(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about client.wns.windows.com

IP Address4.145.79.80 Flag for ISO 3166 code us (from p2c file) [unicast] [ Purge Asset ]
First/Last SeenTue Jul 15 18:59:35 2025  -  Wed Jul 16 11:01:41 2025 [Inactive since 2 sec]
Autonomous System1
Domainwns.windows.com
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
Origin AS1
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)102:106 [~26 hop(s)]
Total Data Sent674.2 KBytes/3,018 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd499.7 KBytes/4,467 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 40.3 %
  
Rcvd 59.7 %
Sent vs. Rcvd Data
Sent 57.4 %
  
Rcvd 42.6 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
11 AM 1.0 KBytes0.2 %8370.2 %
10 AM 116.9 KBytes17.3 %83.2 KBytes16.7 %
9 AM 49.2 KBytes7.3 %37.2 KBytes7.4 %
8 AM 44.5 KBytes6.6 %35.9 KBytes7.2 %
7 AM 58.7 KBytes8.7 %44.9 KBytes9.0 %
6 AM 47.2 KBytes7.0 %36.2 KBytes7.2 %
5 AM 41.6 KBytes6.2 %34.8 KBytes7.0 %
4 AM 42.1 KBytes6.2 %31.1 KBytes6.2 %
3 AM 42.3 KBytes6.3 %29.4 KBytes5.9 %
2 AM 55.0 KBytes8.2 %37.7 KBytes7.6 %
1 AM 42.1 KBytes6.2 %27.2 KBytes5.4 %
12 AM 32.7 KBytes4.8 %22.3 KBytes4.5 %
11 PM 20.8 KBytes3.1 %15.7 KBytes3.1 %
10 PM 23.3 KBytes3.4 %18.3 KBytes3.7 %
9 PM 17.3 KBytes2.6 %13.9 KBytes2.8 %
8 PM 19.4 KBytes2.9 %14.5 KBytes2.9 %
7 PM 14.8 KBytes2.2 %13.0 KBytes2.6 %
6 PM 5.4 KBytes0.8 %3.5 KBytes0.7 %
5 PM 00.0 %00.0 %
4 PM 00.0 %00.0 %
3 PM 00.0 %00.0 %
2 PM 00.0 %00.0 %
1 PM 00.0 %00.0 %
12 PM 00.0 %00.0 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  78
Established0  39 [50 %]

TCP FlagsPkts SentPkts Rcvd
SYN0  78
RST|ACK1 8
RST0  16

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP674.2 KBytes100% 499.7 KBytes100
Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
D8:43:AE:BB:DB:FB Network Card  
D8:43:AE:BB:DC:21 Network Card  
D8:43:AE:BB:DC:13 Network Card  
D8:5E:D3:A4:56:93 Network Card  
70:71:BC:3B:ED:51 Network Card  
70:71:BC:31:71:72 Network Card  
192.168.1.30 192.168.1.30 
D8:5E:D3:A4:58:68 Network Card  
Total Contacts23
Received FromIP Address
D8:43:AE:BB:DB:FB Network Card  
D8:43:AE:BB:DC:21 Network Card  
D8:43:AE:BB:DC:13 Network Card  
D8:5E:D3:A4:56:93 Network Card  
70:71:BC:3B:ED:51 Network Card  
70:71:BC:31:71:72 Network Card  
192.168.1.30 192.168.1.30 
D8:5E:D3:A4:58:68 Network Card  
Total Contacts24

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  4531/753.8 KBytesD8:43:AE:BB:DC:21 Network Card

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

939 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
CPA-NGARCIA-Del [NetBIOS]  VoIP Medium Risk :51634client.wns.windows.com  HTTP Server Low Risk :https3.6 KBytes5.7 KBytesWed Jul 16 10:42:52 2025Wed Jul 16 11:00:59 202518:0744 sec   SYN ACK PUSH 
ADM02 Medium Risk :52254client.wns.windows.com  HTTP Server Low Risk :https8.3 KBytes11.7 KBytesWed Jul 16 04:58:38 2025Wed Jul 16 10:57:41 20255:59:034:02   SYN ACK PUSH 
VICEPRESIDENCIA Low Risk :52866client.wns.windows.com  HTTP Server Low Risk :https7.9 KBytes11.2 KBytesWed Jul 16 06:49:37 2025Wed Jul 16 11:01:41 20254:12:042 sec   SYN ACK PUSH 
0.0.0.0  VoIP Medium Risk :54327client.wns.windows.com  HTTP Server Low Risk :https74.4 KBytes102.7 KBytesWed Jul 16 04:56:10 2025Wed Jul 16 11:01:15 20256:05:0528 sec   SYN ACK PUSH 
CPA-GLENCINA Medium Risk :55295client.wns.windows.com  HTTP Server Low Risk :https4.0 KBytes6.3 KBytesWed Jul 16 10:08:13 2025Wed Jul 16 10:58:27 202550:143:16   SYN ACK PUSH 
192.168.1.18 Medium Risk P2P Server :60920client.wns.windows.com  HTTP Server Low Risk :https3.3 KBytes5.3 KBytesWed Jul 16 10:59:40 2025Wed Jul 16 10:59:42 20252 sec2:01   SYN ACK PUSH 
CPA-Envios Medium Risk Users :64758client.wns.windows.com  HTTP Server Low Risk :https200.5 KBytes301.2 KBytesTue Jul 15 18:59:35 2025Wed Jul 16 11:00:46 202516:01:1157 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 11:01:43 2025 [ntop uptime: 2 days 6:49:07]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"