Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Way Too Many Active Connections


  • Please log in to reply
6 replies to this topic

#1 smudger1767

smudger1767

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:21 AM

Posted 05 June 2015 - 08:52 AM

Hi all

 

My internet has come to a slow crawl so I did a netstat and come up with the following result:

I'm running windows 8.1 with all updates as of today

Avast Premier Internet Security

Everything was fine until I noticed that basic internet browsing was getting very slow.

I have 2 PC's connected to my sky router, a wireless printer and my sky+ box, so 3 items are connected with Ethernet cables.

I have tried just connecting 1 pc at a time but still get the same very slow surfing.

 

I have ran Malwarebytes and didn't find anything.

 

Any help would be much appreciated.

Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>netstat

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    127.0.0.1:49162        activate:49163         ESTABLISHED
  TCP    127.0.0.1:49163        activate:49162         ESTABLISHED
  TCP    127.0.0.1:49165        activate:49166         ESTABLISHED
  TCP    127.0.0.1:49166        activate:49165         ESTABLISHED
  TCP    127.0.0.1:49170        activate:65000         CLOSE_WAIT
  TCP    127.0.0.1:49171        activate:65000         CLOSE_WAIT
  TCP    127.0.0.1:49172        activate:65000         CLOSE_WAIT
  TCP    127.0.0.1:49173        activate:65000         CLOSE_WAIT
  TCP    127.0.0.1:49174        activate:65000         CLOSE_WAIT
  TCP    127.0.0.1:49175        activate:65000         CLOSE_WAIT
  TCP    127.0.0.1:50584        activate:50645         CLOSE_WAIT
  TCP    127.0.0.1:50599        activate:50647         CLOSE_WAIT
  TCP    127.0.0.1:54295        activate:54294         TIME_WAIT
  TCP    127.0.0.1:54298        activate:54297         TIME_WAIT
  TCP    127.0.0.1:54301        activate:54300         TIME_WAIT
  TCP    127.0.0.1:54304        activate:54303         TIME_WAIT
  TCP    127.0.0.1:54315        activate:54314         TIME_WAIT
  TCP    127.0.0.1:54326        activate:54325         TIME_WAIT
  TCP    127.0.0.1:54329        activate:54328         TIME_WAIT
  TCP    127.0.0.1:54332        activate:54331         TIME_WAIT
  TCP    127.0.0.1:54335        activate:54334         TIME_WAIT
  TCP    127.0.0.1:54338        activate:54337         TIME_WAIT
  TCP    127.0.0.1:54341        activate:54340         TIME_WAIT
  TCP    127.0.0.1:54344        activate:54343         TIME_WAIT
  TCP    127.0.0.1:54347        activate:54346         TIME_WAIT
  TCP    127.0.0.1:54350        activate:54349         TIME_WAIT
  TCP    127.0.0.1:54353        activate:54352         TIME_WAIT
  TCP    127.0.0.1:54356        activate:54355         TIME_WAIT
  TCP    127.0.0.1:54359        activate:54358         TIME_WAIT
  TCP    127.0.0.1:54362        activate:54361         TIME_WAIT
  TCP    127.0.0.1:54365        activate:54364         TIME_WAIT
  TCP    127.0.0.1:54368        activate:54367         TIME_WAIT
  TCP    127.0.0.1:54371        activate:54370         TIME_WAIT
  TCP    127.0.0.1:54374        activate:54373         TIME_WAIT
  TCP    127.0.0.1:54377        activate:54376         TIME_WAIT
  TCP    127.0.0.1:54380        activate:54379         TIME_WAIT
  TCP    127.0.0.1:54383        activate:54382         TIME_WAIT
  TCP    127.0.0.1:54386        activate:54385         TIME_WAIT
  TCP    127.0.0.1:54389        activate:54388         TIME_WAIT
  TCP    127.0.0.1:54392        activate:54391         TIME_WAIT
  TCP    127.0.0.1:54395        activate:54394         TIME_WAIT
  TCP    127.0.0.1:54398        activate:54397         TIME_WAIT
  TCP    127.0.0.1:54401        activate:54400         TIME_WAIT
  TCP    127.0.0.1:54404        activate:54403         TIME_WAIT
  TCP    127.0.0.1:54409        activate:54408         TIME_WAIT
  TCP    127.0.0.1:54415        activate:54414         TIME_WAIT
  TCP    127.0.0.1:54418        activate:54417         TIME_WAIT
  TCP    127.0.0.1:54421        activate:54420         TIME_WAIT
  TCP    127.0.0.1:54424        activate:54423         TIME_WAIT
  TCP    127.0.0.1:54427        activate:54426         TIME_WAIT
  TCP    127.0.0.1:54430        activate:54429         TIME_WAIT
  TCP    127.0.0.1:54433        activate:54432         TIME_WAIT
  TCP    127.0.0.1:54436        activate:54435         TIME_WAIT
  TCP    127.0.0.1:54439        activate:54438         TIME_WAIT
  TCP    127.0.0.1:54442        activate:54441         TIME_WAIT
  TCP    127.0.0.1:54445        activate:54444         TIME_WAIT
  TCP    127.0.0.1:54448        activate:54447         TIME_WAIT
  TCP    127.0.0.1:54451        activate:54450         TIME_WAIT
  TCP    127.0.0.1:54456        activate:54455         TIME_WAIT
  TCP    127.0.0.1:54459        activate:54458         TIME_WAIT
  TCP    127.0.0.1:54462        activate:54461         TIME_WAIT
  TCP    127.0.0.1:54468        activate:54469         TIME_WAIT
  TCP    127.0.0.1:54469        activate:54468         TIME_WAIT
  TCP    127.0.0.1:54470        activate:54494         CLOSE_WAIT
  TCP    127.0.0.1:54471        activate:54472         TIME_WAIT
  TCP    127.0.0.1:54472        activate:54471         TIME_WAIT
  TCP    127.0.0.1:54475        activate:54474         TIME_WAIT
  TCP    127.0.0.1:54478        activate:54477         TIME_WAIT
  TCP    127.0.0.1:54480        activate:54470         TIME_WAIT
  TCP    127.0.0.1:54483        activate:54482         TIME_WAIT
  TCP    127.0.0.1:54486        activate:54485         TIME_WAIT
  TCP    127.0.0.1:54489        activate:54488         TIME_WAIT
  TCP    127.0.0.1:54492        activate:54491         TIME_WAIT
  TCP    127.0.0.1:54494        activate:54470         FIN_WAIT_2
  TCP    127.0.0.1:54497        activate:54496         TIME_WAIT
  TCP    127.0.0.1:54500        activate:54499         TIME_WAIT
  TCP    127.0.0.1:54503        activate:54502         TIME_WAIT
  TCP    127.0.0.1:54506        activate:54505         TIME_WAIT
  TCP    127.0.0.1:54509        activate:54508         TIME_WAIT
  TCP    127.0.0.1:54512        activate:54511         TIME_WAIT
  TCP    127.0.0.1:54515        activate:54514         TIME_WAIT
  TCP    127.0.0.1:54518        activate:54517         TIME_WAIT
  TCP    127.0.0.1:54550        activate:54549         TIME_WAIT
  TCP    127.0.0.1:54553        activate:54552         TIME_WAIT
  TCP    127.0.0.1:54557        activate:54556         TIME_WAIT
  TCP    127.0.0.1:54561        activate:54560         TIME_WAIT
  TCP    127.0.0.1:54566        activate:54565         TIME_WAIT
  TCP    127.0.0.1:54569        activate:54568         TIME_WAIT
  TCP    127.0.0.1:54572        activate:54571         TIME_WAIT
  TCP    127.0.0.1:54575        activate:54574         TIME_WAIT
  TCP    127.0.0.1:54582        activate:54581         TIME_WAIT
  TCP    127.0.0.1:54585        activate:54584         TIME_WAIT
  TCP    127.0.0.1:54588        activate:54587         TIME_WAIT
  TCP    127.0.0.1:54591        activate:54590         TIME_WAIT
  TCP    127.0.0.1:54594        activate:54593         TIME_WAIT
  TCP    127.0.0.1:54597        activate:54596         TIME_WAIT
  TCP    127.0.0.1:54600        activate:54599         TIME_WAIT
  TCP    127.0.0.1:54603        activate:54602         TIME_WAIT
  TCP    127.0.0.1:54606        activate:54605         TIME_WAIT
  TCP    127.0.0.1:54613        activate:54612         TIME_WAIT
  TCP    127.0.0.1:54632        activate:54631         TIME_WAIT
  TCP    127.0.0.1:54635        activate:54634         TIME_WAIT
  TCP    127.0.0.1:54638        activate:54637         TIME_WAIT
  TCP    127.0.0.1:54641        activate:54640         TIME_WAIT
  TCP    127.0.0.1:54644        activate:54643         TIME_WAIT
  TCP    127.0.0.1:54647        activate:54646         TIME_WAIT
  TCP    127.0.0.1:54714        activate:54715         ESTABLISHED
  TCP    127.0.0.1:54715        activate:54714         ESTABLISHED
  TCP    127.0.0.1:54717        activate:54718         ESTABLISHED
  TCP    127.0.0.1:54718        activate:54717         ESTABLISHED
  TCP    127.0.0.1:54720        activate:54721         ESTABLISHED
  TCP    127.0.0.1:54721        activate:54720         ESTABLISHED
  TCP    127.0.0.1:54723        activate:54724         ESTABLISHED
  TCP    127.0.0.1:54724        activate:54723         ESTABLISHED
  TCP    127.0.0.1:54726        activate:54727         ESTABLISHED
  TCP    127.0.0.1:54727        activate:54726         ESTABLISHED
  TCP    127.0.0.1:54729        activate:54730         ESTABLISHED
  TCP    127.0.0.1:54730        activate:54729         ESTABLISHED
  TCP    127.0.0.1:54732        activate:54733         ESTABLISHED
  TCP    127.0.0.1:54733        activate:54732         ESTABLISHED
  TCP    127.0.0.1:54748        activate:54749         ESTABLISHED
  TCP    127.0.0.1:54749        activate:54748         ESTABLISHED
  TCP    192.168.0.3:2869       SkyRouter:39269        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39270        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39271        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39272        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39273        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39274        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39275        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39276        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39277        TIME_WAIT
  TCP    192.168.0.3:2869       SkyRouter:39278        TIME_WAIT
  TCP    192.168.0.3:51374      led05:https            CLOSE_WAIT
  TCP    192.168.0.3:51376      chi01:https            CLOSE_WAIT
  TCP    192.168.0.3:51378      168:https              CLOSE_WAIT
  TCP    192.168.0.3:51380      168:domain             CLOSE_WAIT
  TCP    192.168.0.3:52439      db3wns2011633:https    ESTABLISHED
  TCP    192.168.0.3:52786      do-8:https             ESTABLISHED
  TCP    192.168.0.3:52806      64.233.166.188:5228    ESTABLISHED
  TCP    192.168.0.3:52811      r-062-042-234-077:http  ESTABLISHED
  TCP    192.168.0.3:53368      lhr14s27-in-f3:https   ESTABLISHED
  TCP    192.168.0.3:53464      a-0011:https           ESTABLISHED
  TCP    192.168.0.3:53495      93.184.219.82:http     ESTABLISHED
  TCP    192.168.0.3:53534      93.184.219.20:http     ESTABLISHED
  TCP    192.168.0.3:53535      a23-198-37-206:http    ESTABLISHED
  TCP    192.168.0.3:53536      server-54-230-197-68:http  ESTABLISHED
  TCP    192.168.0.3:53574      lhr08s07-in-f2:http    ESTABLISHED
  TCP    192.168.0.3:53607      185.31.19.249:http     ESTABLISHED
  TCP    192.168.0.3:53620      a23-198-37-206:http    ESTABLISHED
  TCP    192.168.0.3:53626      lhr08s07-in-f14:http   ESTABLISHED
  TCP    192.168.0.3:53628      dub08s01-in-f4:http    ESTABLISHED
  TCP    192.168.0.3:53629      dub08s01-in-f4:http    ESTABLISHED
  TCP    192.168.0.3:53637      lhr08s07-in-f8:http    ESTABLISHED
  TCP    192.168.0.3:53638      a-0011:https           ESTABLISHED
  TCP    192.168.0.3:53649      host240-rangeA-akamai-aanp:http  ESTABLISHED
  TCP    192.168.0.3:53671      host216-rangeA-akamai-aanp:http  ESTABLISHED
  TCP    192.168.0.3:53677      a104-82-215-44:http    ESTABLISHED
  TCP    192.168.0.3:53696      lhr08s07-in-f4:http    ESTABLISHED
  TCP    192.168.0.3:53700      host177-rangeA-akamai-aanp:http  ESTABLISHED
  TCP    192.168.0.3:53738      a23-198-37-206:http    ESTABLISHED
  TCP    192.168.0.3:53739      74.125.71.155:https    ESTABLISHED
  TCP    192.168.0.3:53743      host154-rangeA-akamai-aanp:http  ESTABLISHED
  TCP    192.168.0.3:53744      host240-rangeA-akamai-aanp:http  ESTABLISHED
  TCP    192.168.0.3:53745      host240-rangeA-akamai-aanp:http  ESTABLISHED
  TCP    192.168.0.3:53791      185.45.5.34:https      ESTABLISHED
  TCP    192.168.0.3:53820      lhr14s27-in-f3:http    ESTABLISHED
  TCP    192.168.0.3:53821      lhr14s27-in-f3:http    ESTABLISHED
  TCP    192.168.0.3:53823      lhr14s27-in-f3:http    ESTABLISHED
  TCP    192.168.0.3:53832      74.125.71.99:http      ESTABLISHED
  TCP    192.168.0.3:53863      lhr08s07-in-f2:https   ESTABLISHED
  TCP    192.168.0.3:54256      lhr14s24-in-f2:http    ESTABLISHED
  TCP    192.168.0.3:54257      lhr14s24-in-f2:http    ESTABLISHED
  TCP    192.168.0.3:54258      lhr14s24-in-f2:http    TIME_WAIT
  TCP    192.168.0.3:54259      lhr14s24-in-f2:http    TIME_WAIT
  TCP    192.168.0.3:54260      lhr14s24-in-f2:http    TIME_WAIT
  TCP    192.168.0.3:54267      r-069-045-234-077:https  TIME_WAIT
  TCP    192.168.0.3:54268      r-069-045-234-077:https  ESTABLISHED
  TCP    192.168.0.3:54269      lhr14s24-in-f2:http    ESTABLISHED
  TCP    192.168.0.3:54313      a-0011:https           ESTABLISHED
  TCP    192.168.0.3:54453      74.125.71.99:http      TIME_WAIT
  TCP    192.168.0.3:54454      74.125.71.99:http      TIME_WAIT
  TCP    192.168.0.3:54464      lhr14s23-in-f1:http    TIME_WAIT
  TCP    192.168.0.3:54466      lhr14s23-in-f1:http    TIME_WAIT
  TCP    192.168.0.3:54520      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54521      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54522      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54534      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54536      93.184.221.133:http    TIME_WAIT
  TCP    192.168.0.3:54537      93.184.221.133:http    TIME_WAIT
  TCP    192.168.0.3:54538      93.184.221.133:http    TIME_WAIT
  TCP    192.168.0.3:54539      93.184.221.133:http    TIME_WAIT
  TCP    192.168.0.3:54540      93.184.221.133:http    TIME_WAIT
  TCP    192.168.0.3:54541      93.184.221.133:http    TIME_WAIT
  TCP    192.168.0.3:54542      ec2-54-229-11-237:http  TIME_WAIT
  TCP    192.168.0.3:54543      ec2-54-229-11-237:http  TIME_WAIT
  TCP    192.168.0.3:54544      ec2-54-229-11-237:http  TIME_WAIT
  TCP    192.168.0.3:54545      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54546      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54547      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54548      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54555      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54559      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54563      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54564      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54577      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54578      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54579      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54580      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54608      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54609      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54610      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54611      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54649      ec2-54-243-58-2:http   TIME_WAIT
  TCP    192.168.0.3:54650      ec2-54-243-58-2:http   TIME_WAIT
  TCP    192.168.0.3:54651      ec2-54-243-58-2:http   TIME_WAIT
  TCP    192.168.0.3:54656      93.184.221.133:http    LAST_ACK
  TCP    192.168.0.3:54664      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54665      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54666      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54667      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54668      lhr08s07-in-f1:http    ESTABLISHED
  TCP    192.168.0.3:54669      185.31.19.249:http     ESTABLISHED
  TCP    192.168.0.3:54670      185.31.19.249:http     ESTABLISHED
  TCP    192.168.0.3:54671      185.31.19.249:http     ESTABLISHED
  TCP    192.168.0.3:54672      185.31.19.249:http     ESTABLISHED
  TCP    192.168.0.3:54673      185.31.19.249:http     ESTABLISHED
  TCP    192.168.0.3:54674      185.31.19.249:http     ESTABLISHED
  TCP    192.168.0.3:54675      23.253.21.117:http     ESTABLISHED
  TCP    192.168.0.3:54676      23.253.21.117:http     ESTABLISHED
  TCP    192.168.0.3:54677      23.253.21.117:http     ESTABLISHED
  TCP    192.168.0.3:54678      138.108.7.20:http      ESTABLISHED
  TCP    192.168.0.3:54679      lhr08s07-in-f2:http    ESTABLISHED
  TCP    192.168.0.3:54680      141.101.125.175:http   ESTABLISHED
  TCP    192.168.0.3:54681      138.108.7.20:http      ESTABLISHED
  TCP    192.168.0.3:54682      lhr08s07-in-f2:http    ESTABLISHED
  TCP    192.168.0.3:54683      lhr08s07-in-f1:http    ESTABLISHED
  TCP    192.168.0.3:54684      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54685      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54686      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54687      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54688      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54689      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54690      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54691      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54692      lhr08s07-in-f1:http    ESTABLISHED
  TCP    192.168.0.3:54693      a104-71-2-220:http     ESTABLISHED
  TCP    192.168.0.3:54694      lhr08s07-in-f14:http   ESTABLISHED
  TCP    192.168.0.3:54695      lhr08s07-in-f4:http    ESTABLISHED
  TCP    192.168.0.3:54696      lhr08s07-in-f14:http   ESTABLISHED
  TCP    192.168.0.3:54697      a104-71-2-220:http     ESTABLISHED
  TCP    192.168.0.3:54698      93.184.221.133:http    ESTABLISHED
  TCP    192.168.0.3:54699      93.184.221.133:http    ESTABLISHED
  TCP    192.168.0.3:54700      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54701      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54702      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54703      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54704      141.101.126.175:http   ESTABLISHED
  TCP    192.168.0.3:54705      hwcdn:http             ESTABLISHED
  TCP    192.168.0.3:54706      hwcdn:http             ESTABLISHED
  TCP    192.168.0.3:54707      hwcdn:http             ESTABLISHED
  TCP    192.168.0.3:54708      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54709      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54710      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54711      SkyRouter:5431         TIME_WAIT
  TCP    192.168.0.3:54712      ec2-54-76-183-161:http  SYN_SENT
  TCP    192.168.0.3:54713      ec2-54-246-92-237:http  SYN_SENT
  TCP    192.168.0.3:54735      a104-71-43-47:http     SYN_SENT
  TCP    192.168.0.3:54736      a104-71-43-47:http     SYN_SENT
  TCP    192.168.0.3:54737      ec2-50-19-223-84:http  SYN_SENT
  TCP    192.168.0.3:54738      173:http               SYN_SENT
  TCP    192.168.0.3:54739      ec2-54-246-92-237:http  SYN_SENT
  TCP    192.168.0.3:54740      a104-71-43-47:http     SYN_SENT
  TCP    192.168.0.3:54741      ec2-54-76-183-161:http  SYN_SENT
  TCP    192.168.0.3:54742      ec2-50-19-223-84:http  SYN_SENT
  TCP    192.168.0.3:54743      173:http               SYN_SENT
  TCP    192.168.0.3:54744      ec2-54-191-72-93:http  SYN_SENT
  TCP    192.168.0.3:54745      ec2-54-191-72-93:http  SYN_SENT
  TCP    192.168.0.3:54746      a23-202-165-209:http   SYN_SENT
  TCP    192.168.0.3:54747      a23-202-165-209:http   SYN_SENT

C:\WINDOWS\system32>

Just ran a scan with TREND MICRO HouseCall and that didn't find anything, just running a scan with Microsoft Saftey Scanner. I will post the results soon.


Edited by smudger1767, 05 June 2015 - 12:11 PM.


BC AdBot (Login to Remove)

 


m

#2 malynensi

malynensi

  • Members
  • 145 posts
  • OFFLINE
  •  
  • Local time:04:21 AM

Posted 06 June 2015 - 05:01 AM

hi guys, i have noticed the same issue wit my internet too in the last couple of weeks. Im hoping to get a solution here too



#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,595 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:21 PM

Posted 06 June 2015 - 06:15 AM

TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, and XP, TCPView also reports the name of the process that owns the endpoint. When you start TCPView it will enumerate all active TCP and UDP endpoints, resolving all IP addresses to their domain name versions. You can use a toolbar button or menu item to toggle the display of resolved names. On Windows XP systems, TCPView shows the name of the process that owns each endpoint.

TCPView for Windows

The column for Remote Address shows the localhost for your Local Address. The Local Port is the port(s) used on your machine and those listed as LISTENING are the ports that are open to establish (accept) connections with another computer. For well-known ports listed under Local Port, TCPView will display the name of the service such as ntp (network time protocol) instead of the port number (123). Keep in mind that it is normal for TCPView to show changes as additional processes initiate connections or the connections change state.
  • Lines that appear in green are newly opened ports.
  • Lines that appear in red are connections that are expected to close.
If TCPView indicates a number of connections, some of them can be explained by applications that run in the background which are attempting to update. File sharing programs and some online games also make connections. Normally if your firewall is configured properly, there should be very few open ports.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:21 AM

Posted 07 June 2015 - 01:01 PM

What were you doing on your machine when you ran netstat? e.g. did you have browsers open? how many tabs?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#5 PresComm

PresComm

  • Members
  • 109 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:21 PM

Posted 09 June 2015 - 06:41 AM

Not sure if this is going against any policies or such, since I am new to the forums (well, new to posting, anyway), but...

Fiddler is a great tool for watching and capturing HTTP connections from your machine. Looks like you have a lot of HTTP connections going on. Like Didier said, did you have a browser open while this was going on? A single page can make dozens of HTTP connections (external advertisements, scripts, etc.) If you run Fiddler with all browsers closed, are you still seeing the connections?



#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,595 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:21 PM

Posted 09 June 2015 - 02:06 PM

Not sure if this is going against any policies or such, since I am new to the forums (well, new to posting, anyway)

You're not breaking any rules.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 Azarius

Azarius

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Trowbridge, UK
  • Local time:03:21 AM

Posted 09 February 2016 - 01:58 PM

A temporary fix is to use the command prompt (type cmd in the run box) and type in:

 

ipconfig /release

 

then

 

ipconfig /renew

 

This will refresh your IP and disconnect any other active connections.

 

As for finding out where outside connections on your system  are coming from you can google search IP addresses for estimated locations, I say estimated as it seems to be far from precise.


Edited by Azarius, 09 February 2016 - 02:03 PM.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users