Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 12:59:03.984 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:59600 12 10365 1 2025-08-01 13:00:04.465 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47240 10 6452 1 2025-08-01 13:01:04.869 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37726 10 6452 1 2025-08-01 13:01:44.145 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:01:44.279 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:01:44.165 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:01:44.210 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:01:44.294 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 12:58:05.909 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:02:05.239 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-08-01 12:59:05.908 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:03:05.636 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6452 1 2025-08-01 13:04:06.059 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59376 10 6452 1 2025-08-01 13:05:06.461 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50518 10 6452 1 2025-08-01 13:06:06.863 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56226 10 6452 1 2025-08-01 13:06:44.029 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:06:43.912 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:06:44.046 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:06:44.046 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:06:44.129 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:07:07.287 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 10 6452 1 2025-08-01 13:04:05.911 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:08:07.688 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49660 10 6452 1 2025-08-01 13:05:05.908 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:09:08.112 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:52352 12 10367 1 2025-08-01 13:10:08.557 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51670 10 6452 1 2025-08-01 13:11:08.955 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56140 10 6452 1 2025-08-01 13:11:44.130 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:11:44.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:11:44.162 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:11:44.197 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:11:44.281 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:12:09.367 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41880 10 6452 1 2025-08-01 13:13:09.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 10 6452 1 2025-08-01 13:10:05.913 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:14:10.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-08-01 13:11:05.910 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:15:10.588 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59674 10 6452 1 2025-08-01 13:16:10.993 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46860 10 6452 1 2025-08-01 13:16:44.459 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:16:44.328 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:16:43.815 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:16:44.376 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:16:44.271 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:17:11.392 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2025-08-01 13:18:11.796 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 10 6452 1 2025-08-01 13:19:12.198 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:56162 12 10365 1 2025-08-01 13:16:05.914 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:20:12.640 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52838 10 6452 1 2025-08-01 13:17:05.913 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:21:13.054 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44356 10 6452 1 2025-08-01 13:21:44.256 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:21:44.400 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:21:44.348 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:21:44.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:21:44.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:22:13.457 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55720 10 6452 1 2025-08-01 13:23:13.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-08-01 13:24:14.225 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43038 10 6452 1 2025-08-01 13:25:14.630 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6452 1 2025-08-01 13:22:05.919 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:26:15.069 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53580 10 6452 1 2025-08-01 13:26:44.619 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:26:44.859 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:26:44.772 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:26:44.866 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:26:44.948 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:23:05.917 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:27:15.477 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43880 10 6452 1 2025-08-01 13:28:15.902 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49340 10 6452 1 2025-08-01 13:29:16.318 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42230 10 6452 1 2025-08-01 13:30:16.689 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43956 10 6452 1 2025-08-01 13:31:17.102 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44758 10 6452 1 2025-08-01 13:31:44.712 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:31:44.574 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:31:44.518 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:31:44.474 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:31:44.630 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:28:05.922 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:32:17.467 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54672 10 6452 1 2025-08-01 13:29:05.918 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:33:17.872 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:33850 10 6452 1 2025-08-01 13:34:18.318 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40288 10 6452 1 2025-08-01 13:35:18.683 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53626 10 6452 1 2025-08-01 13:36:19.105 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54068 10 6452 1 2025-08-01 13:36:44.732 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:36:44.560 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:36:44.681 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:36:44.609 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:36:44.764 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:37:19.467 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:40662 10 6452 1 2025-08-01 13:34:05.923 00:05:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:38:19.860 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46496 10 6452 1 2025-08-01 13:35:05.920 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:39:20.279 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51462 10 6452 1 2025-08-01 13:40:20.681 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36240 10 6452 1 2025-08-01 13:41:21.042 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50432 10 6452 1 2025-08-01 13:41:44.674 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:41:44.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:41:44.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:41:44.671 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:41:44.753 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:42:21.453 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52386 10 6452 1 2025-08-01 13:43:21.818 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 10 6452 1 2025-08-01 13:40:05.923 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:44:22.181 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35210 10 6452 1 2025-08-01 13:41:05.921 00:05:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:45:22.582 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50582 10 6452 1 2025-08-01 13:46:23.006 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34122 10 6452 1 2025-08-01 13:46:44.911 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:46:44.957 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:46:44.820 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:46:44.831 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:46:44.915 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:47:23.408 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39172 10 6452 1 2025-08-01 13:48:23.806 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38440 10 6452 1 2025-08-01 13:49:24.213 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47204 10 6452 1 2025-08-01 13:46:05.927 00:05:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:50:24.612 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:43906 10 6452 1 2025-08-01 13:47:05.925 00:05:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:51:24.984 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50122 10 6452 1 2025-08-01 13:51:44.949 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:51:44.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:51:44.649 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:51:44.887 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:51:44.969 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:52:25.393 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52936 10 6452 1 2025-08-01 13:53:25.805 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45284 10 6452 1 2025-08-01 13:54:26.207 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36916 10 6452 1 2025-08-01 13:55:26.607 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51060 10 6452 1 2025-08-01 13:52:05.932 00:05:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-01 13:56:27.010 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37904 10 6452 1 2025-08-01 13:56:45.275 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 13:56:45.005 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 13:56:45.007 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 13:56:45.015 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:56:45.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 13:53:05.940 00:05:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-01 13:57:27.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45906 10 6452 1 2025-08-01 13:58:27.818 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:38526 10 6452 1 Summary: total flows: 140, total bytes: 428741, total packets: 1026, avg bps: 944, avg pps: 0, avg bpp: 417 Time window: 2025-08-01 12:58:05 - 2025-08-01 13:58:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0012s Wall: 0.0023s flows/second: 61758.8 Runtime: 0.0023s