(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about client.wns.windows.com

IP Address172.211.123.248 Flag for ISO 3166 code us (from p2c file) [unicast] [ Purge Asset ]
First/Last SeenWed Jul 16 04:50:44 2025  -  Wed Jul 16 09:52:42 2025 [Inactive since 1:22]
Domainwns.windows.com
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)111:112 [~17 hop(s)]
Total Data Sent69.9 KBytes/275 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd47.9 KBytes/309 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 47.1 %
  
Rcvd 52.9 %
Sent vs. Rcvd Data
Sent 59.3 %
  
Rcvd 40.7 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
9 AM 1.5 KBytes2.2 %1.5 KBytes3.0 %
8 AM 22.3 KBytes31.9 %14.7 KBytes30.6 %
7 AM 20.0 KBytes28.6 %14.6 KBytes30.4 %
6 AM 17.8 KBytes25.5 %11.9 KBytes24.8 %
5 AM 2.6 KBytes3.7 %1.8 KBytes3.7 %
4 AM 5.6 KBytes8.1 %3.5 KBytes7.4 %
3 AM 00.0 %00.0 %
2 AM 00.0 %00.0 %
1 AM 00.0 %00.0 %
12 AM 00.0 %00.0 %
11 PM 00.0 %00.0 %
10 PM 00.0 %00.0 %
9 PM 00.0 %00.0 %
8 PM 00.0 %00.0 %
7 PM 00.0 %00.0 %
6 PM 00.0 %00.0 %
5 PM 00.0 %00.0 %
4 PM 00.0 %00.0 %
3 PM 00.0 %00.0 %
2 PM 00.0 %00.0 %
1 PM 00.0 %00.0 %
12 PM 00.0 %00.0 %
11 AM 00.0 %00.0 %
10 AM 00.0 %00.0 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  20
Established0  10 [50 %]

TCP FlagsPkts SentPkts Rcvd
SYN0  20
RST|ACK1 1

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP69.9 KBytes100% 47.9 KBytes100
Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
192.168.1.21 192.168.1.21 
D8:5E:D3:A4:56:93 Network Card  
D8:43:AE:BB:DE:3E Network Card  
D8:43:AE:BB:DF:31 Network Card  
D8:5E:D3:A5:15:A7 Network Card  
Total Contacts5
Received FromIP Address
192.168.1.21 192.168.1.21 
D8:5E:D3:A4:56:93 Network Card  
D8:43:AE:BB:DE:3E Network Card  
D8:43:AE:BB:DF:31 Network Card  
D8:5E:D3:A5:15:A7 Network Card  
Total Contacts6

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  337/84.4 KBytes192.168.1.21

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

1311 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
192.168.1.21  VoIP Medium Risk :63544client.wns.windows.com  HTTP Server :https8.4 KBytes12.3 KBytesWed Jul 16 04:50:44 2025Wed Jul 16 09:52:42 20255:01:581:22   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 09:54:04 2025 [ntop uptime: 2 days 5:41:28]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"