Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 03:59:20.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39484 10 6438 1 2025-07-24 04:00:20.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57594 10 6438 1 2025-07-24 03:57:01.577 00:05:00.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:01:20.945 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50236 10 6438 1 2025-07-24 03:58:01.580 00:05:00.495 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:02:21.355 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60716 10 6438 1 2025-07-24 04:02:42.123 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:02:42.003 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:02:42.246 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:02:42.284 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:02:42.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:03:21.761 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42794 10 6438 1 2025-07-24 04:04:22.177 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33164 10 6438 1 2025-07-24 04:05:22.582 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 10 6438 1 2025-07-24 04:06:22.947 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:44620 10 6438 1 2025-07-24 04:03:01.577 00:05:00.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:07:23.324 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38878 10 6438 1 2025-07-24 04:07:42.286 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:07:42.229 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:07:42.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:07:42.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:07:42.365 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:04:01.581 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:08:23.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51588 10 6438 1 2025-07-24 04:09:24.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52718 10 6438 1 2025-07-24 04:10:24.545 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43300 10 6438 1 2025-07-24 04:11:24.944 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50746 10 6438 1 2025-07-24 04:12:25.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57108 10 6438 1 2025-07-24 04:12:42.409 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:12:42.412 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:12:42.203 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:12:42.466 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:12:42.549 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:09:01.589 00:05:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:13:25.770 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47706 10 6438 1 2025-07-24 04:10:01.592 00:05:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:14:26.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53524 10 6438 1 2025-07-24 04:15:26.582 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46066 10 6438 1 2025-07-24 04:16:26.990 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43582 10 6438 1 2025-07-24 04:17:27.399 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56544 10 6438 1 2025-07-24 04:17:42.536 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:17:42.509 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:17:42.433 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:17:42.439 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:17:42.453 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:18:27.799 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:42658 10 6438 1 2025-07-24 04:15:01.591 00:05:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:19:28.187 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38166 10 6438 1 2025-07-24 04:16:01.593 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:20:28.607 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44944 10 6438 1 2025-07-24 04:21:29.021 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33242 10 6438 1 2025-07-24 04:22:29.419 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44320 10 6438 1 2025-07-24 04:22:42.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:22:42.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:22:42.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:22:42.516 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:22:42.598 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:23:29.821 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40416 10 6438 1 2025-07-24 04:24:30.230 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60408 10 6438 1 2025-07-24 04:21:01.591 00:05:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:25:30.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44702 10 6438 1 2025-07-24 04:22:01.594 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:26:31.001 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51236 10 6438 1 2025-07-24 04:27:42.529 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:27:42.430 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:27:42.393 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:27:42.427 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:27:31.403 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57534 10 6438 1 2025-07-24 04:27:42.511 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:28:31.807 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58074 10 6438 1 2025-07-24 04:29:32.215 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57468 10 6438 1 2025-07-24 04:30:32.622 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56780 10 6438 1 2025-07-24 04:27:01.592 00:05:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:31:32.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42688 10 6438 1 2025-07-24 04:28:01.596 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:32:43.285 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:32:43.203 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:32:33.397 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35646 10 6438 1 2025-07-24 04:32:43.128 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:32:43.127 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:32:42.928 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:33:33.810 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41710 10 6438 1 2025-07-24 04:34:34.221 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6438 1 2025-07-24 04:35:34.625 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33316 10 6438 1 2025-07-24 04:36:35.036 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 10 6438 1 2025-07-24 04:33:01.593 00:05:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:37:43.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:37:42.833 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:37:42.531 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:37:42.989 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:37:43.072 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:37:35.443 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6438 1 2025-07-24 04:34:01.596 00:05:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:38:35.840 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:38104 10 6438 1 2025-07-24 04:39:36.222 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47052 10 6438 1 2025-07-24 04:40:36.627 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58730 10 6438 1 2025-07-24 04:41:37.030 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55708 10 6438 1 2025-07-24 04:42:42.959 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:42:42.949 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:42:42.860 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:42:42.785 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:42:42.874 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:42:37.434 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6438 1 2025-07-24 04:39:01.597 00:05:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:43:37.836 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:53244 10 6438 1 2025-07-24 04:40:01.599 00:05:00.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:44:38.282 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49692 10 6438 1 2025-07-24 04:45:38.692 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35956 10 6438 1 2025-07-24 04:46:39.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36960 10 6438 1 2025-07-24 04:47:43.009 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:47:42.964 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:47:42.912 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:47:43.114 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:47:42.995 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:47:39.514 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50474 10 6438 1 2025-07-24 04:48:39.929 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60976 10 6438 1 2025-07-24 04:45:01.596 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:49:40.337 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37704 10 6438 1 2025-07-24 04:46:01.600 00:05:00.489 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:50:40.741 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60336 10 6438 1 2025-07-24 04:51:41.146 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34514 10 6438 1 2025-07-24 04:52:43.284 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:52:43.159 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:52:42.984 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:52:42.938 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:52:43.201 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:52:41.543 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44020 10 6438 1 2025-07-24 04:53:41.907 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54618 10 6438 1 2025-07-24 04:54:42.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49104 10 6438 1 2025-07-24 04:51:01.599 00:05:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 04:55:42.725 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54772 10 6438 1 2025-07-24 04:52:01.603 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 04:56:43.105 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 10 6438 1 2025-07-24 04:57:43.471 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 04:57:43.513 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 04:57:42.917 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:57:43.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 04:57:43.303 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 04:57:43.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6438 1 Summary: total flows: 139, total bytes: 409722, total packets: 1010, avg bps: 897, avg pps: 0, avg bpp: 405 Time window: 2025-07-24 03:57:01 - 2025-07-24 04:57:53 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0042s User: 0.0000s Wall: 0.0019s flows/second: 75129.9 Runtime: 0.0019s