Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 19:59:12.090 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36948 10 6438 1 2025-07-20 20:00:12.489 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42796 10 6438 1 2025-07-20 20:01:05.883 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:01:05.802 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:01:05.943 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:01:05.779 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:01:05.731 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:01:12.895 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56890 10 6438 1 2025-07-20 19:57:59.753 00:05:00.611 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:02:13.310 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50654 10 6438 1 2025-07-20 19:58:59.755 00:05:00.607 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:03:13.732 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51486 10 6438 1 2025-07-20 20:04:14.119 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55902 10 6438 1 2025-07-20 20:05:14.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56848 10 6438 1 2025-07-20 20:06:05.707 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:06:05.623 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:06:05.797 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:06:05.863 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:06:05.881 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:06:14.921 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57732 10 6438 1 2025-07-20 20:07:15.329 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39552 10 6438 1 2025-07-20 20:03:59.754 00:05:00.612 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:08:15.693 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 12 10352 1 2025-07-20 20:04:59.757 00:05:00.605 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:09:16.180 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 10 6438 1 2025-07-20 20:10:16.595 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42478 10 6438 1 2025-07-20 20:11:06.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:11:05.884 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:11:06.117 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:11:06.115 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:11:06.111 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:11:16.996 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 10 6438 1 2025-07-20 20:12:17.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33562 10 6438 1 2025-07-20 20:13:17.770 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 10 6438 1 2025-07-20 20:09:59.755 00:05:00.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:14:18.142 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58752 10 6438 1 2025-07-20 20:10:59.759 00:05:00.610 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:15:18.544 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47616 10 6438 1 2025-07-20 20:16:05.967 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:16:05.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:16:06.206 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:16:06.091 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:16:06.290 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:16:18.943 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43332 10 6438 1 2025-07-20 20:17:19.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57078 10 6438 1 2025-07-20 20:18:19.759 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41374 10 6438 1 2025-07-20 20:19:20.180 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54672 10 6438 1 2025-07-20 20:15:59.762 00:05:00.612 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:20:20.577 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:32882 10 6438 1 2025-07-20 20:16:59.764 00:05:00.607 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:21:06.389 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:21:06.312 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:21:06.282 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:21:06.306 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:21:06.242 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:21:20.939 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6438 1 2025-07-20 20:22:21.344 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6438 1 2025-07-20 20:23:21.750 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36440 10 6438 1 2025-07-20 20:24:22.111 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 10 6438 1 2025-07-20 20:25:22.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 10 6438 1 2025-07-20 20:21:59.764 00:05:00.612 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:26:06.279 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:26:06.176 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:26:06.342 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:26:06.197 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:26:06.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:26:22.913 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6438 1 2025-07-20 20:22:59.765 00:05:00.608 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:27:23.313 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 10 6438 1 2025-07-20 20:28:23.716 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52098 10 6438 1 2025-07-20 20:29:24.117 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48370 10 6438 1 2025-07-20 20:30:24.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38766 10 6438 1 2025-07-20 20:31:06.486 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:31:06.474 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:31:06.239 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:31:06.438 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:31:06.335 00:00:00.008 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:31:24.919 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41410 10 6438 1 2025-07-20 20:27:59.765 00:05:00.612 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:32:25.322 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59960 10 6438 1 2025-07-20 20:28:59.769 00:05:00.607 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:33:25.691 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48170 10 6438 1 2025-07-20 20:34:26.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45826 10 6438 1 2025-07-20 20:35:26.519 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45322 10 6438 1 2025-07-20 20:36:06.619 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:36:06.404 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:36:06.426 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:36:06.538 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:36:06.543 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:36:26.930 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6438 1 2025-07-20 20:37:27.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35770 10 6438 1 2025-07-20 20:33:59.767 00:05:00.614 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:38:27.763 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:40004 10 6438 1 2025-07-20 20:34:59.770 00:05:00.608 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:39:28.139 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43244 12 6542 1 2025-07-20 20:40:28.554 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38980 10 6438 1 2025-07-20 20:41:06.502 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:41:06.560 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:41:06.501 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:41:06.707 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:41:06.584 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:41:28.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34612 12 6542 1 2025-07-20 20:42:29.360 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34320 10 6438 1 2025-07-20 20:43:29.779 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50366 10 6438 1 2025-07-20 20:39:59.770 00:05:00.612 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:44:30.194 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39054 10 6438 1 2025-07-20 20:40:59.773 00:05:00.606 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:45:30.606 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33732 10 6438 1 2025-07-20 20:46:06.823 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:46:06.746 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:46:06.809 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:46:06.741 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:46:06.743 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:46:31.017 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 10 6438 1 2025-07-20 20:47:31.426 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38944 10 6438 1 2025-07-20 20:48:31.833 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42928 10 6438 1 2025-07-20 20:49:32.241 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44234 10 6438 1 2025-07-20 20:45:59.772 00:05:00.610 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:50:32.602 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41584 10 6438 1 2025-07-20 20:46:59.775 00:05:00.604 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:51:06.797 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:51:06.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:51:06.637 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:51:06.715 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:51:06.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:51:33.011 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 10 6438 1 2025-07-20 20:52:33.372 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6438 1 2025-07-20 20:53:33.782 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40444 10 6438 1 2025-07-20 20:54:34.193 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53828 10 6438 1 2025-07-20 20:55:34.597 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59186 10 6438 1 2025-07-20 20:51:59.775 00:05:00.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 20:56:06.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:56:06.563 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:56:06.755 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 20:56:06.838 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:56:06.838 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 20:56:35.006 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 10 6438 1 2025-07-20 20:52:59.777 00:05:00.604 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 20:57:35.413 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 10 6438 1 2025-07-20 20:58:35.819 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6438 1 Summary: total flows: 140, total bytes: 420282, total packets: 1026, avg bps: 922, avg pps: 0, avg bpp: 409 Time window: 2025-07-20 19:57:59 - 2025-07-20 20:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0000s Wall: 0.0023s flows/second: 60084.2 Runtime: 0.0023s