Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 06:59:40.004 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58282 10 6452 1 2025-08-01 07:00:40.405 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38590 10 6452 1 2025-08-01 07:01:36.843 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:01:36.689 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:01:36.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:01:36.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:01:36.758 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:01:40.810 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36802 10 6452 1 2025-08-01 06:58:05.793 00:05:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:02:41.214 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58090 10 6452 1 2025-08-01 06:59:05.791 00:05:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:03:41.616 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:51604 10 6452 1 2025-08-01 07:04:42.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-08-01 07:05:42.516 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48436 10 6452 1 2025-08-01 07:06:36.960 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:06:36.881 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:06:36.873 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:06:36.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:06:36.878 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:06:42.915 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40134 10 6452 1 2025-08-01 07:07:43.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49050 10 6452 1 2025-08-01 07:04:05.796 00:05:00.281 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:08:43.725 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40002 10 6452 1 2025-08-01 07:05:05.793 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:09:44.133 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35898 10 6452 1 2025-08-01 07:10:44.534 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42576 10 6452 1 2025-08-01 07:11:36.736 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:11:36.744 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:11:36.685 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:11:36.826 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:11:36.910 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:11:44.928 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:42586 10 6452 1 2025-08-01 07:12:45.351 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43084 10 6452 1 2025-08-01 07:13:45.752 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 12 10367 1 2025-08-01 07:10:05.808 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:14:46.248 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-08-01 07:11:05.795 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:15:46.605 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48198 10 6452 1 2025-08-01 07:16:37.185 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:16:37.284 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:16:37.053 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:16:37.108 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:16:37.190 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:16:47.018 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44496 10 6452 1 2025-08-01 07:17:47.434 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:34816 10 6452 1 2025-08-01 07:18:47.815 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-08-01 07:19:48.224 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6452 1 2025-08-01 07:16:05.799 00:05:00.279 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:20:48.630 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 10 6452 1 2025-08-01 07:17:05.795 00:05:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:21:37.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:21:37.149 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:21:36.976 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:21:36.937 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:21:37.021 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:21:49.035 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35970 10 6452 1 2025-08-01 07:22:49.441 00:00:10.315 TCP 1.101.0.1:3000 -> 23.104.0.1:34096 10 6452 1 2025-08-01 07:23:49.800 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39108 10 6452 1 2025-08-01 07:24:50.205 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43276 10 6452 1 2025-08-01 07:25:50.626 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:42696 10 6452 1 2025-08-01 07:22:05.803 00:05:00.278 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:26:37.090 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:26:37.182 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:26:37.203 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:26:37.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:26:37.343 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:26:50.984 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 10 6452 1 2025-08-01 07:23:05.800 00:05:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:27:51.390 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53414 10 6452 1 2025-08-01 07:28:51.800 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:52126 12 10367 1 2025-08-01 07:29:52.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55726 10 6452 1 2025-08-01 07:30:52.685 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33106 10 6452 1 2025-08-01 07:31:37.447 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:31:37.172 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:31:37.174 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:31:37.418 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:31:37.340 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:31:53.053 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 2025-08-01 07:28:05.804 00:05:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:32:53.419 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54162 10 6452 1 2025-08-01 07:29:05.802 00:05:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:33:53.825 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33554 10 6452 1 2025-08-01 07:34:54.227 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38908 10 6452 1 2025-08-01 07:35:54.588 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52906 10 6452 1 2025-08-01 07:36:37.542 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:36:37.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:36:37.373 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:36:37.569 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:36:37.460 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:36:54.945 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57976 11 6492 1 2025-08-01 07:34:05.807 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:37:55.359 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33062 10 6452 1 2025-08-01 07:35:05.804 00:05:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:38:55.763 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45058 10 6452 1 2025-08-01 07:39:56.132 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45102 10 6452 1 2025-08-01 07:40:56.536 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57398 10 6452 1 2025-08-01 07:41:37.706 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:41:37.660 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:41:37.576 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:41:37.545 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:41:37.624 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:41:56.933 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:60736 10 6452 1 2025-08-01 07:42:57.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41104 10 6452 1 2025-08-01 07:43:57.758 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35694 10 6452 1 2025-08-01 07:40:05.810 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:44:58.173 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34410 10 6452 1 2025-08-01 07:41:05.809 00:05:00.276 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:45:58.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40994 10 6452 1 2025-08-01 07:46:37.710 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:46:37.546 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:46:37.639 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:46:37.416 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:46:37.628 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:46:58.986 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42770 10 6452 1 2025-08-01 07:47:59.393 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54140 10 6452 1 2025-08-01 07:48:59.753 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 2025-08-01 07:46:05.811 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:50:00.160 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:46542 10 6452 1 2025-08-01 07:47:05.810 00:05:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:51:00.532 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49810 10 6452 1 2025-08-01 07:51:37.737 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:51:37.733 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:51:37.698 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:51:37.733 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:51:37.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:52:00.937 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43006 10 6452 1 2025-08-01 07:53:01.362 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59162 10 6452 1 2025-08-01 07:54:01.770 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34334 10 6452 1 2025-08-01 07:55:02.142 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41394 10 6452 1 2025-08-01 07:52:05.813 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 07:56:02.502 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40438 10 6452 1 2025-08-01 07:56:37.675 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 07:56:37.592 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:56:37.890 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 07:56:37.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 07:56:37.817 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 07:53:05.810 00:05:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 07:57:02.906 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56102 10 6452 1 2025-08-01 07:58:03.327 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56136 10 6452 1 Summary: total flows: 139, total bytes: 418418, total packets: 1015, avg bps: 927, avg pps: 0, avg bpp: 412 Time window: 2025-08-01 06:58:05 - 2025-08-01 07:58:13 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0032s User: 0.0010s Wall: 0.0031s flows/second: 44480.7 Runtime: 0.0031s