Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Strange Network Connections In Netstat

22 Dec 2015   #1
timw128

Windows 7 Pro SP1 x64
 
 
Strange Network Connections In Netstat

Hello-
I am having a difficult time deciphering some established Remote/Foreign Addresses in 'netstat' and TCPView. Is there anyone here that could help me out with this?...More info on request.

Thank you, in advance, for any help you may afford me.

Kind Regards-

tim


My System SpecsSystem Spec
.
25 Dec 2015   #2
sml156

Microsoft Windows 7 Ultimate 32-bit 7601
 
 

It's kinda hard to help without the output from netstat
My System SpecsSystem Spec
26 Dec 2015   #3
timw128

Windows 7 Pro SP1 x64
 
 

Ok, that's understandable... which 'netstat' switch would you like to see?

Here's 'ipconfig /all'

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Timbo-ENVY
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : 34-64-A9-1B-D9-01
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::5cb1:ca5a:9dad:81db%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Saturday, December 26, 2015 12:09:03 PM
Lease Expires . . . . . . . . . . : Sunday, December 27, 2015 7:11:54 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 456418473
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-E2-9A-67-74-29-AF-F9-4E-C7

DNS Servers . . . . . . . . . . . : 2001:4860:4860::8888
2001:4860:4860::8844
8.8.8.8
8.8.4.4
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{EA5C5AB9-E724-4421-B89A-51830F994C34}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Sorry it took so long to respond... and thanks a lot for your response to the thread!

tim
My System SpecsSystem Spec
.

26 Dec 2015   #4
sml156

Microsoft Windows 7 Ultimate 32-bit 7601
 
 

Your question was
Quote:
Strange Network Connections In Netstat
what was so strange about it
My System SpecsSystem Spec
27 Dec 2015   #5
timw128

Windows 7 Pro SP1 x64
 
 

Quote   Quote: Originally Posted by sml156 View Post
what was so strange about it
There were some foreign addresses (ESTABLISHED) that couldn't be identified via TCPView, nor could they

be validated through Google search. I have been having issues on a social media platform, of which lead me

to think someone was messing with the account while it was login active. I do nothing illegal, and stand by

my Constitutional rights in my political activism endeavors. Now, in this day and age, it's rather apparent

that one's Constitutional rights aren't worth a hill of beans.

Anyway, the direct issue is that I'm feeling a bit insecure as to who's tracking me, as such, and that is

reinforced by the erratic behavior of said social media account. Clearly, in depth understanding of

Networking is NOT one of my strong points, thus said, here I am. In addition, the 'erratic behavior' goes

beyond the 'netstat' incidences - mouse behavior, content disappearance, broken images, continuous need

to refresh (F5), and clear the Browser cache. The Browser (Opera) does NOT have a corrupt user profile

and we have changed the password on the account frequently, of late. The pc is 4th Gen (i7-4770) based,

new, no hardware or software conflicts, no bad RAM (32GB G.Skills), SSD (Samsung 850 PRO 256GB) has

no issues (per Samsung Magician), Windows 7 Pro SP1 x64 is clean ('sfc /scannow' validated), no malware,

no spyware, etc.- in other words, everything is fine on my side of the fence.

Thanks for the help.
My System SpecsSystem Spec
27 Dec 2015   #6
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

On a side note i allways turn off Allow remote assistance.

Roy
My System SpecsSystem Spec
27 Dec 2015   #7
timw128

Windows 7 Pro SP1 x64
 
 

Yes, indeed, I have 'remote assistance' turned off and 'remote desktop' disallowed.

Thanks for the input.

Yeah, we're running into the same issue here as on other forums...nobody knows much about networking, I guess.
My System SpecsSystem Spec
27 Dec 2015   #8
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 
isp

Would it be these,





Roy


Attached Images
Strange Network Connections In Netstat-avast-isp.png 
My System SpecsSystem Spec
28 Dec 2015   #9
timw128

Windows 7 Pro SP1 x64
 
 

Well, Roy, those broken images are exactly what's going on... Now, your 2nd attached image, regarding

the Avast, I don't understand. I've identified all of the Avast traffic in 'netstat'.

I've been following this thread over at 'bleepingcomputer.com', and I have changed the internet

connection over to Google public DNS servers in both IPv4 and IPv6, from the ISP's assigned DNS

servers, to no effect. Of course, we are venturing off the original topic of the thread here now to the

social media issues- which, at present, are the most aggravating thorn in my side.

Thanks-

tim
My System SpecsSystem Spec
Reply

 Strange Network Connections In Netstat




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
My 'netstat' check is showing strange content
I posted this in the Network and Sharing section two days ago. Senior member 'Pauly' suggested that I post this here for further help. I am copying the contents of that thread below for your perusal and help. I disabled all the plugins and extensions in Firefox but cklads is still showing in the...
System Security
My 'netstat' check is showing strange content
My Operating system is Windows 7 Home Premium with Microsoft Security Essentials installed. While connected to the internet I did a random 'netstat -f' check using the command window. Please see the attachment. What worries me is the foreign address, clkads.com, against the local address...
Network & Sharing
What are all these connections in Netstat?
I typed in netstat and got all these connections, thing is though I don't know why all those ports are open, especially the 50,000 and up.
Network & Sharing
Network Connections Blank - Red X on Network Icon- but Internet works
I am connected to the internet, but there is a red x on my network icon (yet when you hover over it, it says internet access.) I tried to go into the network and sharing > change adapter settings, yet the Network connections folder is COMPLETELY blank. I tried reinstalling the driver. ...
Network & Sharing
Strange problem with ad-hoc connections
Hi there, I'm new to the forum... Hello everyone! I did check the tutorials (as well as many google searches) but I couldn't find a mention of this particular issue I'm having. Basically, when I try to create a wireless ad-hoc network, when I come to the screen that asks me for the...
Network & Sharing
Strange program connections
Strange ethernet access problem; some programs connect, others don't. Hey, everyone. I have a dual boot on my desktop, one half Ubuntu Linux and one half Windows 7 (for gaming compatibility). My Ubuntu Linux side has no problems with any and all of it's programs connecting to the internet using...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 15:02.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App