(C) 1998-2007 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about web.whatsapp.com

IP Address57.144.207.32 Flag for ISO 3166 code fr (from p2c file) [unicast] [ Purge Asset ]
First/Last SeenWed Jul 16 04:31:45 2025  -  Wed Jul 16 16:17:02 2025 [Inactive since 7 sec]
Autonomous System2647
Domainwhatsapp.com
Last MAC Address/Router Network Interface Card (NIC)/Router00:24:8C:DE:84:31 
Origin AS2647
Host LocationRemote (outside specified/local subnet)
IP TTL (Time to Live)56:56 [~8 hop(s)]
Total Data Sent219.8 MBytes/179,587 Pkts/0 Retran. Pkts [0%]
Broadcast Pkts Sent0 Pkts
Data Sent Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Sent
IP 100 %
 
Non-IP 0 %
Total Data Rcvd9.0 MBytes/102,588 Pkts/0 Retran. Pkts [0%]
Data Rcvd Stats
Local 100 %
 
Rem 0 %
IP vs. Non-IP Rcvd
IP 100 %
 
Non-IP 0 %
Sent vs. Rcvd Pkts
Sent 63.6 %
  
Rcvd 36.4 %
Sent vs. Rcvd Data
Sent 96.1 %
  
Rcvd 3.9 %
Host TypeHTTP Server HTTP Server
Further Host Information[ Whois ] [ ]
Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
  1. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
    [Rcvd: rst] 

 

Host Traffic Stats

TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
4 PM 33.6 KBytes0.0 %15.3 KBytes0.2 %
3 PM 8.3 MBytes3.8 %344.8 KBytes3.7 %
2 PM 1005.3 KBytes0.4 %108.6 KBytes1.2 %
1 PM 987.7 KBytes0.4 %104.0 KBytes1.1 %
12 PM 1.7 MBytes0.8 %242.2 KBytes2.6 %
11 AM 21.2 MBytes9.6 %756.6 KBytes8.2 %
10 AM 46.2 MBytes21.0 %1.6 MBytes17.7 %
9 AM 30.9 MBytes14.0 %1.1 MBytes11.8 %
8 AM 19.4 MBytes8.8 %947.2 KBytes10.3 %
7 AM 7.3 MBytes3.3 %551.2 KBytes6.0 %
6 AM 42.7 MBytes19.4 %1.7 MBytes19.0 %
5 AM 15.3 MBytes6.9 %797.0 KBytes8.6 %
4 AM 24.9 MBytes11.3 %874.5 KBytes9.5 %
3 AM 00.0 %00.0 %
2 AM 00.0 %00.0 %
1 AM 00.0 %00.0 %
12 AM 00.0 %00.0 %
11 PM 00.0 %00.0 %
10 PM 00.0 %00.0 %
9 PM 00.0 %00.0 %
8 PM 00.0 %00.0 %
7 PM 00.0 %00.0 %
6 PM 00.0 %00.0 %
5 PM 00.0 %00.0 %
Total

 

Packet Statistics

TCP ConnectionsDirected toRcvd From
Attempted0  988
Established0  466 [47 %]
Terminated0  5

TCP FlagsPkts SentPkts Rcvd
SYN0  988
RST|ACK15 180
RST2 33

AnomalyPkts Sent toPkts Rcvd from
Closed Empty TCP Conn.0  5

 

Protocol Distribution

ProtocolData SentData Rcvd
TCP219.8 MBytes100% 8.5 MBytes
94%

 

UDP0.0 KBytes  522.4 KBytes
5%

 

Protocol Distribution
IP Distribution

 

Last Contacted Peers

Sent ToIP Address
6C:2B:59:4F:BF:EB Network Card  
D8:43:AE:BB:DE:38 Network Card  
1C:6F:65:47:D9:D6 Network Card  
2C:F0:5D:99:7A:79 Network Card  
04:D9:F5:32:79:12 Network Card  
192.168.1.30 192.168.1.30 
D8:5E:D3:A4:56:94 Network Card  
192.168.1.111 192.168.1.111 
Total Contacts56
Received FromIP Address
6C:2B:59:4F:BF:EB Network Card  
D8:43:AE:BB:DE:38 Network Card  
1C:6F:65:47:D9:D6 Network Card  
2C:F0:5D:99:7A:79 Network Card  
04:D9:F5:32:79:12 Network Card  
192.168.1.30 192.168.1.30 
D8:5E:D3:A4:56:94 Network Card  
192.168.1.111 192.168.1.111 
Total Contacts57

 

TCP/UDP Service/Port Usage

IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
https443  52152/213.6 MBytes2C:F0:5D:99:7A:79 Network Card

 

TCP/UDP Recently Used Ports

Client PortServer Port
     

 

238 Active TCP/UDP Sessions

ClientServerData SentData RcvdActive SinceLast SeenDurationInactiveLatencyL7 ProtoNote
CPA-GAROFALO  VoIP Medium Risk P2P Server :54699web.whatsapp.com  HTTP Server Low Risk :https43.1 KBytes113.6 KBytesWed Jul 16 15:37:35 2025Wed Jul 16 16:17:02 202539:277 sec   SYN ACK PUSH 

The color of the host link indicates how recently the host was FIRST seen
  0 to 5 minutes     5 to 15 minutes     15 to 30 minutes     30 to 60 minutes     60+ minutes  
Report created on Wed Jul 16 16:17:09 2025 [ntop uptime: 2 days 12:04:33]
Generated by ntop v.3.3 [x86_64-unknown-linux-gnu]
© 1998-2007 by Luca Deri, built: Aug 6 2008 09:54:10.
Listening on [eth0] for all packets (i.e. without a filtering expression)
Web reports include only interface "eth0"