(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about apresolve.spotify.com

IP Address35.186.224.24 Flag for ISO 3166 code us (from p2c file) [unicast] [ Purge Asset ]
First/Last SeenWed Jun 11 06:52:45 2025  -  Fri Jun 13 06:41:22 2025 [Inactive since 25 sec]
Autonomous System237
Domainspotify.com
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
OS NameOS: Cisco [Cisco-louche1 ] 
Origin AS237
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)122:122 [~6 hop(s)]
Total Data Sent2.6 MBytes/17,344 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd3.2 MBytes/15,933 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 52.1 %
  
Rcvd 47.9 %
Sent vs. Rcvd Data
Sent 44.6 %
  
Rcvd 55.4 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
6 AM 141.1 KBytes11.3 %109.4 KBytes7.0 %
5 AM 97.1 KBytes7.8 %111.9 KBytes7.2 %
4 AM 35.4 KBytes2.8 %50.3 KBytes3.2 %
3 AM 36.7 KBytes2.9 %50.5 KBytes3.2 %
2 AM 27.8 KBytes2.2 %47.5 KBytes3.1 %
1 AM 41.5 KBytes3.3 %51.7 KBytes3.3 %
12 AM 19.9 KBytes1.6 %40.6 KBytes2.6 %
11 PM 35.0 KBytes2.8 %47.0 KBytes3.0 %
10 PM 30.3 KBytes2.4 %46.3 KBytes3.0 %
9 PM 31.2 KBytes2.5 %61.2 KBytes3.9 %
8 PM 24.9 KBytes2.0 %55.7 KBytes3.6 %
7 PM 34.0 KBytes2.7 %45.3 KBytes2.9 %
6 PM 30.1 KBytes2.4 %44.8 KBytes2.9 %
5 PM 30.6 KBytes2.5 %57.1 KBytes3.7 %
4 PM 28.6 KBytes2.3 %45.6 KBytes2.9 %
3 PM 36.2 KBytes2.9 %51.6 KBytes3.3 %
2 PM 34.1 KBytes2.7 %56.8 KBytes3.7 %
1 PM 45.3 KBytes3.6 %53.6 KBytes3.4 %
12 PM 87.9 KBytes7.1 %71.9 KBytes4.6 %
11 AM 220.0 KBytes17.6 %175.0 KBytes11.3 %
10 AM 56.9 KBytes4.6 %84.3 KBytes5.4 %
9 AM 49.0 KBytes3.9 %84.4 KBytes5.4 %
8 AM 40.6 KBytes3.3 %50.0 KBytes3.2 %
7 AM 32.3 KBytes2.6 %62.3 KBytes4.0 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  558
Established0  279 [50 %]
Terminated0  4

TCP FlagsPkts SentPkts Rcvd
SYN0  558
RST|ACK0  14
RST0  6

AnomalyPkts Sent toPkts Rcvd from
Closed Empty TCP Conn.0  4

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP2.6 MBytes100% 2.7 MBytes
85%

 

UDP0.0 KBytes  469.4 KBytes
14%

 

Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
192.168.1.194 192.168.1.194 
192.168.1.108 192.168.1.108 
192.168.1.190 192.168.1.190 
50:65:F3:50:C6:97 Network Card  
2C:F0:5D:99:7A:79 Network Card  
Total Contacts5
Received FromIP Address
192.168.1.194 192.168.1.194 
192.168.1.108 192.168.1.108 
192.168.1.190 192.168.1.190 
50:65:F3:50:C6:97 Network Card  
2C:F0:5D:99:7A:79 Network Card  
Total Contacts6

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  18041/4.0 MBytes2C:F0:5D:99:7A:79 Network Card

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

1141 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
CPA-GAROFALO  VoIP Medium Risk P2P Server :49616apresolve.spotify.com  HTTP Server Low Risk :https6.9 KBytes18.9 KBytesFri Jun 13 06:38:17 2025Fri Jun 13 06:41:22 20253:0525 sec   SYN ACK PUSH 
CPA-GAROFALO  VoIP Medium Risk P2P Server :49617apresolve.spotify.com  HTTP Server Low Risk :https2.4 KBytes4.9 KBytesFri Jun 13 06:38:17 2025Fri Jun 13 06:41:18 20253:0129 sec   SYN ACK PUSH 
CPA-GAROFALO  VoIP Medium Risk P2P Server :49618apresolve.spotify.com  HTTP Server Low Risk :https2.8 KBytes7.3 KBytesFri Jun 13 06:38:17 2025Fri Jun 13 06:41:18 20253:0129 sec   SYN ACK PUSH 
CPA-ACICCHINO  VoIP Medium Risk P2P Server :59510apresolve.spotify.com  HTTP Server Low Risk :https5.1 KBytes2.1 KBytesFri Jun 13 06:40:29 2025Fri Jun 13 06:41:15 202546 sec32 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  

Report created on Fri Jun 13 06:41:47 2025 [ntop uptime: 4 days 2:29:01]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include all interfaces (merged)