(C) 1998-2010 - Luca Deri  
Please enable make sure that the ntop html/ directory is properly installed

 

 

Info about 10.0.1.6

IP Address10.0.1.6 [unicast - multihomed Multihomed] [ Purge Asset ]
Multihomed Addresses 
    Custom Host Name
    First/Last SeenFri Sep 13 16:14:37 2024  -  Fri Sep 20 06:19:08 2024 [Inactive since 1 sec]
    Subnet10.0.0.0/22
    Main Host MAC Address9C:9D:7E:5F:50:BE 
    Host LocationLocal (inside specified/local subnet or known network list)
    IP TTL (Time to Live)1:127 [~0 hop(s)]
    Total Data Sent7.0 GBytes/61,394,692 Pkts/0 Retran. Pkts [0%]
    Broadcast Pkts Sent161,640 Pkts
    Multicast TrafficSent 1.2 KBytes/11 Pkts 
    Data Sent Stats
    Local 4.4 %
      
    		Rem 95.6 %
    IP vs. Non-IP Sent
    IP 95.6 %
      
    		Non-IP 4.4 %
    Total Data Rcvd127.3 GBytes/101,727,537 Pkts/0 Retran. Pkts [0%]
    Data Rcvd Stats
    Local 2.7 %
      
    		Rem 97.3 %
    IP vs. Non-IP Rcvd
    IP 97.3 %
      
    		Non-IP 2.7 %
    Sent vs. Rcvd Pkts
    Sent 37.6 %
      
    		Rcvd 62.4 %
    Sent vs. Rcvd Data
    Sent 5.2 %
      
    		Rcvd 94.8 %
    Used Subnet Routers Jetway Information Co., Ltd.:AB:14:78 Network Card
    LAA (Locally assigned address):35:F2:31 Network Card
    LAA (Locally assigned address):24:7C:21 Network Card
    Host TypeName Server DNS
    Host Healthness (Risk Flags) High Risk Medium Risk Low Risk
    1. High RiskDuplicated MAC found for this IP address (spoofing?)
    2. Medium RiskWrong network mask or bridging enabled
    3. Medium RiskSuspicious activities: too many host contacts
    4. Low RiskUnexpected packets (e.g. traffic to closed port or connection reset):
      [Rcvd: rejected] [Sent: udp to closed] [Rcvd: port unreac] [Rcvd: hostnet unreac] [Rcvd: admin prohib] 

     

    Host Traffic Stats

    TimeTot. Traffic Sent% Traffic SentTot. Traffic Rcvd% Traffic Rcvd
    6 AM 7.2 MBytes0.7 %324.3 MBytes1.9 %
    5 AM 2.2 MBytes0.2 %5.7 MBytes0.0 %
    4 AM 1.4 MBytes0.1 %3.6 MBytes0.0 %
    3 AM 30.6 MBytes3.1 %29.4 MBytes0.2 %
    2 AM 6.8 MBytes0.7 %9.8 MBytes0.1 %
    1 AM 151.4 KBytes0.0 %159.6 KBytes0.0 %
    12 AM 2.1 MBytes0.2 %6.6 MBytes0.0 %
    11 PM 7.8 MBytes0.8 %326.1 MBytes2.0 %
    10 PM 153.4 MBytes15.3 %768.5 MBytes4.6 %
    9 PM 40.7 MBytes4.1 %666.1 MBytes4.0 %
    8 PM 37.9 MBytes3.8 %1022.9 MBytes6.1 %
    7 PM 42.5 MBytes4.2 %552.3 MBytes3.3 %
    6 PM 3.9 MBytes0.4 %9.6 MBytes0.1 %
    5 PM 31.2 MBytes3.1 %759.5 MBytes4.6 %
    4 PM 42.8 MBytes4.3 %909.8 MBytes5.5 %
    3 PM 22.0 MBytes2.2 %351.1 MBytes2.1 %
    2 PM 46.1 MBytes4.6 %1.2 GBytes7.3 %
    1 PM 43.6 MBytes4.4 %1.0 GBytes6.3 %
    12 PM 176.7 MBytes17.7 %1.7 GBytes10.7 %
    11 AM 62.6 MBytes6.3 %1.8 GBytes11.3 %
    10 AM 48.5 MBytes4.8 %1.2 GBytes7.3 %
    9 AM 67.9 MBytes6.8 %1.0 GBytes6.4 %
    8 AM 78.4 MBytes7.8 %1.1 GBytes7.0 %
    7 AM 43.5 MBytes4.4 %1.5 GBytes9.2 %
    Total

     

    Packet Statistics

    TCP ConnectionsDirected toRcvd From
    Rejected44 107

    AnomalyPkts Sent toPkts Rcvd from
    UDP Pkt to Closed Port3,520 17,816
    ICMP Port Unreachable17,860 3,627
    ICMP Net Unreachable662,805 11
    ICMP Administratively Prohibited0  10

    ARPPacket
    Request Sent0
    Reply Rcvd14,802 (0.0 %)
    Reply Sent14,277

     

    Protocol Distribution

    ProtocolData SentData Rcvd
    TCP3.7 GBytes
    55%

     

    		 69.1 GBytes
    55%

     

    UDP2.8 GBytes
    42%

     

    		 54.8 GBytes
    44%

     

    ICMP106.4 MBytes
    1%

     

    		 1.4 MBytes 
    ICMPv60.1 KBytes  0.0 KBytes 
    IPv61.2 KBytes  0.0 KBytes 
    IPsec0.0 KBytes  15.2 KBytes 
    (R)ARP8.4 MBytes  795.4 KBytes 
    Other (Non IP)1.2 KBytes  0.0 KBytes 
    Protocol Distribution
    IP Distribution

     

    Unknown Protocols

    Data SentData Rcvd
  1. IP Protocol: 0x0
  2. IP Protocol: 0x0
  3. IP Protocol: 0x0
  4. IP Protocol: 0x0
  5. IP Protocol: 0x0  
    		6.  

     

    ICMP Traffic

    TypePkt SentPkt Rcvd
    Echo Request8,1400
    Echo Reply07,774
    Unreach680,6653,648
    Time Exceeded12,971

     

    IP Fragments Distribution

    ProtocolData SentData Rcvd
    UDP0.0 KBytes  164.4 KBytes100
    Fragment Distribution Received Fragment Distribution for 10.0.1.6-65535
    IP Fragment Distribution Received IP Fragment Distribution for 10.0.1.6-65535

     

    Last Contacted Peers

    Sent ToIP Address
    142.251.12.95 142.251.12.95 
    157.240.208.16 157.240.208.16 
    47.245.116.134 47.245.116.134 
    74.125.200.95 74.125.200.95 
    74.125.200.100 74.125.200.100 
    8.8.4.4 8.8.4.4 
    161.117.71.156 161.117.71.156 
    142.251.175.101 142.251.175.101 
    Total Contacts1261643
    Received FromIP Address
    142.251.12.95 142.251.12.95 
    157.240.208.16 157.240.208.16 
    47.245.116.134 47.245.116.134 
    74.125.200.95 74.125.200.95 
    74.125.200.100 74.125.200.100 
    8.8.4.4 8.8.4.4 
    161.117.71.156 161.117.71.156 
    142.251.175.101 142.251.175.101 
    Total Contacts1394014

     

    TCP/UDP Service/Port Usage

    IP ServicePort# Client Sess.Last Client Peer# Server Sess.Last Server Peer
    daytime133/153132.163.97.6   
    telnet2339/17.7 KBytes172.232.225.175   
    domain5342/3.5 KBytesJetway Information Co., Ltd.:AB:14:78 Network Card 2/198192.168.63.36
    http8017168/189.9 MBytes64.233.170.100   
    ntp1234929/231.0 KBytes103.17.182.30 20/96052.148.114.188
    sgmp-traps160251/90.9 KBytes169.136.94.249   
    bgp1791/85172.232.239.130   
    2992991955/205.5 KBytes8.215.162.27   
    300300570/64.8 KBytes8.215.162.17   
    301301338/49.9 KBytes169.136.94.60   
    3023021366/221.1 KBytes8.215.162.27   
    3033031107/132.2 KBytes8.215.162.31   
    3073076/72543.157.253.102   
    novastorbakcup30858/4.5 KBytes43.157.253.179   
    https44321565/124.2 GBytes161.117.71.156   
    isakmp50097/44.7 KBytes115.178.173.4   
    rtsp55437/37.7 KBytes172.232.251.41   
    sanity6432/1538.215.162.11   
    pssc64537/15.1 KBytes8.215.162.11   
    dhcp-failover6476/4598.215.162.11   
    rrp648180/245.4 KBytes8.215.162.11   
    cadview-3d64919/15.0 KBytes8.215.162.11   
    85385323298/5.4 MBytes94.140.15.15   
    imaps993510/207.3 KBytes64.233.170.108   

     

    TCP/UDP - Traffic on Other Ports

    Client PortServer Port

     

    TCP/UDP Recently Used Ports

    Client PortServer Port