Info about CPA-ACICCHINO

Please enable make sure that the ntop html/ directory is properly installed

Info about CPA-ACICCHINO

IP Address 192.168.1.194 [unicast] [ Purge Asset ]

First/Last Seen Mon Jun 9 04:12:46 2025 - Fri Jun 13 22:53:42 2025 [Inactive since 6 sec]

MAC Address Network Interface Card (NIC) D8:5E:D3:2D:52:7D

OS Name OS: Windows [Windows 2000 Professional SP4]

Host Location Local (inside specified/local subnet)

IP TTL (Time to Live) 1:128 [~0 hop(s)]

Total Data Sent 2.2 GBytes/12,962,892 Pkts/0 Retran. Pkts [0%]

Broadcast Pkts Sent 21,822 Pkts

Multicast Traffic Sent 10.6 MBytes/49,181 Pkts

Data Sent Stats
0 %

Rem 100 %

IP vs. Non-IP Sent
IP 100 %

Non-IP 0 %

Total Data Rcvd 22.7 GBytes/23,948,460 Pkts/0 Retran. Pkts [0%]

Data Rcvd Stats
0 %

Rem 100 %

IP vs. Non-IP Rcvd
IP 100 %

Non-IP 0 %

Sent vs. Rcvd Pkts
Sent 35.1 %

Rcvd 64.9 %

Sent vs. Rcvd Data
Sent 8.9 %

Rcvd 91.1 %

Used Subnet Routers 00:24:8C:DE:84:31 Network Card
Host Type VoIP Host VoIP

Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
Wrong network mask or bridging enabled
Suspicious activities: too many host contacts
Unexpected packets (e.g. traffic to closed port or connection reset):

Unexpected packets (e.g. traffic to closed port or connection reset):
[Rcvd: rst] [Sent: closed-empty] [Rcvd: hostnet unreac]

Host Traffic Stats

Time	Tot. Traffic Sent	% Traffic Sent	Tot. Traffic Rcvd	% Traffic Rcvd
10 PM	68.4 KBytes	0.0 %	0	0.0 %
9 PM	75.8 KBytes	0.0 %	0	0.0 %
8 PM	75.8 KBytes	0.0 %	0	0.0 %
7 PM	76.3 KBytes	0.0 %	0	0.0 %
6 PM	77.1 KBytes	0.0 %	0	0.0 %
5 PM	75.7 KBytes	0.0 %	0	0.0 %
4 PM	93.7 KBytes	0.0 %	0	0.0 %
3 PM	83.0 KBytes	0.0 %	0	0.0 %
2 PM	82.3 KBytes	0.0 %	0	0.0 %
1 PM	83.5 KBytes	0.0 %	1.1 KBytes	0.0 %
12 PM	99.6 KBytes	0.0 %	272	0.0 %
11 AM	14.6 MBytes	5.2 %	309.7 MBytes	12.1 %
10 AM	61.1 MBytes	21.6 %	1.3 GBytes	52.7 %
9 AM	26.3 MBytes	9.3 %	348.6 MBytes	13.6 %
8 AM	29.9 MBytes	10.6 %	146.8 MBytes	5.7 %
7 AM	23.4 MBytes	8.3 %	94.7 MBytes	3.7 %
6 AM	18.4 MBytes	6.5 %	69.9 MBytes	2.7 %
5 AM	41.3 MBytes	14.6 %	135.5 MBytes	5.3 %
4 AM	34.3 MBytes	12.1 %	74.0 MBytes	2.9 %
3 AM	7.0 MBytes	2.5 %	21.1 MBytes	0.8 %
2 AM	6.6 MBytes	2.3 %	2.1 MBytes	0.1 %
1 AM	6.5 MBytes	2.3 %	4.2 MBytes	0.2 %
12 AM	6.5 MBytes	2.3 %	2.0 MBytes	0.1 %
11 PM	6.4 MBytes	2.3 %	2.0 MBytes	0.1 %
Total

Packet Statistics

TCP Connections	Directed to		Rcvd From
Attempted	89,039	fd.api.iris.microsoft.com mcr-ring.msedge.net arm-ring-fallback.msedge.net ax-ring.msedge.net fp.msedge.net 192.168.1.79 30:05:5C:96:24:7C 192.168.1.150	31	1C:6F:65:47:D9:D6 2C:F0:5D:99:7A:79 192.168.1.12 192.168.1.108 6C:2B:59:4F:BF:EB D8:5E:D3:A4:56:94 D8:5E:D3:D8:76:BB D8:5E:D3:A5:15:A7
Established	44,303 [50 %]	www.bing.com fd.api.iris.microsoft.com mcr-ring.msedge.net arm-ring-fallback.msedge.net ax-ring.msedge.net fp.msedge.net 192.168.1.79 192.168.1.150	83 [100 %]	visitor.omnitagjs.com clientservices.googleapis.com sync.ingage.tech dsp-cookie.adfarm1.adition.com vop.sundaysky.com mb.moatads.com tredir.espn.com btloader.com
Terminated	145	streetviewpixels-pa.googleapis.com mtalk.google.com 30:05:5C:96:24:7C c2shb-oao.ssp.yahoo.com ups.analytics.yahoo.com 192.168.1.79 fastlane.rubiconproject.com ib.adnxs.com	1	D8:5E:D3:A5:15:A7

TCP Flags	Pkts Sent		Pkts Rcvd
SYN	89,039	fd.api.iris.microsoft.com mcr-ring.msedge.net arm-ring-fallback.msedge.net ax-ring.msedge.net fp.msedge.net 192.168.1.79 30:05:5C:96:24:7C 192.168.1.150	31	1C:6F:65:47:D9:D6 2C:F0:5D:99:7A:79 192.168.1.12 192.168.1.108 6C:2B:59:4F:BF:EB D8:5E:D3:A4:56:94 D8:5E:D3:D8:76:BB D8:5E:D3:A5:15:A7
RST\|ACK	7,363	settings-win.data.microsoft.com emupdate.bav.avcdn.net v10.events.data.microsoft.com settings-win.data.microsoft.com config.teams.microsoft.com settings-win.data.microsoft.com settings-win.data.microsoft.com v10.events.data.microsoft.com	622	login.live.com gateway.instagram.com fd.api.iris.microsoft.com ax-ring.msedge.net fp.msedge.net arm-ring-fallback.msedge.net mcr-ring.msedge.net mail.cpaba.com.ar
RST	0		582	cds.taboola.com id5-sync.com www.google.com r1---sn-jup-x1xk.gvt1.com residuos.laplata.gob.ar lupeduarte.com p4-hci77tqqdmmn4-lmazgmdmqzk3ivqo-968998-s1-v6exp3-v4.metric.gs rr1---sn-ja5gv5g-x1xd.googlevideo.com
NULL	49	udp.ping.teamviewer.com udp.ping.teamviewer.com udp.ping.teamviewer.com 192.168.0.9 181.12.206.160 udp.ping.teamviewer.com 192.168.0.18 40-116-171-181.fibertel.com.ar	1	00:26:73:E7:5D:6D

Anomaly	Pkts Sent to		Pkts Rcvd from
Closed Empty TCP Conn.	145	streetviewpixels-pa.googleapis.com mtalk.google.com 30:05:5C:96:24:7C c2shb-oao.ssp.yahoo.com ups.analytics.yahoo.com 192.168.1.79 fastlane.rubiconproject.com ib.adnxs.com	1	D8:5E:D3:A5:15:A7
ICMP Net Unreachable	0		12	200.80.220.74

ARP	Packet
Request Sent	166
Reply Rcvd	52 (31.3 %)
Reply Sent	10,528

Protocol Distribution

Protocol

Data Sent

Data Rcvd

TCP

2.1 GBytes

22.7 GBytes

UDP

104.4 MBytes

13.2 MBytes

ICMP

0.0 KBytes

1.3 KBytes

(R)ARP

480.4 KBytes

286.2 KBytes

IGMP

1.2 KBytes

0.0 KBytes

Protocol Distribution

IP Distribution

ICMP Traffic

Type	Pkt Sent	Pkt Rcvd
Unreach	0	12

Last Contacted Peers

Sent To	IP Address
239.255.255.250	239.255.255.250
224.0.0.252	224.0.0.252
00:24:8C:DE:84:31
224.0.0.251	224.0.0.251
192.168.1.79	192.168.1.79
30:05:5C:96:24:7C
192.168.1.150	192.168.1.150
Total Contacts	428154

Received From	IP Address
prod-dynamite-prod-02-us-signaler-pa.clients6.google.com	172.217.173.234
www.youtube.com	142.251.128.110
www.youtube.com	142.251.128.78
00:24:8C:DE:84:31
guc3-spclient.spotify.com	35.186.224.31
widget-content.spotify.com	35.186.224.24
guc3-dealer.spotify.com	35.186.224.46
mail.cpaba.com.ar	182.160.27.251
Total Contacts	348494

IP Service Stats: Client Role

	# Loc. Req. Sent		# Rem. Req. Sent		# Pos. Reply Rcvd		# Neg. Reply Rcvd		Local RndTrip	Rem RndTrip
DNS	33,192	42.0%	44,260	57.0%	61,131	98.0%	743	1.0%	0.0 ms - 30.0 sec	2.6 ms - 1.3 sec
HTTP	0	0.0%	0	0.0%	24	88.0%	3	11.0%	0.0 ms - 0.0 ms	0.0 ms - 0.0 ms

TCP/UDP Service/Port Usage

IP Service	Port	# Client Sess.	Last Client Peer	# Server Sess.	Last Server Peer
domain	53	59323/13.2 MBytes	00:24:8C:DE:84:31
www	80	8250/1.1 GBytes	192.168.1.150
ntp	123	18/864	time.windows.com	18/864	time.windows.com
https	443	10032/21.6 GBytes	widget-content.spotify.com

TCP/UDP - Traffic on Other Ports

Client Port	Server Port
54400	5357

TCP/UDP Recently Used Ports

Client Port	Server Port
54400	mdns

P2P Recently Exchanged Files

File Name
<unknown file>

Report created on Fri Jun 13 22:53:48 2025 [ntop uptime: 4 days 18:41:02]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include all interfaces (merged)