Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 11:58:39.921 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:52524 12 10367 1 2025-08-01 11:59:40.409 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48054 10 6452 1 2025-08-01 12:00:40.820 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44082 10 6452 1 2025-08-01 12:01:42.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:01:42.827 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:01:42.804 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:01:42.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:01:42.805 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:01:41.226 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44684 10 6452 1 2025-08-01 11:58:05.896 00:05:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:02:41.641 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50250 10 6452 1 2025-08-01 11:59:05.894 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:03:42.050 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54710 12 6556 1 2025-08-01 12:04:42.454 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46700 10 6452 1 2025-08-01 12:05:42.859 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6452 1 2025-08-01 12:06:42.691 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:06:42.858 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:06:42.947 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:06:42.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:06:42.775 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:06:43.235 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51732 10 6452 1 2025-08-01 12:07:43.597 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45818 10 6452 1 2025-08-01 12:04:05.898 00:05:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:08:44.006 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60934 10 6452 1 2025-08-01 12:05:05.895 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:09:44.409 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57962 10 6452 1 2025-08-01 12:10:44.809 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:51842 10 6452 1 2025-08-01 12:11:42.950 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:11:42.948 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:11:42.817 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:11:42.944 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:11:43.027 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:11:45.186 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54628 10 6452 1 2025-08-01 12:12:45.553 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:42276 10 6452 1 2025-08-01 12:13:45.906 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-08-01 12:10:05.899 00:05:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:14:46.310 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38956 10 6452 1 2025-08-01 12:11:05.898 00:05:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:15:46.712 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49032 10 6452 1 2025-08-01 12:16:43.589 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:16:43.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:16:43.354 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:16:43.507 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:16:43.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:16:47.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45600 10 6452 1 2025-08-01 12:17:47.522 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46524 10 6452 1 2025-08-01 12:18:47.923 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40550 10 6452 1 2025-08-01 12:19:48.336 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-08-01 12:16:05.900 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:20:48.738 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 10 6452 1 2025-08-01 12:17:05.900 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:21:43.207 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:21:43.187 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:21:43.003 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:21:43.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:21:43.124 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:21:49.143 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6452 1 2025-08-01 12:22:49.506 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53240 10 6452 1 2025-08-01 12:23:49.904 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50652 10 6452 1 2025-08-01 12:24:50.270 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34912 10 6452 1 2025-08-01 12:25:50.677 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50584 10 6452 1 2025-08-01 12:22:05.901 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:26:43.324 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:26:43.309 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:26:43.244 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:26:43.170 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:26:43.242 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:26:51.111 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54160 10 6452 1 2025-08-01 12:23:05.899 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:27:51.517 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57426 10 6452 1 2025-08-01 12:28:51.924 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6452 1 2025-08-01 12:29:52.327 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 10 6452 1 2025-08-01 12:30:52.690 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59064 10 6452 1 2025-08-01 12:31:43.362 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:31:43.416 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:31:43.329 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:31:43.366 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:31:43.449 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:31:53.110 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35816 10 6452 1 2025-08-01 12:28:05.904 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:32:53.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49336 10 6452 1 2025-08-01 12:29:05.900 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:33:53.923 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59372 10 6452 1 2025-08-01 12:34:54.338 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-08-01 12:35:54.697 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50516 10 6452 1 2025-08-01 12:36:43.531 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:36:43.450 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:36:43.530 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:36:43.270 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:36:43.447 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:36:55.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40206 10 6452 1 2025-08-01 12:37:55.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36708 10 6452 1 2025-08-01 12:34:05.904 00:05:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:35:05.902 00:05:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:38:55.928 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:58426 12 10367 1 2025-08-01 12:39:56.421 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42210 10 6452 1 2025-08-01 12:40:56.829 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56074 10 6452 1 2025-08-01 12:41:43.497 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:41:43.613 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:41:43.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:41:43.724 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:41:43.806 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:41:57.198 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 10 6452 1 2025-08-01 12:42:57.607 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42800 10 6452 1 2025-08-01 12:40:05.905 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:43:58.014 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 10 6452 1 2025-08-01 12:44:58.423 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51560 10 6452 1 2025-08-01 12:41:05.904 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:45:58.832 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:55438 10 6452 1 2025-08-01 12:46:43.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:46:43.839 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:46:43.607 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:46:43.721 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:46:43.847 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:46:59.223 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40700 10 6452 1 2025-08-01 12:47:59.634 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42774 10 6452 1 2025-08-01 12:49:00.040 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55772 10 6452 1 2025-08-01 12:46:05.907 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:50:00.402 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53334 10 6452 1 2025-08-01 12:47:05.904 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:51:00.763 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45808 10 6452 1 2025-08-01 12:51:43.794 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:51:43.606 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:51:43.713 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:51:43.646 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:51:43.711 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:52:01.171 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47376 10 6452 1 2025-08-01 12:53:01.575 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39286 10 6452 1 2025-08-01 12:54:01.936 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:33438 10 6452 1 2025-08-01 12:55:02.341 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48432 10 6452 1 2025-08-01 12:52:05.908 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 12:56:02.747 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 10 6452 1 2025-08-01 12:56:43.899 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 12:56:43.976 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 12:56:43.834 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:56:43.605 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 12:56:43.692 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:53:05.905 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 12:57:03.173 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56290 10 6452 1 2025-08-01 12:58:03.578 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42496 10 6452 1 Summary: total flows: 140, total bytes: 424934, total packets: 1026, avg bps: 942, avg pps: 0, avg bpp: 414 Time window: 2025-08-01 11:58:05 - 2025-08-01 12:58:13 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0023s User: 0.0023s Wall: 0.0020s flows/second: 69131.5 Runtime: 0.0020s