Strange Network Connections In Netstat

[timw128]

Hello-
I am having a difficult time deciphering some established Remote/Foreign Addresses in 'netstat' and TCPView. Is there anyone here that could help me out with this?...More info on request.

Thank you, in advance, for any help you may afford me.

Kind Regards-

tim

 

[Digital Life]

It's kinda hard to help without the output from netstat

 

[timw128]

Ok, that's understandable... which 'netstat' switch would you like to see?

Here's 'ipconfig /all'

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Timbo-ENVY
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : 34-64-A9-1B-D9-01
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::5cb1:ca5a:9dad:81db%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Saturday, December 26, 2015 12:09:03 PM
Lease Expires . . . . . . . . . . : Sunday, December 27, 2015 7:11:54 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 456418473
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-E2-9A-67-74-29-AF-F9-4E-C7

DNS Servers . . . . . . . . . . . : 2001:4860:4860::8888
2001:4860:4860::8844
8.8.8.8
8.8.4.4
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{EA5C5AB9-E724-4421-B89A-51830F994C34}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Sorry it took so long to respond... and thanks a lot for your response to the thread!

tim

 

[Digital Life]

Your question was

Strange Network Connections In Netstat

what was so strange about it

 

[timw128]

what was so strange about it

There were some foreign addresses (ESTABLISHED) that couldn't be identified via TCPView, nor could they

be validated through Google search. I have been having issues on a social media platform, of which lead me

to think someone was messing with the account while it was login active. I do nothing illegal, and stand by

my Constitutional rights in my political activism endeavors. Now, in this day and age, it's rather apparent

that one's Constitutional rights aren't worth a hill of beans.

Anyway, the direct issue is that I'm feeling a bit insecure as to who's tracking me, as such, and that is

reinforced by the erratic behavior of said social media account. Clearly, in depth understanding of

Networking is NOT one of my strong points, thus said, here I am. In addition, the 'erratic behavior' goes

beyond the 'netstat' incidences - mouse behavior, content disappearance, broken images, continuous need

to refresh (F5), and clear the Browser cache. The Browser (Opera) does NOT have a corrupt user profile

and we have changed the password on the account frequently, of late. The pc is 4th Gen (i7-4770) based,

new, no hardware or software conflicts, no bad RAM (32GB G.Skills), SSD (Samsung 850 PRO 256GB) has

no issues (per Samsung Magician), Windows 7 Pro SP1 x64 is clean ('sfc /scannow' validated), no malware,

no spyware, etc.- in other words, everything is fine on my side of the fence.

Thanks for the help.

 

[torchwood]

On a side note i allways turn off Allow remote assistance.

Roy

 

[timw128]

Yes, indeed, I have 'remote assistance' turned off and 'remote desktop' disallowed.

Thanks for the input.

Yeah, we're running into the same issue here as on other forums...nobody knows much about networking, I guess.

 

[torchwood]

isp

Would it be these,

Roy

 

[timw128]

Well, Roy, those broken images are exactly what's going on... Now, your 2nd attached image, regarding

the Avast, I don't understand. I've identified all of the Avast traffic in 'netstat'.

I've been following this thread over at 'bleepingcomputer.com', and I have changed the internet

connection over to Google public DNS servers in both IPv4 and IPv6, from the ISP's assigned DNS

servers, to no effect. Of course, we are venturing off the original topic of the thread here now to the

social media issues- which, at present, are the most aggravating thorn in my side.

Thanks-

tim