Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 18:58:47.723 00:00:10.463 TCP 1.101.0.1:3000 -> 23.104.0.1:47434 12 10352 1 2025-07-20 18:59:48.243 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42760 10 6438 1 2025-07-20 19:00:48.651 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53904 10 6438 1 2025-07-20 19:01:04.637 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:01:04.660 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:01:04.552 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:01:04.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:01:04.696 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:01:49.060 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58910 10 6438 1 2025-07-20 18:57:59.725 00:05:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:02:49.466 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 10 6438 1 2025-07-20 18:58:59.729 00:05:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:03:49.913 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46178 10 6438 1 2025-07-20 19:04:50.320 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 10 6438 1 2025-07-20 19:06:04.807 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:06:04.627 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:06:04.637 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:06:04.726 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:06:04.618 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:05:50.753 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39392 10 6438 1 2025-07-20 19:06:51.157 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6438 1 2025-07-20 19:03:59.727 00:05:00.622 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:07:51.562 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60628 10 6438 1 2025-07-20 19:04:59.729 00:05:00.617 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:08:51.956 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56790 10 6438 1 2025-07-20 19:09:52.362 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39956 10 6438 1 2025-07-20 19:10:52.764 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 10 6438 1 2025-07-20 19:11:05.268 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:11:04.800 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:11:04.934 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:11:05.279 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:11:05.018 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:11:53.182 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 10 6438 1 2025-07-20 19:12:53.538 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6438 1 2025-07-20 19:09:59.728 00:05:00.622 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:13:53.949 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 10 6438 1 2025-07-20 19:10:59.729 00:05:00.617 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:14:54.359 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6438 1 2025-07-20 19:16:04.881 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:16:04.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:16:04.926 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:16:04.803 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:15:54.760 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44748 10 6438 1 2025-07-20 19:16:05.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:16:55.168 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39396 10 6438 1 2025-07-20 19:17:55.565 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6438 1 2025-07-20 19:18:55.924 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59720 10 6438 1 2025-07-20 19:15:59.729 00:05:00.623 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:19:56.329 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6438 1 2025-07-20 19:16:59.731 00:05:00.617 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:21:05.001 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:21:04.921 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:21:04.760 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:21:04.917 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:21:04.989 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:20:56.727 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43738 10 6438 1 2025-07-20 19:21:57.147 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55982 10 6438 1 2025-07-20 19:22:57.564 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6438 1 2025-07-20 19:23:57.973 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55424 10 6438 1 2025-07-20 19:24:58.376 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50728 10 6438 1 2025-07-20 19:21:59.729 00:05:00.624 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:26:04.872 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:26:05.061 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:26:05.069 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:26:04.963 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:26:04.955 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:25:58.777 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 10 6438 1 2025-07-20 19:22:59.731 00:05:00.619 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:26:59.185 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6438 1 2025-07-20 19:27:59.592 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59238 10 6438 1 2025-07-20 19:29:00.008 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6438 1 2025-07-20 19:30:00.420 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39308 10 6438 1 2025-07-20 19:31:05.315 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:31:05.352 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:31:05.152 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:31:05.233 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:31:05.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:31:00.790 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41514 10 6438 1 2025-07-20 19:27:59.730 00:05:00.624 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:32:01.224 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 10 6438 1 2025-07-20 19:28:59.733 00:05:00.621 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:33:01.627 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36058 10 6438 1 2025-07-20 19:34:02.035 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54816 10 6438 1 2025-07-20 19:35:02.436 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6438 1 2025-07-20 19:36:05.329 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:36:05.331 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.062 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.246 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:36:02.840 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 10 6438 1 2025-07-20 19:37:03.263 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 10 6438 1 2025-07-20 19:33:59.732 00:05:00.627 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:38:03.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6438 1 2025-07-20 19:34:59.747 00:05:00.608 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:39:04.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55866 10 6438 1 2025-07-20 19:40:04.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47060 10 6438 1 2025-07-20 19:41:05.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:41:05.608 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:41:05.440 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:41:05.346 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:41:05.619 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:41:04.916 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41498 10 6438 1 2025-07-20 19:42:05.318 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 10 6438 1 2025-07-20 19:43:05.692 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6438 1 2025-07-20 19:39:59.744 00:05:00.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:44:06.107 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45498 10 6438 1 2025-07-20 19:40:59.747 00:05:00.610 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:45:06.484 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55136 10 6438 1 2025-07-20 19:46:05.573 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:46:05.493 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:46:05.377 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:46:05.490 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:46:05.493 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:46:06.883 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6438 1 2025-07-20 19:47:07.283 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40366 10 6438 1 2025-07-20 19:48:07.683 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40508 10 6438 1 2025-07-20 19:49:08.104 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 10 6438 1 2025-07-20 19:45:59.745 00:05:00.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:50:08.507 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56226 10 6438 1 2025-07-20 19:46:59.749 00:05:00.609 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:51:05.767 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:51:05.591 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:51:05.313 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:51:05.685 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:51:05.685 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:51:08.921 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6438 1 2025-07-20 19:52:09.332 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6438 1 2025-07-20 19:53:09.734 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57590 10 6438 1 2025-07-20 19:54:10.134 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6438 1 2025-07-20 19:55:10.498 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54568 10 6438 1 2025-07-20 19:51:59.752 00:05:00.611 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 19:56:06.051 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:56:05.867 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:56:05.967 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:56:06.430 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 19:56:06.431 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 19:56:10.901 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50316 10 6438 1 2025-07-20 19:52:59.754 00:05:00.606 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 19:57:11.305 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36102 10 6438 1 2025-07-20 19:58:11.704 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6438 1 Summary: total flows: 140, total bytes: 420074, total packets: 1022, avg bps: 927, avg pps: 0, avg bpp: 411 Time window: 2025-07-20 18:57:59 - 2025-07-20 19:58:22 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0018s User: 0.0028s Wall: 0.0020s flows/second: 69681.1 Runtime: 0.0020s