Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 19:59:20.968 00:00:10.364 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-10-20 19:55:44.365 00:05:09.797 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:00:31.774 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59188 1 40 1 2025-10-20 20:00:21.375 00:00:10.336 TCP 23.104.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:01:32.141 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49454 1 40 1 2025-10-20 20:01:21.754 00:00:10.324 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-10-20 19:57:44.347 00:05:00.786 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 19:57:46.979 00:05:00.654 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2556 1 2025-10-20 19:57:45.133 00:05:02.251 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:02:22.114 00:00:10.325 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-10-20 19:58:44.337 00:05:00.806 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 19:58:44.337 00:05:09.830 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:03:32.895 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36964 1 40 1 2025-10-20 20:03:22.474 00:00:10.359 TCP 23.104.0.1:36964 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:04:22.869 00:00:10.337 TCP 23.104.0.1:42694 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:04:22.932 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-10-20 19:59:54.683 00:05:49.727 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:05:23.308 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52286 10 6452 1 2025-10-20 20:05:23.245 00:00:10.325 TCP 23.104.0.1:52286 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:01:44.367 00:05:09.791 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:06:23.608 00:00:10.365 TCP 23.104.0.1:60008 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:02:56.979 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2460 1 2025-10-20 20:07:24.009 00:00:10.366 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:07:24.072 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44404 10 6452 1 2025-10-20 20:03:44.348 00:05:00.789 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:03:45.132 00:05:02.252 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:08:34.836 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35518 1 40 1 2025-10-20 20:08:24.412 00:00:10.361 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:04:44.338 00:05:00.809 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:04:44.339 00:05:09.830 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:09:24.807 00:00:10.337 TCP 23.104.0.1:51210 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:10:25.245 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58702 10 6452 1 2025-10-20 20:10:25.183 00:00:10.361 TCP 23.104.0.1:58702 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:05:54.683 00:05:49.727 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:11:25.578 00:00:10.361 TCP 23.104.0.1:60886 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:07:44.370 00:05:09.791 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:08:16.984 00:05:10.002 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2532 1 2025-10-20 20:12:26.051 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52872 10 6452 1 2025-10-20 20:12:25.988 00:00:10.365 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:13:26.455 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55984 9 6412 1 2025-10-20 20:13:26.391 00:00:10.373 TCP 23.104.0.1:55984 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:09:44.350 00:05:00.793 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:09:45.137 00:05:02.249 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:14:26.865 00:00:10.759 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 10 6452 1 2025-10-20 20:14:26.802 00:00:10.760 TCP 23.104.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:10:44.339 00:05:00.814 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:10:44.339 00:05:09.832 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:15:27.662 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32898 10 6452 1 2025-10-20 20:15:27.598 00:00:10.365 TCP 23.104.0.1:32898 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:16:28.000 00:00:10.365 TCP 23.104.0.1:49584 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:16:38.428 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49584 1 40 1 2025-10-20 20:11:54.684 00:05:49.731 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:17:28.407 00:00:10.368 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:17:38.838 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52046 1 40 1 2025-10-20 20:13:36.986 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-20 20:13:44.370 00:05:09.792 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:18:28.809 00:00:10.378 TCP 23.104.0.1:33296 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:19:39.655 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52062 1 40 1 2025-10-20 20:19:29.223 00:00:10.370 TCP 23.104.0.1:52062 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:15:44.350 00:05:00.793 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:15:45.142 00:05:02.249 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:20:29.690 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35284 9 6412 1 2025-10-20 20:20:29.627 00:00:10.374 TCP 23.104.0.1:35284 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:16:44.340 00:05:00.814 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:16:44.339 00:05:09.833 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:21:30.067 00:00:10.370 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:17:54.685 00:05:49.729 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:22:30.477 00:00:10.529 TCP 23.104.0.1:33084 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:18:56.989 00:05:00.042 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2660 1 2025-10-20 20:23:31.063 00:00:10.364 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:19:44.373 00:05:09.790 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:24:31.528 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43212 10 6452 1 2025-10-20 20:24:31.465 00:00:10.325 TCP 23.104.0.1:43212 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:25:31.830 00:00:12.656 TCP 23.104.0.1:56812 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:21:44.352 00:05:00.793 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:21:45.144 00:05:02.248 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:22:44.343 00:05:00.814 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:26:44.989 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57514 1 40 1 2025-10-20 20:26:34.569 00:00:10.358 TCP 23.104.0.1:57514 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:22:44.343 00:05:09.830 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:27:35.030 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 11 6504 1 2025-10-20 20:27:34.966 00:00:10.433 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:24:06.994 00:05:00.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2596 1 2025-10-20 20:28:45.877 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33562 1 40 1 2025-10-20 20:23:54.686 00:05:49.729 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:28:35.424 00:00:10.381 TCP 23.104.0.1:33562 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:29:35.845 00:00:10.369 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:29:46.276 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46188 1 40 1 2025-10-20 20:25:44.374 00:05:09.791 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:30:46.674 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 1 40 1 2025-10-20 20:30:36.247 00:00:10.365 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:27:44.355 00:05:00.794 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:31:36.649 00:00:10.365 TCP 23.104.0.1:33224 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:27:45.147 00:05:02.249 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:31:47.077 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33224 1 40 1 2025-10-20 20:32:37.072 00:00:10.362 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:32:37.134 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47062 10 6452 1 2025-10-20 20:28:44.344 00:05:00.815 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:28:44.344 00:05:09.832 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:29:17.002 00:05:10.037 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2488 1 2025-10-20 20:33:37.472 00:00:10.366 TCP 23.104.0.1:45898 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:29:54.689 00:05:49.729 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:34:37.872 00:00:10.336 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:34:48.270 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50824 1 40 1 2025-10-20 20:35:38.261 00:00:10.365 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:35:38.324 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45918 10 6452 1 2025-10-20 20:31:44.378 00:05:09.788 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:36:38.666 00:00:10.367 TCP 23.104.0.1:45282 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:33:44.356 00:05:00.793 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:37:39.081 00:00:10.363 TCP 23.104.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:33:45.150 00:05:02.250 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:34:44.347 00:05:00.813 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:38:39.489 00:00:10.364 TCP 23.104.0.1:34262 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:34:37.041 00:05:10.008 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2604 1 2025-10-20 20:34:44.347 00:05:09.830 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:39:39.894 00:00:10.336 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:39:39.958 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:52370 9 6412 1 2025-10-20 20:35:54.690 00:05:49.729 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:40:50.695 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 1 40 1 2025-10-20 20:40:40.270 00:00:10.362 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:41:40.672 00:00:10.958 TCP 23.104.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:37:44.379 00:05:09.789 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:41:40.735 00:00:10.959 TCP 1.101.0.1:3000 -> 23.104.0.1:37602 9 6412 1 2025-10-20 20:42:41.735 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57074 10 6452 1 2025-10-20 20:42:41.671 00:00:10.364 TCP 23.104.0.1:57074 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:39:44.358 00:05:00.794 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:39:45.149 00:05:02.251 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:43:42.078 00:00:10.361 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:43:42.141 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 9 6412 1 2025-10-20 20:39:57.047 00:05:10.011 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2548 1 2025-10-20 20:40:44.348 00:05:00.813 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:44:42.481 00:00:10.635 TCP 23.104.0.1:51592 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:40:44.348 00:05:09.830 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:44:53.179 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51592 1 40 1 2025-10-20 20:45:43.156 00:00:10.539 TCP 23.104.0.1:49526 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:45:43.226 00:00:10.533 TCP 1.101.0.1:3000 -> 23.104.0.1:49526 9 6412 1 2025-10-20 20:41:54.690 00:05:49.730 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:46:43.743 00:00:10.373 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:46:43.806 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48560 9 6412 1 2025-10-20 20:47:44.151 00:00:11.789 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:43:44.380 00:05:09.790 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:48:45.989 00:00:10.367 TCP 23.104.0.1:39728 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:48:56.420 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39728 1 40 1 2025-10-20 20:45:17.058 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-20 20:45:44.359 00:05:00.797 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:45:45.151 00:05:02.250 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:49:46.394 00:00:10.322 TCP 23.104.0.1:35238 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:49:56.779 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35238 1 40 1 2025-10-20 20:46:44.350 00:05:00.817 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:46:44.349 00:05:09.830 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:50:46.825 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48224 9 6412 1 2025-10-20 20:50:46.763 00:00:10.363 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:51:47.172 00:00:10.367 TCP 23.104.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:51:47.234 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47506 9 6412 1 2025-10-20 20:47:54.694 00:05:49.732 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-10-20 20:52:47.585 00:00:10.325 TCP 23.104.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:49:44.382 00:05:09.789 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-10-20 20:53:47.947 00:00:10.328 TCP 23.104.0.1:33202 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:53:48.012 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33202 10 6452 1 2025-10-20 20:50:37.063 00:05:10.008 OSPF 23.0.6.2:0 -> 224.0.0.5:0 39 2832 1 2025-10-20 20:54:48.308 00:00:10.364 TCP 23.104.0.1:41972 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:51:44.366 00:05:00.791 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-10-20 20:51:45.158 00:05:02.246 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 20:55:48.775 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54914 9 6412 1 2025-10-20 20:55:48.712 00:00:10.328 TCP 23.104.0.1:54914 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:52:44.356 00:05:00.813 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-10-20 20:52:44.356 00:05:09.826 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-10-20 20:56:49.082 00:00:10.360 TCP 23.104.0.1:50618 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:57:49.478 00:00:10.334 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-10-20 20:57:59.876 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50056 1 40 1 2025-10-20 20:53:54.696 00:05:49.735 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 Summary: total flows: 171, total bytes: 310013, total packets: 2003, avg bps: 645, avg pps: 0, avg bpp: 154 Time window: 2025-10-20 19:55:44 - 2025-10-20 20:59:44 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 81819.1 Runtime: 0.0021s