(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about client.wns.windows.com

IP Address172.211.123.249 Flag for ISO 3166 code us (from p2c file) [unicast] [ Purge Asset ]
First/Last SeenMon Jul 14 05:07:47 2025  -  Wed Jul 16 10:47:50 2025 [Inactive since 45 sec]
Domainwns.windows.com
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)106:112 [~22 hop(s)]
Total Data Sent842.1 KBytes/4,441 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd657.5 KBytes/6,601 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 40.2 %
  
Rcvd 59.8 %
Sent vs. Rcvd Data
Sent 56.2 %
  
Rcvd 43.8 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
10 AM 55.4 KBytes10.6 %39.2 KBytes9.5 %
9 AM 19.7 KBytes3.8 %15.6 KBytes3.8 %
8 AM 18.2 KBytes3.5 %15.0 KBytes3.6 %
7 AM 35.1 KBytes6.7 %26.7 KBytes6.5 %
6 AM 20.4 KBytes3.9 %15.7 KBytes3.8 %
5 AM 23.1 KBytes4.4 %17.1 KBytes4.1 %
4 AM 29.9 KBytes5.7 %23.3 KBytes5.6 %
3 AM 29.5 KBytes5.7 %22.6 KBytes5.5 %
2 AM 17.7 KBytes3.4 %14.9 KBytes3.6 %
1 AM 17.4 KBytes3.3 %14.7 KBytes3.5 %
12 AM 17.6 KBytes3.4 %14.8 KBytes3.6 %
11 PM 21.6 KBytes4.1 %17.0 KBytes4.1 %
10 PM 18.0 KBytes3.5 %14.8 KBytes3.6 %
9 PM 16.9 KBytes3.2 %14.2 KBytes3.4 %
8 PM 17.2 KBytes3.3 %15.1 KBytes3.7 %
7 PM 21.8 KBytes4.2 %17.1 KBytes4.1 %
6 PM 16.0 KBytes3.1 %13.4 KBytes3.2 %
5 PM 16.4 KBytes3.1 %13.7 KBytes3.3 %
4 PM 16.1 KBytes3.1 %13.5 KBytes3.3 %
3 PM 16.2 KBytes3.1 %13.4 KBytes3.2 %
2 PM 16.4 KBytes3.2 %13.5 KBytes3.3 %
1 PM 16.4 KBytes3.2 %13.7 KBytes3.3 %
12 PM 16.5 KBytes3.2 %13.6 KBytes3.3 %
11 AM 27.9 KBytes5.4 %21.5 KBytes5.2 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  82
Established0  41 [50 %]

TCP FlagsPkts SentPkts Rcvd
SYN0  82
RST|ACK1 4
RST0  1

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP842.1 KBytes100% 657.5 KBytes100
Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
1C:6F:65:47:D9:D6 Network Card  
D8:5E:D3:A4:56:93 Network Card  
192.168.1.13 192.168.1.13 
D8:43:AE:BB:DE:41 Network Card  
192.168.1.9 192.168.1.9 
D8:5E:D3:2D:52:7D Network Card  
04:D9:F5:32:79:12 Network Card  
D8:43:AE:BB:DC:1D Network Card  
Total Contacts30
Received FromIP Address
1C:6F:65:47:D9:D6 Network Card  
D8:5E:D3:A4:56:93 Network Card  
192.168.1.13 192.168.1.13 
D8:43:AE:BB:DE:41 Network Card  
192.168.1.9 192.168.1.9 
D8:5E:D3:2D:52:7D Network Card  
04:D9:F5:32:79:12 Network Card  
D8:43:AE:BB:DC:1D Network Card  
Total Contacts31

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  6674/874.4 KBytes192.168.1.9

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

1292 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
CPA-FBRECCIA  VoIP Medium Risk :50194client.wns.windows.com  HTTP Server Low Risk :https30.8 KBytes39.5 KBytesTue Jul 15 06:17:27 2025Wed Jul 16 10:45:37 20251 day 4:28:102:58   SYN ACK PUSH 
Tribunal01  VoIP Medium Risk P2P Server :52700client.wns.windows.com  HTTP Server Low Risk :https3.8 KBytes6.0 KBytesWed Jul 16 10:05:32 2025Wed Jul 16 10:46:08 202540:362:27   SYN ACK PUSH 
CPA-ACICCHINO Medium Risk P2P Server :55407client.wns.windows.com  HTTP Server Low Risk :https13.1 KBytes17.6 KBytesTue Jul 15 23:56:33 2025Wed Jul 16 10:46:49 202510:50:161:46   SYN ACK PUSH 
0.0.0.0 Low Risk :57318client.wns.windows.com  HTTP Server Low Risk :https28.8 KBytes36.9 KBytesTue Jul 15 06:21:55 2025Wed Jul 16 10:47:45 20251 day 4:25:5050 sec   SYN ACK PUSH 
CPA-MALFONSIN Medium Risk :61171client.wns.windows.com  HTTP Server Low Risk :https3.8 KBytes6.0 KBytesWed Jul 16 10:04:26 2025Wed Jul 16 10:45:05 202540:393:30   SYN ACK PUSH 
Archivos2 [NetBIOS] Medium Risk :61999client.wns.windows.com  HTTP Server Low Risk :https281.2 KBytes404.3 KBytesTue Jul 15 05:03:45 2025Wed Jul 16 10:47:50 20251 day 5:44:0545 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 10:48:35 2025 [ntop uptime: 2 days 6:35:59]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"