(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about safebrowsing.googleapis.com

IP Address172.217.28.10 Flag for gTLD code com (Guessing from gTLD) [unicast] [ Purge Asset ]
First/Last SeenTue Jul 15 00:23:13 2025  -  Wed Jul 16 15:33:33 2025 [Inactive since 7 sec]
Domaingoogleapis.com
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
OS NameOS: Cisco [Cisco-louche1 ] 
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)122:122 [~6 hop(s)]
Total Data Sent113.4 MBytes/234,157 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd48.3 MBytes/171,312 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 57.7 %
  
Rcvd 42.3 %
Sent vs. Rcvd Data
Sent 70.1 %
  
Rcvd 29.9 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Medium RiskSuspicious activities: too many host contacts
  2. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
3 PM 145.2 KBytes0.2 %110.7 KBytes0.4 %
2 PM 327.5 KBytes0.4 %259.2 KBytes1.0 %
1 PM 468.4 KBytes0.6 %640.1 KBytes2.5 %
12 PM 1.1 MBytes1.4 %1.2 MBytes5.0 %
11 AM 1.7 MBytes2.2 %2.7 MBytes10.8 %
10 AM 7.8 MBytes10.4 %1.2 MBytes5.1 %
9 AM 9.9 MBytes13.1 %1.1 MBytes4.6 %
8 AM 2.3 MBytes3.0 %1.4 MBytes5.5 %
7 AM 10.1 MBytes13.4 %5.6 MBytes22.7 %
6 AM 23.1 MBytes30.7 %2.2 MBytes9.1 %
5 AM 3.0 MBytes4.0 %2.2 MBytes8.9 %
4 AM 10.4 MBytes13.8 %682.0 KBytes2.7 %
3 AM 758.2 KBytes1.0 %692.9 KBytes2.8 %
2 AM 471.7 KBytes0.6 %499.4 KBytes2.0 %
1 AM 210.2 KBytes0.3 %155.0 KBytes0.6 %
12 AM 594.4 KBytes0.8 %663.7 KBytes2.6 %
11 PM 577.1 KBytes0.7 %385.4 KBytes1.5 %
10 PM 364.2 KBytes0.5 %484.9 KBytes1.9 %
9 PM 539.3 KBytes0.7 %732.7 KBytes2.9 %
8 PM 154.5 KBytes0.2 %104.1 KBytes0.4 %
7 PM 443.7 KBytes0.6 %597.5 KBytes2.4 %
6 PM 354.9 KBytes0.5 %362.1 KBytes1.4 %
5 PM 477.7 KBytes0.6 %464.1 KBytes1.8 %
4 PM 272.2 KBytes0.4 %250.9 KBytes1.0 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  4,998
Established0  2,499 [50 %]

TCP FlagsPkts SentPkts Rcvd
SYN0  4,998
RST|ACK0  44
RST4 5

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP113.4 MBytes100% 45.1 MBytes
93%

 

UDP0.0 KBytes  3.2 MBytes
6%

 

Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
192.168.1.111 192.168.1.111 
2C:F0:5D:99:7A:79 Network Card  
192.168.1.91 192.168.1.91 
04:D9:F5:32:79:12 Network Card  
D8:43:AE:BB:DE:41 Network Card  
D8:5E:D3:2D:52:7D Network Card  
D8:5E:D3:A4:58:68 Network Card  
3C:7C:3F:15:CB:D6 Network Card  
Total Contacts5508
Received FromIP Address
192.168.1.91 192.168.1.91 
04:D9:F5:32:79:12 Network Card  
D8:43:AE:BB:DE:41 Network Card  
D8:5E:D3:2D:52:7D Network Card  
D8:5E:D3:A4:58:68 Network Card  
2C:F0:5D:99:7A:79 Network Card  
3C:7C:3F:15:CB:D6 Network Card  
192.168.1.111 192.168.1.111 
Total Contacts5505

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  50080/140.2 MBytes2C:F0:5D:99:7A:79 Network Card

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

409 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
CPA-GAROFALO  VoIP Medium Risk P2P Server :59412safebrowsing.googleapis.com  HTTP Server Low Risk :https25.1 KBytes21.2 KBytesWed Jul 16 14:55:14 2025Wed Jul 16 15:33:33 202538:197 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 15:33:40 2025 [ntop uptime: 2 days 11:21:04]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"