Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 00:58:45.123 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:45012 12 10367 1 2025-07-29 00:59:45.599 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 10 6452 1 2025-07-29 01:00:02.907 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:00:02.957 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:00:02.911 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:00:02.844 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:00:02.928 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:00:46.024 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59700 10 6452 1 2025-07-29 01:01:46.425 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:37386 10 6452 1 2025-07-29 00:57:04.134 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-07-29 01:02:46.782 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55546 10 6452 1 2025-07-29 00:59:04.132 00:04:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:03:47.147 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59888 10 6452 1 2025-07-29 01:04:47.549 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36236 10 6452 1 2025-07-29 01:05:02.949 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:05:02.763 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:05:02.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:05:02.980 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:05:02.866 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:05:47.976 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59264 10 6452 1 2025-07-29 01:03:04.394 00:03:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 440 1 2025-07-29 01:06:48.391 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54872 10 6452 1 2025-07-29 01:07:48.790 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 10 6452 1 2025-07-29 01:04:04.132 00:04:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:08:49.162 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56538 10 6452 1 2025-07-29 01:09:49.557 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 10 6452 1 2025-07-29 01:10:03.255 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:10:03.098 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:10:02.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:10:03.200 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:10:03.173 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:07:04.134 00:04:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:10:49.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55326 10 6452 1 2025-07-29 01:11:50.363 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-07-29 01:12:50.725 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51962 10 6452 1 2025-07-29 01:09:04.132 00:04:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:13:51.137 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:55366 12 10365 1 2025-07-29 01:15:03.535 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:15:03.488 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:15:03.313 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:15:03.404 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:14:51.612 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6452 1 2025-07-29 01:15:03.452 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:15:52.025 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41518 10 6452 1 2025-07-29 01:12:04.136 00:04:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:16:52.422 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51462 10 6452 1 2025-07-29 01:17:52.780 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59220 10 6452 1 2025-07-29 01:14:04.134 00:06:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-29 01:18:53.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58998 10 6452 1 2025-07-29 01:20:03.246 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:20:03.288 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:20:03.166 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:20:03.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:19:53.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-07-29 01:20:03.162 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:20:53.995 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44170 10 6452 1 2025-07-29 01:17:04.137 00:04:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:21:54.400 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37264 10 6452 1 2025-07-29 01:22:54.803 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37990 10 6452 1 2025-07-29 01:23:55.207 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52066 10 6452 1 2025-07-29 01:25:04.657 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:25:04.334 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:21:04.137 00:04:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:25:04.632 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:25:04.258 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:25:04.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:24:55.609 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60134 10 6452 1 2025-07-29 01:22:04.139 00:04:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:25:56.015 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:60678 10 6452 1 2025-07-29 01:26:56.372 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44072 10 6452 1 2025-07-29 01:27:56.774 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38246 10 6452 1 2025-07-29 01:28:57.190 00:00:10.512 TCP 1.101.0.1:3000 -> 23.104.0.1:58930 14 14280 1 2025-07-29 01:30:03.648 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:30:03.511 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:26:04.137 00:04:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:30:03.474 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:30:03.494 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:30:03.565 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:29:57.744 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:49078 10 6452 1 2025-07-29 01:30:58.123 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52546 10 6452 1 2025-07-29 01:27:04.141 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-29 01:31:58.540 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60630 10 6452 1 2025-07-29 01:32:58.959 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6452 1 2025-07-29 01:33:59.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 10 6452 1 2025-07-29 01:35:04.247 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:35:04.168 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:31:04.139 00:04:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:35:04.159 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:35:03.762 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:35:04.164 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:34:59.781 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6452 1 2025-07-29 01:36:00.191 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52306 10 6452 1 2025-07-29 01:37:00.599 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59826 10 6452 1 2025-07-29 01:34:04.143 00:04:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:38:00.965 00:00:10.696 TCP 1.101.0.1:3000 -> 23.104.0.1:47236 10 6452 1 2025-07-29 01:39:01.712 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40652 10 6452 1 2025-07-29 01:36:04.140 00:04:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:40:03.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:40:03.638 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:40:03.741 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:40:03.608 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:40:03.824 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:40:02.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42922 10 6452 1 2025-07-29 01:41:02.534 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6452 1 2025-07-29 01:42:02.931 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:48418 10 6452 1 2025-07-29 01:39:04.142 00:04:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:43:03.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40442 10 6452 1 2025-07-29 01:44:03.723 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59496 10 6452 1 2025-07-29 01:45:03.814 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:45:03.866 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:41:04.140 00:04:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:45:03.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:45:03.725 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:45:03.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:45:04.134 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55618 10 6452 1 2025-07-29 01:46:04.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47366 10 6452 1 2025-07-29 01:47:04.939 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:58998 10 6452 1 2025-07-29 01:44:04.143 00:04:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:48:05.317 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60150 10 6452 1 2025-07-29 01:49:05.723 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51698 10 6452 1 2025-07-29 01:50:03.918 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:50:03.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:46:04.141 00:04:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 01:50:03.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:50:03.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:50:03.835 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:50:06.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41412 10 6452 1 2025-07-29 01:51:06.519 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38332 10 6452 1 2025-07-29 01:52:06.922 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44528 10 6452 1 2025-07-29 01:49:04.145 00:04:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:53:07.335 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 12 10367 1 2025-07-29 01:54:07.814 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 10 6452 1 2025-07-29 01:55:04.291 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 01:55:04.208 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:55:04.262 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 01:55:04.269 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 01:55:04.220 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 01:55:08.215 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39256 10 6452 1 2025-07-29 01:51:04.142 00:06:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-29 01:56:08.579 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46676 10 6452 1 2025-07-29 01:57:08.986 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56752 10 6452 1 2025-07-29 01:54:04.146 00:04:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 01:58:09.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55266 10 6452 1 Summary: total flows: 143, total bytes: 436694, total packets: 1032, avg bps: 950, avg pps: 0, avg bpp: 423 Time window: 2025-07-29 00:57:04 - 2025-07-29 01:58:19 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0029s User: 0.0010s Wall: 0.0027s flows/second: 53101.9 Runtime: 0.0027s