Strange Network Connections In Netstat


  1. Posts : 294
    Windows 7 Pro SP1 x64
       #1

    Strange Network Connections In Netstat


    Hello-
    I am having a difficult time deciphering some established Remote/Foreign Addresses in 'netstat' and TCPView. Is there anyone here that could help me out with this?...More info on request.

    Thank you, in advance, for any help you may afford me.

    Kind Regards-

    tim
      My Computer


  2. Posts : 399
    Microsoft Windows 7 Ultimate 32-bit 7601
       #2

    It's kinda hard to help without the output from netstat
      My Computer


  3. Posts : 294
    Windows 7 Pro SP1 x64
    Thread Starter
       #3

    Ok, that's understandable... which 'netstat' switch would you like to see?

    Here's 'ipconfig /all'

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Windows\system32>ipconfig /all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : Timbo-ENVY
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
    Physical Address. . . . . . . . . : 34-64-A9-1B-D9-01
    DHCP Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    Link-local IPv6 Address . . . . . : fe80::5cb1:ca5a:9dad:81db%16(Preferred)
    IPv4 Address. . . . . . . . . . . : 192.168.1.3(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Lease Obtained. . . . . . . . . . : Saturday, December 26, 2015 12:09:03 PM
    Lease Expires . . . . . . . . . . : Sunday, December 27, 2015 7:11:54 PM
    Default Gateway . . . . . . . . . : 192.168.1.1
    DHCP Server . . . . . . . . . . . : 192.168.1.1
    DHCPv6 IAID . . . . . . . . . . . : 456418473
    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-E2-9A-67-74-29-AF-F9-4E-C7

    DNS Servers . . . . . . . . . . . : 2001:4860:4860::8888
    2001:4860:4860::8844
    8.8.8.8
    8.8.4.4
    NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter isatap.{EA5C5AB9-E724-4421-B89A-51830F994C34}:

    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes

    Sorry it took so long to respond... and thanks a lot for your response to the thread!

    tim
      My Computer


  4. Posts : 399
    Microsoft Windows 7 Ultimate 32-bit 7601
       #4

    Your question was
    Strange Network Connections In Netstat
    what was so strange about it
      My Computer


  5. Posts : 294
    Windows 7 Pro SP1 x64
    Thread Starter
       #5

    sml156 said:
    what was so strange about it
    There were some foreign addresses (ESTABLISHED) that couldn't be identified via TCPView, nor could they

    be validated through Google search. I have been having issues on a social media platform, of which lead me

    to think someone was messing with the account while it was login active. I do nothing illegal, and stand by

    my Constitutional rights in my political activism endeavors. Now, in this day and age, it's rather apparent

    that one's Constitutional rights aren't worth a hill of beans.

    Anyway, the direct issue is that I'm feeling a bit insecure as to who's tracking me, as such, and that is

    reinforced by the erratic behavior of said social media account. Clearly, in depth understanding of

    Networking is NOT one of my strong points, thus said, here I am. In addition, the 'erratic behavior' goes

    beyond the 'netstat' incidences - mouse behavior, content disappearance, broken images, continuous need

    to refresh (F5), and clear the Browser cache. The Browser (Opera) does NOT have a corrupt user profile

    and we have changed the password on the account frequently, of late. The pc is 4th Gen (i7-4770) based,

    new, no hardware or software conflicts, no bad RAM (32GB G.Skills), SSD (Samsung 850 PRO 256GB) has

    no issues (per Samsung Magician), Windows 7 Pro SP1 x64 is clean ('sfc /scannow' validated), no malware,

    no spyware, etc.- in other words, everything is fine on my side of the fence.

    Thanks for the help.
      My Computer


  6. Posts : 7,115
    W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
       #6

    On a side note i allways turn off Allow remote assistance.

    Roy
      My Computer


  7. Posts : 294
    Windows 7 Pro SP1 x64
    Thread Starter
       #7

    Yes, indeed, I have 'remote assistance' turned off and 'remote desktop' disallowed.

    Thanks for the input.

    Yeah, we're running into the same issue here as on other forums...nobody knows much about networking, I guess.
      My Computer


  8. Posts : 7,115
    W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
       #8

    isp


    Would it be these,





    Roy
    Attached Thumbnails Attached Thumbnails Strange Network Connections In Netstat-avast-isp.png  
      My Computer


  9. Posts : 294
    Windows 7 Pro SP1 x64
    Thread Starter
       #9

    Well, Roy, those broken images are exactly what's going on... Now, your 2nd attached image, regarding

    the Avast, I don't understand. I've identified all of the Avast traffic in 'netstat'.

    I've been following this thread over at 'bleepingcomputer.com', and I have changed the internet

    connection over to Google public DNS servers in both IPv4 and IPv6, from the ISP's assigned DNS

    servers, to no effect. Of course, we are venturing off the original topic of the thread here now to the

    social media issues- which, at present, are the most aggravating thorn in my side.

    Thanks-

    tim
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 20:40.
Find Us