Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 04:59:09.835 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:59:09.840 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:00:09.835 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:00:08.050 00:00:00.031 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:00:09.840 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:00:08.053 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:01:09.841 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:02:09.840 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:01:09.835 00:01:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:03:09.838 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:03:09.840 00:01:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:04:09.836 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:05:09.841 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:05:08.116 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:05:09.836 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:05:08.114 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:06:09.837 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:06:09.841 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:07:09.841 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:07:09.840 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:08:09.839 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:08:09.841 00:01:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 05:09:09.838 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:10:09.842 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 05:10:08.144 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:10:09.839 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:10:08.141 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:11:09.840 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:11:09.841 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 05:12:09.842 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 05:12:09.840 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:13:09.842 00:01:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 05:13:09.840 00:01:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:15:09.842 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 05:15:08.246 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:15:09.840 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:15:08.244 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:16:09.841 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:16:09.843 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 05:17:09.844 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:17:09.842 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:18:09.841 00:01:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:18:09.844 00:01:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:20:09.840 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:20:08.621 00:00:00.025 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:20:09.844 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:20:08.624 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:21:09.844 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:21:09.840 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:22:09.844 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:22:09.841 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:23:09.845 00:01:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:23:09.841 00:01:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:25:09.845 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:25:08.470 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:25:08.468 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:25:09.840 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:26:09.846 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:26:09.841 00:00:00.008 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:27:09.846 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:27:09.841 00:00:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:28:09.847 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:28:09.841 00:01:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:29:09.845 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:30:09.841 00:00:00.009 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:30:08.670 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:30:09.849 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:30:08.674 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:31:09.843 00:00:00.009 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:31:09.848 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:32:09.848 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:32:09.842 00:00:00.009 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:33:09.848 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:34:09.848 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:33:09.843 00:01:00.009 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:35:08.916 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:35:09.842 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:35:08.913 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:36:09.844 00:00:00.009 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:35:09.850 00:01:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:37:09.852 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:37:09.843 00:00:00.011 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:38:09.843 00:00:00.011 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:38:09.850 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:39:09.843 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:39:09.850 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:40:08.647 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:40:09.843 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:40:08.643 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:40:09.851 00:01:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:41:09.846 00:00:00.008 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:42:09.851 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:42:09.844 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:43:09.851 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:43:09.845 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:44:09.852 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:44:09.844 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:45:09.002 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:45:09.005 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:45:09.844 00:01:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:45:09.852 00:01:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:47:09.853 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:47:09.847 00:00:00.009 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:48:09.846 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:48:09.852 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:49:09.853 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:49:09.846 00:00:00.009 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:50:09.027 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:50:09.024 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:50:09.852 00:01:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:50:09.848 00:01:00.012 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:52:09.848 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:52:09.855 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:53:09.847 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:53:09.856 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:54:09.847 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:54:09.855 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:55:09.010 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:55:09.012 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.855 00:01:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 05:55:09.847 00:01:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 05:57:09.847 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 05:57:09.855 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:58:09.855 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 05:58:09.848 00:00:00.010 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 Summary: total flows: 125, total bytes: 18156, total packets: 261, avg bps: 41, avg pps: 0, avg bpp: 69 Time window: 2025-11-20 04:59:09 - 2025-11-20 05:58:09 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0051s User: 0.0008s Wall: 0.0014s flows/second: 88652.0 Runtime: 0.0014s