Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 02:58:55.912 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6438 1 2025-07-24 02:59:56.323 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:32924 10 6438 1 2025-07-24 02:57:01.552 00:05:00.510 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:00:56.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52992 10 6438 1 2025-07-24 02:58:01.555 00:05:00.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:01:57.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57318 10 6438 1 2025-07-24 03:02:41.007 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:02:40.910 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:02:40.820 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:02:41.011 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:02:41.092 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:02:57.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47856 10 6438 1 2025-07-24 03:03:57.914 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60100 10 6438 1 2025-07-24 03:04:58.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60622 10 6438 1 2025-07-24 03:05:58.676 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51870 10 6438 1 2025-07-24 03:03:01.561 00:05:00.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:06:59.111 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43918 10 6438 1 2025-07-24 03:07:40.918 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:07:40.875 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:07:40.729 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:07:40.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:07:41.000 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:04:01.565 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:07:59.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33198 10 6438 1 2025-07-24 03:08:59.917 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54884 10 6438 1 2025-07-24 03:10:00.324 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6438 1 2025-07-24 03:11:00.732 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49148 10 6438 1 2025-07-24 03:12:01.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35868 10 6438 1 2025-07-24 03:12:41.216 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:12:41.138 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:12:41.063 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:12:41.176 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:12:41.146 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:09:01.563 00:05:00.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:13:01.553 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59496 10 6438 1 2025-07-24 03:10:01.566 00:05:00.495 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:14:01.960 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46288 10 6438 1 2025-07-24 03:15:02.373 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37652 10 6438 1 2025-07-24 03:16:02.738 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6438 1 2025-07-24 03:17:03.114 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37444 10 6438 1 2025-07-24 03:17:41.312 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:17:41.102 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:17:41.110 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:17:40.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:17:41.394 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:18:03.507 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34658 10 6438 1 2025-07-24 03:15:01.564 00:05:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:19:03.913 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6438 1 2025-07-24 03:16:01.567 00:05:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:20:04.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46602 10 6438 1 2025-07-24 03:21:04.720 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46336 10 6438 1 2025-07-24 03:22:05.136 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36502 10 6438 1 2025-07-24 03:22:41.327 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:22:41.236 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:22:41.353 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:22:41.001 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:22:41.244 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:23:05.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55510 10 6438 1 2025-07-24 03:24:05.944 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57806 10 6438 1 2025-07-24 03:21:01.567 00:05:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:25:06.353 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48868 10 6438 1 2025-07-24 03:22:01.569 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:26:06.758 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46872 10 6438 1 2025-07-24 03:27:07.176 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53058 10 6438 1 2025-07-24 03:27:41.445 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:27:41.116 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:27:41.404 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:27:41.324 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:27:41.406 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:28:07.590 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43912 10 6438 1 2025-07-24 03:29:07.997 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36416 10 6438 1 2025-07-24 03:30:08.408 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37542 10 6438 1 2025-07-24 03:27:01.567 00:05:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:31:08.813 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51002 10 6438 1 2025-07-24 03:28:01.571 00:05:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:32:09.216 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56768 10 6438 1 2025-07-24 03:32:41.832 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:32:41.535 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:32:41.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:32:41.637 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:32:41.749 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:33:09.620 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45160 10 6438 1 2025-07-24 03:34:10.021 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 10 6438 1 2025-07-24 03:35:10.425 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54780 10 6438 1 2025-07-24 03:36:10.828 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40338 10 6438 1 2025-07-24 03:33:01.569 00:05:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:37:11.241 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47148 10 6438 1 2025-07-24 03:37:41.750 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:37:41.493 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:37:41.671 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:37:41.494 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:37:41.667 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:34:01.572 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:38:11.657 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43160 10 6438 1 2025-07-24 03:39:12.079 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54510 10 6438 1 2025-07-24 03:40:12.478 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60410 10 6438 1 2025-07-24 03:41:12.884 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6438 1 2025-07-24 03:42:13.286 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49100 10 6438 1 2025-07-24 03:42:41.763 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:42:41.602 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:42:41.604 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:42:41.696 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:42:41.680 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:39:01.570 00:05:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:43:13.724 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53300 12 6542 1 2025-07-24 03:40:01.574 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:44:14.144 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59060 10 6438 1 2025-07-24 03:45:14.578 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56664 10 6438 1 2025-07-24 03:46:14.942 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:60150 10 6438 1 2025-07-24 03:47:15.318 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56482 10 6438 1 2025-07-24 03:47:41.680 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:47:41.748 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:47:41.631 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:47:41.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:47:41.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:48:15.720 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43368 10 6438 1 2025-07-24 03:45:01.571 00:05:00.504 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:49:16.147 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6438 1 2025-07-24 03:46:01.575 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:50:16.524 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6438 1 2025-07-24 03:51:16.903 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34010 10 6438 1 2025-07-24 03:52:17.313 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33286 10 6438 1 2025-07-24 03:52:41.635 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:52:41.657 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:52:41.548 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:52:41.898 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:52:41.981 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:53:17.717 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38058 10 6438 1 2025-07-24 03:54:18.124 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57400 10 6438 1 2025-07-24 03:51:01.575 00:05:00.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 03:55:18.529 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59762 10 6438 1 2025-07-24 03:52:01.577 00:05:00.497 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 03:56:18.934 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:44188 10 6438 1 2025-07-24 03:57:19.371 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44860 10 6438 1 2025-07-24 03:57:42.404 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 03:57:42.515 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 03:57:42.322 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:57:42.478 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 03:57:42.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 03:58:19.734 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54384 10 6438 1 Summary: total flows: 140, total bytes: 416264, total packets: 1022, avg bps: 902, avg pps: 0, avg bpp: 407 Time window: 2025-07-24 02:57:01 - 2025-07-24 03:58:30 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0032s User: 0.0011s Wall: 0.0031s flows/second: 44501.9 Runtime: 0.0032s