Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 05:58:46.487 00:00:10.510 TCP 1.101.0.1:3000 -> 23.104.0.1:42148 14 14266 1 2025-07-25 05:54:02.127 00:06:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 05:59:47.066 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39934 10 6438 1 2025-07-25 06:00:47.461 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53840 10 6438 1 2025-07-25 06:01:47.876 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57144 10 6438 1 2025-07-25 06:02:48.240 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59494 10 6438 1 2025-07-25 06:03:13.412 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:03:13.489 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:03:13.403 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:03:13.467 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:03:13.329 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:03:48.662 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41668 10 6438 1 2025-07-25 05:59:02.126 00:06:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:04:49.081 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34054 10 6438 1 2025-07-25 06:05:49.487 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42164 10 6438 1 2025-07-25 06:01:02.128 00:06:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:06:49.888 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44110 12 6542 1 2025-07-25 06:07:50.294 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6438 1 2025-07-25 06:08:13.681 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:08:13.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:08:13.589 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:08:13.450 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:08:13.598 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:08:50.702 00:00:10.517 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 14 14471 1 2025-07-25 06:09:51.259 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38660 10 6645 1 2025-07-25 06:06:02.128 00:06:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:10:51.660 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6645 1 2025-07-25 06:11:52.089 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 10 6645 1 2025-07-25 06:08:02.131 00:06:00.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:12:52.469 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34232 10 6645 1 2025-07-25 06:13:13.581 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:13:13.590 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:13:13.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:13:13.696 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:13:13.498 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:13:52.869 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6645 1 2025-07-25 06:14:53.236 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39364 10 6645 1 2025-07-25 06:15:53.637 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55090 10 6645 1 2025-07-25 06:16:54.001 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6645 1 2025-07-25 06:17:54.426 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45226 10 6645 1 2025-07-25 06:13:02.131 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:18:13.646 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:18:13.709 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:18:13.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:18:13.533 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:18:13.615 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:18:54.829 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53088 10 6645 1 2025-07-25 06:15:02.134 00:06:00.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:19:55.231 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 10 6645 1 2025-07-25 06:20:55.632 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40458 10 6645 1 2025-07-25 06:21:56.029 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60458 10 6645 1 2025-07-25 06:23:13.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:22:56.431 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51024 10 6645 1 2025-07-25 06:23:13.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:23:13.850 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:23:13.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:23:13.845 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:23:56.835 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:53828 12 6749 1 2025-07-25 06:20:02.136 00:06:00.432 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:24:57.262 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56004 10 6645 1 2025-07-25 06:25:57.677 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54784 10 6645 1 2025-07-25 06:22:02.143 00:06:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:26:58.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60294 10 6645 1 2025-07-25 06:27:58.479 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35278 10 6645 1 2025-07-25 06:28:13.997 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:28:13.916 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:28:13.925 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:28:13.622 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:28:13.915 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:28:58.897 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:45536 12 6749 1 2025-07-25 06:29:59.313 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6645 1 2025-07-25 06:30:59.715 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46296 10 6645 1 2025-07-25 06:27:02.140 00:06:00.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:32:00.129 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35100 10 6645 1 2025-07-25 06:33:13.908 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:33:14.001 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:33:14.057 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:33:13.743 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:33:00.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37292 10 6645 1 2025-07-25 06:33:13.825 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:29:02.145 00:06:00.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:34:00.961 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 10 6645 1 2025-07-25 06:35:01.329 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47886 10 6645 1 2025-07-25 06:36:01.741 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6645 1 2025-07-25 06:37:02.145 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48574 10 6645 1 2025-07-25 06:38:14.392 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:38:14.313 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:38:14.364 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:38:13.919 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:38:02.546 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:47462 12 10350 1 2025-07-25 06:38:14.309 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:34:02.142 00:06:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:39:03.029 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42926 10 6438 1 2025-07-25 06:40:03.429 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 10 6438 1 2025-07-25 06:36:02.145 00:06:00.424 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:41:03.833 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36600 10 6438 1 2025-07-25 06:42:04.233 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6438 1 2025-07-25 06:43:14.450 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:43:14.359 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:43:14.371 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:43:14.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:43:14.367 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:43:04.647 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51886 10 6438 1 2025-07-25 06:44:05.066 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56328 10 6438 1 2025-07-25 06:45:05.462 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36254 10 6438 1 2025-07-25 06:41:02.142 00:06:00.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:46:05.875 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 10 6438 1 2025-07-25 06:47:06.241 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46180 10 6438 1 2025-07-25 06:43:02.145 00:06:00.425 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:48:14.536 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:48:14.260 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:48:14.538 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:48:14.158 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:48:14.241 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:48:06.647 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54772 10 6438 1 2025-07-25 06:49:07.049 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57076 10 6438 1 2025-07-25 06:50:07.408 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39046 10 6438 1 2025-07-25 06:51:07.818 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38658 10 6438 1 2025-07-25 06:52:08.222 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55972 10 6438 1 2025-07-25 06:48:02.144 00:06:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 06:53:14.556 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:53:14.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:53:14.329 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:53:14.408 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:53:14.474 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:53:08.584 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53276 10 6438 1 2025-07-25 06:54:08.985 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33724 10 6438 1 2025-07-25 06:50:02.147 00:06:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 06:55:09.393 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 10 6438 1 2025-07-25 06:56:09.763 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44508 10 6438 1 2025-07-25 06:57:10.186 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45620 10 6438 1 2025-07-25 06:58:14.612 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 06:58:14.333 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 06:58:14.529 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 06:58:14.195 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:58:14.529 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 06:58:10.601 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54150 10 6438 1 Summary: total flows: 137, total bytes: 441918, total packets: 1034, avg bps: 916, avg pps: 0, avg bpp: 427 Time window: 2025-07-25 05:54:02 - 2025-07-25 06:58:20 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0028s User: 0.0018s Wall: 0.0028s flows/second: 48808.3 Runtime: 0.0028s