Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-10 12:58:19.881 00:01:00.095 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-12-10 12:59:57.001 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 12:59:56.998 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 12:59:19.884 00:01:00.090 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-12-10 13:00:19.881 00:00:00.094 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:01:19.884 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:01:19.886 00:00:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:02:19.883 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:02:19.885 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:03:19.885 00:00:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:03:19.884 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:04:19.882 00:00:00.094 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:04:19.885 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:04:57.119 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:04:57.117 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:05:19.883 00:00:00.094 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:05:19.885 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:06:19.883 00:00:00.094 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:06:19.885 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:07:19.886 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:07:19.883 00:00:00.094 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:08:19.884 00:00:00.103 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:08:19.886 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:09:19.885 00:00:00.092 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:09:19.887 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:09:57.138 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:09:57.136 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:10:19.887 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:10:19.885 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:11:19.887 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:11:19.885 00:00:00.092 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:12:19.885 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:12:19.888 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:13:19.886 00:00:00.094 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:13:19.887 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:14:19.888 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:14:19.885 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:14:57.248 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:14:57.245 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:15:19.888 00:00:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:15:19.886 00:01:00.094 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-12-10 13:16:19.888 00:00:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:17:19.890 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:17:19.887 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:18:19.888 00:00:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:18:19.885 00:00:00.093 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:19:19.886 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:19:19.889 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:19:57.402 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:19:57.403 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:20:19.890 00:00:00.092 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:20:19.886 00:01:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-12-10 13:21:19.889 00:01:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-12-10 13:22:19.885 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:23:19.887 00:00:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:23:19.888 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:24:19.887 00:00:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:24:19.890 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:24:57.374 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:24:57.373 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:25:19.891 00:00:00.092 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:25:19.887 00:01:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-12-10 13:26:19.890 00:01:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-12-10 13:27:19.888 00:00:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:28:19.892 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:28:19.888 00:00:00.097 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:29:19.889 00:00:00.097 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:29:19.891 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:29:57.611 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:29:57.609 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:30:19.888 00:00:00.097 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:30:19.892 00:00:00.092 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:31:19.888 00:00:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:31:19.891 00:01:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-12-10 13:32:19.890 00:00:00.097 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:33:19.891 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:33:19.888 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:34:19.888 00:00:00.100 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:34:19.892 00:00:00.095 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:34:57.650 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:34:57.648 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:35:19.891 00:00:00.095 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:35:19.889 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:36:19.889 00:00:00.100 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:37:19.890 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:36:19.891 00:01:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-12-10 13:38:19.890 00:00:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:38:19.893 00:00:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:39:19.891 00:00:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:39:19.891 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:39:57.865 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:39:57.862 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:40:19.890 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:40:19.893 00:00:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:41:19.891 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:41:19.893 00:00:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:42:19.894 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:42:19.891 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:43:19.891 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:43:19.893 00:00:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:44:19.891 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:44:19.894 00:00:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:44:57.692 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:44:57.691 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:45:19.895 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:45:19.891 00:00:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:46:19.893 00:00:00.098 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:46:19.896 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:47:19.894 00:00:00.094 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:47:19.893 00:01:00.099 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-12-10 13:48:19.895 00:00:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:49:19.896 00:00:00.092 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:49:19.894 00:00:00.097 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:49:58.019 00:00:00.020 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:49:58.021 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:50:19.895 00:00:00.096 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:50:19.897 00:00:00.091 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:51:19.895 00:00:00.097 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:51:19.896 00:00:00.092 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:52:19.898 00:00:00.091 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:52:19.895 00:01:00.097 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-12-10 13:54:19.896 00:00:00.095 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:53:19.899 00:01:00.090 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-12-10 13:54:57.887 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-12-10 13:54:57.889 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-10 13:55:19.897 00:00:00.095 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:55:19.899 00:00:00.091 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:56:19.897 00:00:00.095 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-12-10 13:56:19.900 00:00:00.090 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:57:19.900 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-12-10 13:57:19.897 00:01:00.095 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 Summary: total flows: 131, total bytes: 20808, total packets: 312, avg bps: 46, avg pps: 0, avg bpp: 66 Time window: 2025-12-10 12:58:19 - 2025-12-10 13:58:19 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0032s User: 0.0032s Wall: 0.0025s flows/second: 52294.1 Runtime: 0.0025s