Go Back   Tech Support Forum > Networking Forum > Networking Support

Netstat reports foreign IP addr accessing me

This is a discussion on Netstat reports foreign IP addr accessing me within the Networking Support forums, part of the Tech Support Forum category. TCP 192.168.1.102:33145 184.50.221.229:80 ESTABLISHED 4568 There's a lot of these. 184 is Akamai Technologies but I don't think I have


Reply
 
Thread Tools Search this Thread
Old 04-16-2011, 09:11 AM   #1
Registered Member
 
Join Date: Oct 2010
Posts: 12
OS: xp sp3



TCP 192.168.1.102:33145 184.50.221.229:80 ESTABLISHED 4568

There's a lot of these. 184 is Akamai Technologies but I don't think I have any of their products on my machine (maybe used to????) I asked them.

Is this harmful? (there are others, like RealMedia which has several connections)
RON

__________________
RonInNewYork is offline   Reply With Quote
Old 04-16-2011, 09:38 AM   #2
Registered Member
 
Xeneth's Avatar
 
Join Date: Mar 2009
Location: Louisville, KY
Posts: 415
OS: Windows 7 64bit, Ubuntu, openSUSE


Send a message via Yahoo to Xeneth

Quote:
TCP 192.168.1.102:33145 184.50.221.229:80 ESTABLISHED 4568
TCP 192.168.1.102:33145 is connecting to 184.50.221.229:80

Port 80 is HTTP, so it's likely something with a webpage, and if it stay's open, then it's more then a simple webpage. This on top of the fact of when I put "184.50.221.229" into the web browser, it say's:
Quote:
Invalid URL

The requested URL "/", is invalid.
Reference #9.a5c78f18.1302971683.10710d8b
So it may not be a webpage, just something using port 80 because it's normally not blocked.

Definitely something you want to look into, but I cannot say it's dangerous or not from just this info. If your firewall is advanced enough, put it in to block this IP and see if anything breaks.

__________________
Xeneth is offline   Reply With Quote
Old 04-16-2011, 01:27 PM   #3
TSF Enthusiast
 
Join Date: May 2009
Location: Southern California, USA
Posts: 507
OS: W7 Professional 64bit



This may be helpful - it's about the "AKAMAI NetSession Interface" which I suspect is what is showing up ---

What is this TCP connection that I see when I do a netstat on my machine?
Like most network communications software, the Akamai NetSession Interface communicates with a centralized directory, what we call the Akamai Control Plane, so the network knows your system's network status and availability. If downloads are slow, or sources are unavailable, the client can ask for more client sources, or alternatively switch to pulling from other servers.

Rgrds-Ross
__________________
rgsalinger is offline   Reply With Quote
Old 04-17-2011, 07:40 AM   #4
Registered Member
 
Join Date: Oct 2010
Posts: 12
OS: xp sp3



I sort of get it, but are you saying that AKAMAI is somehow important to my computer running (or its net connection) running ok? I found another connection this morning:

174.37.36.80

which from looking up is

mail.pcreview.co.uk

Now I have nothing to do with PCReview in the UK, so....? 6 open connection.
3 for Amazon (which I'm not on now), 2 for "Tribal Fusion" 204.11.109.23,
2 for 98.142.106.50 (Cotendo).

All of them on 80. What is the meaning of these listening to me on 80?

(What do you get when you do netstat -aon? Something similar?)

And how do I block them? They are NOT on my Firewall Exception List as far as I can tell. How can I block specific IP addresses from listening on my computer?

RON
__________________
RonInNewYork is offline   Reply With Quote
Old 04-17-2011, 10:38 AM   #5
Registered Member
 
Join Date: Oct 2010
Posts: 12
OS: xp sp3



I blocked four urls on my router and that seems to work but I think not in the long run. I would like to block by actual url or url range or something or by name. Why would FusionStorm or Cotendo want to listen on my computer? If they are part of, say, Google, that might be OK, dunno, but why?
__________________
RonInNewYork is offline   Reply With Quote
Old 04-18-2011, 09:34 AM   #6
TSF Enthusiast
 
Join Date: May 2009
Location: Southern California, USA
Posts: 507
OS: W7 Professional 64bit



Read about Akamai and decide for yourself what you want to do. My understanding, somewhat limited, is that it is part of the plumbing on the web and is used to distribute content for enterprises among many other things.

About Akamai

Rgrds-Ross
__________________
rgsalinger is offline   Reply With Quote
Old 04-19-2011, 07:25 AM   #7
Registered Member
 
Join Date: Oct 2010
Posts: 12
OS: xp sp3



Thanks. Very helpful.

Do you know what Cotendo does? I.e., why I should allow it access to my machine?

Thanks.
RON

__________________
RonInNewYork is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2


All times are GMT -7. The time now is 12:34 PM.


Copyright 2001 - 2014, Tech Support Forum

Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts