Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 22:58:57.199 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45328 10 6452 1 2025-07-28 23:00:00.823 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:00:01.086 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:56:04.098 00:04:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 23:00:00.600 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:00:00.466 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:00:00.739 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:59:57.599 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43470 10 6452 1 2025-07-28 23:00:57.962 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49194 10 6452 1 2025-07-28 23:01:58.367 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56462 10 6452 1 2025-07-28 22:59:04.102 00:04:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:02:58.730 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48808 10 6452 1 2025-07-28 23:03:59.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50174 10 6452 1 2025-07-28 23:05:00.557 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:05:00.622 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:05:00.658 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:05:00.564 00:00:00.013 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:05:00.475 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:04:59.549 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54142 10 6452 1 2025-07-28 23:01:04.101 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-28 23:05:59.956 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 10 6452 1 2025-07-28 23:07:00.369 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-07-28 23:04:04.102 00:04:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:08:00.778 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37500 10 6452 1 2025-07-28 23:09:01.191 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-07-28 23:10:00.772 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:10:00.691 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:10:00.723 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:10:00.662 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:10:00.691 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:10:01.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40612 10 6452 1 2025-07-28 23:11:01.997 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41164 10 6452 1 2025-07-28 23:12:02.417 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34036 10 6452 1 2025-07-28 23:08:04.101 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-07-28 23:09:04.104 00:04:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:13:02.776 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45794 10 6452 1 2025-07-28 23:14:03.186 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53340 10 6452 1 2025-07-28 23:15:00.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:15:00.784 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:15:00.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:15:00.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:15:00.733 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:15:03.589 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41858 10 6452 1 2025-07-28 23:16:04.008 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 11 6504 1 2025-07-28 23:17:04.460 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-07-28 23:18:04.858 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52942 10 6452 1 2025-07-28 23:14:04.107 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-28 23:14:04.364 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-07-28 23:19:05.277 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 10 6452 1 2025-07-28 23:20:01.200 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:20:00.763 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:20:01.061 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:20:00.427 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:20:01.118 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:20:05.681 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-07-28 23:21:06.122 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-07-28 23:21:04.105 00:01:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-28 23:22:06.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44472 10 6452 1 2025-07-28 23:23:06.924 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:60124 10 6452 1 2025-07-28 23:24:07.300 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52218 10 6452 1 2025-07-28 23:25:00.979 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:25:00.934 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:25:00.869 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:25:00.936 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:25:01.018 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:21:04.108 00:04:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:25:07.701 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60706 10 6452 1 2025-07-28 23:26:08.115 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49870 10 6452 1 2025-07-28 23:23:04.105 00:04:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 23:27:08.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44862 10 6452 1 2025-07-28 23:28:08.928 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:59812 12 10367 1 2025-07-28 23:29:09.402 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59048 10 6452 1 2025-07-28 23:30:01.097 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:30:01.173 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:30:00.779 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:30:00.996 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:30:01.079 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:26:04.109 00:04:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:30:09.815 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50912 10 6452 1 2025-07-28 23:31:10.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36720 10 6452 1 2025-07-28 23:28:04.108 00:04:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 23:32:10.584 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44194 10 6452 1 2025-07-28 23:33:10.983 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51328 10 6452 1 2025-07-28 23:34:11.386 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46848 10 6452 1 2025-07-28 23:35:01.251 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:31:04.110 00:04:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:35:01.105 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:35:01.103 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:35:01.172 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:35:01.167 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:35:11.787 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51126 10 6452 1 2025-07-28 23:36:12.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44098 10 6452 1 2025-07-28 23:33:04.108 00:04:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 23:37:12.595 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50790 10 6452 1 2025-07-28 23:38:12.998 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47758 10 6452 1 2025-07-28 23:39:13.402 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52050 10 6452 1 2025-07-28 23:40:01.422 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:40:01.355 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:40:01.183 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:40:01.305 00:00:00.015 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:40:01.505 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:36:04.111 00:04:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:40:13.802 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58694 10 6452 1 2025-07-28 23:41:14.198 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 11 6504 1 2025-07-28 23:42:14.655 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-07-28 23:38:04.108 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-28 23:43:15.102 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48928 10 6452 1 2025-07-28 23:44:15.503 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44080 10 6452 1 2025-07-28 23:45:01.392 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:41:04.113 00:04:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 23:45:01.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:45:01.308 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:45:01.261 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:45:01.310 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:45:15.906 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53558 12 6556 1 2025-07-28 23:46:16.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56810 10 6452 1 2025-07-28 23:47:16.718 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58022 10 6452 1 2025-07-28 23:48:17.135 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6452 1 2025-07-28 23:49:17.498 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49372 10 6452 1 2025-07-28 23:50:01.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:50:01.367 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:45:04.112 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-28 23:50:01.367 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:50:01.405 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:50:01.500 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:50:17.903 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35204 12 6556 1 2025-07-28 23:46:04.114 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-28 23:51:18.317 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:49708 10 6452 1 2025-07-28 23:52:18.675 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-07-28 23:53:19.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44448 10 6452 1 2025-07-28 23:52:04.113 00:02:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-28 23:54:19.508 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 10 6452 1 2025-07-28 23:55:01.436 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 23:55:01.624 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 23:55:01.353 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 23:55:01.546 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:55:01.352 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 23:55:19.911 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44570 10 6452 1 2025-07-28 23:56:20.316 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60298 10 6452 1 2025-07-28 23:57:20.723 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43526 10 6452 1 2025-07-28 23:53:04.116 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-28 23:58:21.110 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46886 10 6452 1 Summary: total flows: 142, total bytes: 421227, total packets: 1028, avg bps: 891, avg pps: 0, avg bpp: 409 Time window: 2025-07-28 22:56:04 - 2025-07-28 23:59:04 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0029s User: 0.0014s Wall: 0.0031s flows/second: 45137.6 Runtime: 0.0032s