10 6438 1 2025-07-22 18:56:01.275 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55838 10 6438 1 2025-07-22 18:57:02.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 18:57:02.409 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 18:57:02.271 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 18:57:02.117 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:57:02.277 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 18:57:01.643 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50550 10 6438 1 2025-07-22 18:54:00.878 00:05:00.525 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 18:58:02.052 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51802 10 6438 1 Summary: total flows: 139, total bytes: 421668, total packets: 1020, avg bps: 906, avg pps: 0, avg bpp: 413 Time window: 2025-07-22 17:57:00 - 2025-07-22 18:59:01 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0024s User: 0.0016s Wall: 0.0019s flows/second: 73389.8 Runtime: 0.0019s