Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

A strange sequence of IP's are connecting to me.


  • Please log in to reply

#1
IO-error

IO-error

    Member

  • Member
  • PipPipPip
  • 276 posts
Hi there.

I am having problems with non-responsive internet for a bunch of times a day.
At first I blamed Win7 for this behavior, but I am not sure anymore.

I found out that, while the internet is unresponsive (and it won't ever revive itself automatically), my computer is making connections to a lot of different IP's.
This is just a small amount I'm pasting here. (Oh an SYSTEM is my computername, not the process ^.^)
117	02:50:44 18-7-2011	4.1324499		67.66.202.208	SYSTEM  	UDP	UDP:SrcPort = 54399, DstPort = 47816, Length = 111	{UDP:8, IPv4:7}
128	02:50:44 18-7-2011	4.5423965		92.234.248.102	SYSTEM  	UDP	UDP:SrcPort = 37435, DstPort = 47816, Length = 75	{UDP:10, IPv4:9}
136	02:50:45 18-7-2011	4.8449753		219.89.51.134	SYSTEM  	UDP	UDP:SrcPort = 21455, DstPort = 47816, Length = 111	{UDP:12, IPv4:11}
178	02:50:46 18-7-2011	6.2919482		112.202.161.89	SYSTEM  	UDP	UDP:SrcPort = 33249, DstPort = 47816, Length = 38	{UDP:14, IPv4:13}
281	02:50:50 18-7-2011	9.7174336		123.2.97.114	SYSTEM  	UDP	UDP:SrcPort = 1024, DstPort = 47816, Length = 38	{UDP:16, IPv4:15}
326	02:50:51 18-7-2011	11.1190722		87.202.84.117	SYSTEM  	UDP	UDP:SrcPort = 25821, DstPort = 47816, Length = 75	{UDP:18, IPv4:17}
391	02:50:53 18-7-2011	13.3591905		189.191.247.220	SYSTEM  	UDP	UDP:SrcPort = 29896, DstPort = 47816, Length = 111	{UDP:20, IPv4:19}
658	02:51:02 18-7-2011	22.2892950		70.74.197.87	SYSTEM  	UDP	UDP:SrcPort = 52622, DstPort = 47816, Length = 75	{UDP:29, IPv4:28}
670	02:51:03 18-7-2011	22.7092608		186.195.107.33	SYSTEM  	UDP	UDP:SrcPort = 28163, DstPort = 47816, Length = 109	{UDP:31, IPv4:30}
677	02:51:03 18-7-2011	22.8609704		93.50.97.103	SYSTEM  	UDP	UDP:SrcPort = 44008, DstPort = 47816, Length = 75	{UDP:33, IPv4:32}
716	02:51:04 18-7-2011	23.9898444		188.248.97.174	SYSTEM  	UDP	UDP:SrcPort = 16140, DstPort = 47816, Length = 38	{UDP:35, IPv4:34}
718	02:51:04 18-7-2011	24.0194632		211.28.207.71	SYSTEM  	UDP	UDP:SrcPort = 17751, DstPort = 47816, Length = 114	{UDP:37, IPv4:36}
813	02:51:07 18-7-2011	27.2593481		173.247.21.36	SYSTEM  	UDP	UDP:SrcPort = 58323, DstPort = 47816, Length = 111	{UDP:39, IPv4:38}

I'm aware that torrent clients also cause this behavior, but I wouldn't be here if the torrent client caused this.
I'm not running any extra programs like hamachi*, torrent-clients, messenger, windows update or the automagically activated "customerexperienceimprovementcareserviceinvestigation-bandwidthdestroyer-applicationmanagementmodule".

This has happened to me before and I've taken precautions since that time.
Thanks to Sandboxie (another virtual pc box) for running all my downloaded programs/installers, I've been clean from infections... I thought...
Since three weeks this problem persists again, but now it's a bit different.

It used to only do this when explorer.exe was started (meaning I was 100% sure I was infected).
Now it does this every 15-20 minutes unless I am pinging somebody from my hamachi list or local network.

Is there any program I could use to see which programs are causing this?
Microsoft Network Monitor tells me the program is <Unknown>. Meaning it's not very helpful :unsure:

*Note, I was running hamachi, but not logged on while these IP's showed up. The network monitor spotted a (1) broadcast signal going to the hamachi range of IP's (5.x.x.x).
It's rather useless and doesn't mean the list of IP's was produced by hamachi. So I ran another test with hamachi-services disabled and concluded the random IP's still show up.

Thnx in advance, I know there are more people who also need help, so I'll be patient.
I uploaded the Microsoft Network Module, it's right under the 1 MB, marvelous :).

Cheers.

Edited by IO-error, 17 July 2011 - 07:29 PM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP