(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about 8ef152f2183405be8f8fef084e54952d.safeframe.googlesyndication.c

IP Address142.251.129.33   [unicast] [ Purge Asset ]
First/Last SeenWed Jul 16 04:18:37 2025  -  Wed Jul 16 10:45:10 2025 [Inactive since 14 sec]
Domainsafeframe.googlesyndication.c
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
OS NameOS: Cisco [Cisco-louche1 ] 
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)122:122 [~6 hop(s)]
Total Data Sent2.7 MBytes/8,183 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd2.5 MBytes/9,044 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 47.5 %
  
Rcvd 52.5 %
Sent vs. Rcvd Data
Sent 51.8 %
  
Rcvd 48.2 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
10 AM 251.2 KBytes9.0 %182.8 KBytes7.0 %
9 AM 487.4 KBytes17.4 %462.5 KBytes17.7 %
8 AM 627.8 KBytes22.4 %558.5 KBytes21.4 %
7 AM 367.7 KBytes13.1 %368.1 KBytes14.1 %
6 AM 513.0 KBytes18.3 %504.9 KBytes19.4 %
5 AM 405.2 KBytes14.5 %401.2 KBytes15.4 %
4 AM 150.9 KBytes5.4 %130.4 KBytes5.0 %
3 AM 00.0 %00.0 %
2 AM 00.0 %00.0 %
1 AM 00.0 %00.0 %
12 AM 00.0 %00.0 %
11 PM 00.0 %00.0 %
10 PM 00.0 %00.0 %
9 PM 00.0 %00.0 %
8 PM 00.0 %00.0 %
7 PM 00.0 %00.0 %
6 PM 00.0 %00.0 %
5 PM 00.0 %00.0 %
4 PM 00.0 %00.0 %
3 PM 00.0 %00.0 %
2 PM 00.0 %00.0 %
1 PM 00.0 %00.0 %
12 PM 00.0 %00.0 %
11 AM 00.0 %00.0 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  794
Established0  396 [50 %]

TCP FlagsPkts SentPkts Rcvd
SYN0  794
RST|ACK0  2
RST2 1

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP2.7 MBytes100% 1.5 MBytes
59%

 

UDP0.0 KBytes  1.0 MBytes
40%

 

Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
D8:43:AE:BB:DE:41 Network Card  
192.168.1.11 192.168.1.11 
D8:5E:D3:A4:56:93 Network Card  
D8:5E:D3:2D:52:7D Network Card  
192.168.1.190 192.168.1.190 
04:7C:16:C1:C2:54 Network Card  
2C:F0:5D:99:7A:79 Network Card  
192.168.1.21 192.168.1.21 
Total Contacts38
Received FromIP Address
D8:43:AE:BB:DE:41 Network Card  
192.168.1.11 192.168.1.11 
D8:5E:D3:A4:56:93 Network Card  
D8:5E:D3:2D:52:7D Network Card  
192.168.1.190 192.168.1.190 
04:7C:16:C1:C2:54 Network Card  
2C:F0:5D:99:7A:79 Network Card  
192.168.1.21 192.168.1.21 
Total Contacts39

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  9901/4.4 MBytes2C:F0:5D:99:7A:79 Network Card

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

931 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
CPA-GAROFALO  VoIP Medium Risk P2P Server :506118ef152f2183405be8f8fef084e54952d.safeframe.googlesyndication.c  HTTP Server Low Risk :https3.2 KBytes9.2 KBytesWed Jul 16 10:41:56 2025Wed Jul 16 10:44:56 20253:0028 sec   SYN ACK PUSH 
CPA-GAROFALO  VoIP Medium Risk P2P Server :506358ef152f2183405be8f8fef084e54952d.safeframe.googlesyndication.c  HTTP Server Low Risk :https3.2 KBytes5.6 KBytesWed Jul 16 10:41:58 2025Wed Jul 16 10:44:57 20252:5927 sec   SYN ACK PUSH 
CPA-GAROFALO  VoIP Medium Risk P2P Server :507478ef152f2183405be8f8fef084e54952d.safeframe.googlesyndication.c  HTTP Server Low Risk :https2.7 KBytes5.1 KBytesWed Jul 16 10:42:55 2025Wed Jul 16 10:45:10 20252:1514 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 10:45:24 2025 [ntop uptime: 2 days 6:32:48]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"