Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Software Troubleshooting
What's the program trying to connect to Taiwanese & other foreign computers on my system?
Message
<blockquote data-quote="conceptualclarity" data-source="post: 586151" data-attributes="member: 11916"><p>CurrPort and TCPView were interesting but did not resolve my issue. CurrPort created an HTML file I would like to be able to post here, but it's a long horizontal file that I don't believe I can properly convert.</p><p></p><p>Here is the weirdest and by far the most specifically identified site that something on my computer has tried to contact lately:</p><p><img src="http://imagizer.imageshack.com/img921/1698/xw7LAv.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /></p><p></p><p>This is comical! @<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite115" alt=":p" title="Stick out tongue :p" loading="lazy" data-shortname=":p" /></p><p></p><p><a href="http://www.ip2location.com/demo" target="_blank">Free Product Demo | IP2Location</a></p><p><strong>IP Address</strong> 50.198.35.237</p><p><strong>Location</strong> <img src="http://www.ip2location.com/images/flags/us.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /> United States, Illinois, Yorkville</p><p><strong>Latitude & Longitude</strong> 41.620980, -88.431720 (41°37'16"N 88°25'54"W)</p><p><strong>ISP <span style="color: #ff0080">Rosati's Pizza</span></strong></p><p><strong>Local Time</strong> 06 Jan, 2017 09:43 PM (UTC -06:00)</p><p><strong>Domain</strong> comcastbusiness.net</p><p><strong>Net Speed</strong> (COMP) Company/T1</p><p><strong>IDD & Area Code</strong> (1) 630/815</p><p><strong>ZIP Code</strong> 60560</p><p><strong>Weather Station</strong> Yorkville (USIL1300)</p><p><strong>Mobile Country Code (MCC)</strong> -</p><p><strong>Mobile Network Code (MNC)</strong> -</p><p><strong>Carrier Name</strong> -</p><p><strong>Elevation</strong> 183m</p><p><strong>Usage Type</strong> (COM) Commercial</p><p><strong>Anonymous Proxy</strong> No</p><p><strong>Shortcut</strong> <a href="http://www.ip2location.com/50.198.35.237" target="_blank">http://www.ip2location.com/50.198.35.237</a></p><p><strong>Twitterbot</strong> <a href="https://twitter.com/intent/tweet?screen_name=ip2location&text=50.198.35.237" target="_blank">@ip2location 50.198.35.237</a></p><p><strong>Slackbot</strong> <a href="http://www.ip2location.com/free/slack-command" target="_blank">/ip2location 50.198.35.237</a></p><p></p><p><a href="http://whois.domaintools.com/50.198.35.237" target="_blank">http://whois.domaintools.com/50.198.35.237</a></p><p>IP Location <img src="http://whois.domaintools.com/images/flags/us.gif" alt="" class="fr-fic fr-dii fr-draggable " style="" /> United States Yorkville <strong><span style="color: #ff0080">Rosati's Pizza</span></strong></p><p>ASN <img src="http://whois.domaintools.com/images/flags/us.gif" alt="" class="fr-fic fr-dii fr-draggable " style="" /> AS7922 COMCAST-7922 - Comcast Cable Communications, LLC, US (registered Feb 14, 1997)</p><p>Resolve Host 50-198-35-237-static.hfc.comcastbusiness.net</p><p>Whois Server whois.arin.net</p><p>IP Address 50.198.35.237</p><p>NetRange: 50.198.0.0 - 50.198.63.255</p><p>CIDR: 50.198.0.0/18</p><p>NetName: CBC-ILLINOIS-14</p><p>NetHandle: NET-50-198-0-0-1</p><p>Parent: CCCH3-4 (NET-50-128-0-0-1)</p><p>NetType: Reallocated</p><p>OriginAS: </p><p>Organization: Comcast Cable Communications Holdings, Inc (CCCH-3)</p><p>RegDate: 2013-01-04</p><p>Updated: 2013-01-04</p><p>Ref: <a href="https://whois.arin.net/rest/net/NET-50-198-0-0-1" target="_blank">Whois-RWS</a></p><p></p><p>OrgName: Comcast Cable Communications Holdings, Inc</p><p>OrgId: CCCH-3</p><p>Address: 1800 Bishops Gate Blvd</p><p>City: Mt Laurel</p><p>StateProv: NJ</p><p>PostalCode: 08054</p><p>Country: US</p><p>RegDate: 2003-07-28</p><p>Updated: 2016-09-06</p><p>Ref: <a href="https://whois.arin.net/rest/org/CCCH-3" target="_blank">Whois-RWS</a></p><p></p><p>OrgTechHandle: IC161-ARIN</p><p>OrgTechName: Comcast Cable Communications Inc</p><p>OrgTechPhone: +1-856-317-7200</p><p>OrgTechEmail: <a href="http://reversewhois.domaintools.com/?email=c72112c15f4371cf4ed525391784ac8e" target="_blank"><img src="http://source.domaintools.com/email.pgif?md5=c72112c15f4371cf4ed525391784ac8e&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a></p><p>OrgTechRef: <a href="https://whois.arin.net/rest/poc/IC161-ARIN" target="_blank">Whois-RWS</a></p><p></p><p>OrgAbuseHandle: NAPO-ARIN</p><p>OrgAbuseName: Network Abuse and Policy Observance</p><p>OrgAbusePhone: +1-888-565-4329</p><p>OrgAbuseEmail: <a href="http://reversewhois.domaintools.com/?email=300f56607ceaae5530f7acc5b2691feb" target="_blank"><img src="http://source.domaintools.com/email.pgif?md5=300f56607ceaae5530f7acc5b2691feb&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a></p><p>OrgAbuseRef: <a href="https://whois.arin.net/rest/poc/NAPO-ARIN" target="_blank">Whois-RWS</a></p><p></p><p>NetRange: 50.198.35.232 - 50.198.35.239</p><p>CIDR: 50.198.35.232/29</p><p>NetName: ROSATISPIZZA</p><p>NetHandle: NET-50-198-35-232-1</p><p>Parent: CBC-ILLINOIS-14 (NET-50-198-0-0-1)</p><p>NetType: Reassigned</p><p>OriginAS: </p><p>Customer: ROSATI'S PIZZA (C03301715)</p><p>RegDate: 2013-02-03</p><p>Updated: 2013-12-07</p><p>Ref: <a href="https://whois.arin.net/rest/net/NET-50-198-35-232-1" target="_blank">Whois-RWS</a></p><p></p><p>CustName: ROSATI'S PIZZA</p><p>Address: 1 Unavailable Street</p><p>City: YORKVILLE</p><p>StateProv: IL</p><p>PostalCode: 60560</p><p>Country: US</p><p>RegDate: 2013-02-03</p><p>Updated: 2013-02-03</p><p>Ref: <a href="https://whois.arin.net/rest/customer/C03301715" target="_blank">Whois-RWS</a></p><p></p><p>OrgTechHandle: IC161-ARIN</p><p>OrgTechName: Comcast Cable Communications Inc</p><p>OrgTechPhone: +1-856-317-7200</p><p>OrgTechEmail: <a href="http://reversewhois.domaintools.com/?email=c72112c15f4371cf4ed525391784ac8e" target="_blank"><img src="http://source.domaintools.com/email.pgif?md5=c72112c15f4371cf4ed525391784ac8e&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a></p><p>OrgTechRef: <a href="https://whois.arin.net/rest/poc/IC161-ARIN" target="_blank">Whois-RWS</a></p><p></p><p>OrgAbuseHandle: NAPO-ARIN</p><p>OrgAbuseName: Network Abuse and Policy Observance</p><p>OrgAbusePhone: +1-888-565-4329</p><p>OrgAbuseEmail: <a href="http://reversewhois.domaintools.com/?email=300f56607ceaae5530f7acc5b2691feb" target="_blank"><img src="http://source.domaintools.com/email.pgif?md5=300f56607ceaae5530f7acc5b2691feb&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent" alt="" class="fr-fic fr-dii fr-draggable " style="" /></a></p><p>OrgAbuseRef: <a href="https://whois.arin.net/rest/poc/NAPO-ARIN" target="_blank">Whois-RWS</a></p><p></p><p>NetRange: 50.128.0.0 - 50.255.255.255</p><p>CIDR: 50.128.0.0/9</p><p>NetName: CCCH3-4</p><p>NetHandle: NET-50-128-0-0-1</p><p>Parent: NET50 (NET-50-0-0-0-0)</p><p>NetType: Direct Allocation</p><p>OriginAS: AS7922</p><p>Organization: Comcast Cable Communications, LLC (CCCS)</p><p>RegDate: 2010-10-21</p><p>Updated: 2016-08-31</p><p>Ref: <a href="https://whois.arin.net/rest/net/NET-50-128-0-0-1" target="_blank">Whois-RWS</a></p><p></p><p>OrgName: Comcast Cable Communications, LLC</p><p>OrgId: CCCS</p><p>Address: 1800 Bishops Gate Blvd</p><p>City: Mt Laurel</p><p>StateProv: NJ</p><p>PostalCode: 08054</p><p>Country: US</p><p>RegDate: 2001-09-18</p><p>Updated: 2008-10-04</p><p>Ref: <a href="https://whois.arin.net/rest/org/CCCS" target="_blank">Whois-RWS</a></p><p></p><p>Here are a couple of screenshots of TCPView on my system scrubbed for privacy.</p><p></p><p>[ATTACH=full]131324[/ATTACH] </p><p></p><p>[ATTACH=full]131325[/ATTACH] </p><p></p><p></p><p>Can someone direct me to a better ports program than these two? And more specifically can someone help me figure out how I can find out which program is making all these connection attempts? It seems like surely there ought to be a way for me to pin that down.</p></blockquote><p></p>
[QUOTE="conceptualclarity, post: 586151, member: 11916"] CurrPort and TCPView were interesting but did not resolve my issue. CurrPort created an HTML file I would like to be able to post here, but it's a long horizontal file that I don't believe I can properly convert. Here is the weirdest and by far the most specifically identified site that something on my computer has tried to contact lately: [IMG]http://imagizer.imageshack.com/img921/1698/xw7LAv.png[/IMG] This is comical! @:p [URL="http://www.ip2location.com/demo"]Free Product Demo | IP2Location[/URL] [B]IP Address[/B] 50.198.35.237 [B]Location[/B] [IMG]http://www.ip2location.com/images/flags/us.png[/IMG] United States, Illinois, Yorkville [B]Latitude & Longitude[/B] 41.620980, -88.431720 (41°37'16"N 88°25'54"W) [B]ISP [COLOR=#ff0080]Rosati's Pizza[/COLOR] Local Time[/B] 06 Jan, 2017 09:43 PM (UTC -06:00) [B]Domain[/B] comcastbusiness.net [B]Net Speed[/B] (COMP) Company/T1 [B]IDD & Area Code[/B] (1) 630/815 [B]ZIP Code[/B] 60560 [B]Weather Station[/B] Yorkville (USIL1300) [B]Mobile Country Code (MCC)[/B] - [B]Mobile Network Code (MNC)[/B] - [B]Carrier Name[/B] - [B]Elevation[/B] 183m [B]Usage Type[/B] (COM) Commercial [B]Anonymous Proxy[/B] No [B]Shortcut[/B] [URL]http://www.ip2location.com/50.198.35.237[/URL] [B]Twitterbot[/B] [URL='https://twitter.com/intent/tweet?screen_name=ip2location&text=50.198.35.237']@ip2location 50.198.35.237[/URL] [B]Slackbot[/B] [URL='http://www.ip2location.com/free/slack-command']/ip2location 50.198.35.237[/URL] [URL]http://whois.domaintools.com/50.198.35.237[/URL] IP Location [IMG]http://whois.domaintools.com/images/flags/us.gif[/IMG] United States Yorkville [B][COLOR=#ff0080]Rosati's Pizza[/COLOR][/B] ASN [IMG]http://whois.domaintools.com/images/flags/us.gif[/IMG] AS7922 COMCAST-7922 - Comcast Cable Communications, LLC, US (registered Feb 14, 1997) Resolve Host 50-198-35-237-static.hfc.comcastbusiness.net Whois Server whois.arin.net IP Address 50.198.35.237 NetRange: 50.198.0.0 - 50.198.63.255 CIDR: 50.198.0.0/18 NetName: CBC-ILLINOIS-14 NetHandle: NET-50-198-0-0-1 Parent: CCCH3-4 (NET-50-128-0-0-1) NetType: Reallocated OriginAS: Organization: Comcast Cable Communications Holdings, Inc (CCCH-3) RegDate: 2013-01-04 Updated: 2013-01-04 Ref: [URL="https://whois.arin.net/rest/net/NET-50-198-0-0-1"]Whois-RWS[/URL] OrgName: Comcast Cable Communications Holdings, Inc OrgId: CCCH-3 Address: 1800 Bishops Gate Blvd City: Mt Laurel StateProv: NJ PostalCode: 08054 Country: US RegDate: 2003-07-28 Updated: 2016-09-06 Ref: [URL="https://whois.arin.net/rest/org/CCCH-3"]Whois-RWS[/URL] OrgTechHandle: IC161-ARIN OrgTechName: Comcast Cable Communications Inc OrgTechPhone: +1-856-317-7200 OrgTechEmail: [URL='http://reversewhois.domaintools.com/?email=c72112c15f4371cf4ed525391784ac8e'][IMG]http://source.domaintools.com/email.pgif?md5=c72112c15f4371cf4ed525391784ac8e&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent[/IMG][/URL] OrgTechRef: [URL="https://whois.arin.net/rest/poc/IC161-ARIN"]Whois-RWS[/URL] OrgAbuseHandle: NAPO-ARIN OrgAbuseName: Network Abuse and Policy Observance OrgAbusePhone: +1-888-565-4329 OrgAbuseEmail: [URL='http://reversewhois.domaintools.com/?email=300f56607ceaae5530f7acc5b2691feb'][IMG]http://source.domaintools.com/email.pgif?md5=300f56607ceaae5530f7acc5b2691feb&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent[/IMG][/URL] OrgAbuseRef: [URL="https://whois.arin.net/rest/poc/NAPO-ARIN"]Whois-RWS[/URL] NetRange: 50.198.35.232 - 50.198.35.239 CIDR: 50.198.35.232/29 NetName: ROSATISPIZZA NetHandle: NET-50-198-35-232-1 Parent: CBC-ILLINOIS-14 (NET-50-198-0-0-1) NetType: Reassigned OriginAS: Customer: ROSATI'S PIZZA (C03301715) RegDate: 2013-02-03 Updated: 2013-12-07 Ref: [URL="https://whois.arin.net/rest/net/NET-50-198-35-232-1"]Whois-RWS[/URL] CustName: ROSATI'S PIZZA Address: 1 Unavailable Street City: YORKVILLE StateProv: IL PostalCode: 60560 Country: US RegDate: 2013-02-03 Updated: 2013-02-03 Ref: [URL="https://whois.arin.net/rest/customer/C03301715"]Whois-RWS[/URL] OrgTechHandle: IC161-ARIN OrgTechName: Comcast Cable Communications Inc OrgTechPhone: +1-856-317-7200 OrgTechEmail: [URL='http://reversewhois.domaintools.com/?email=c72112c15f4371cf4ed525391784ac8e'][IMG]http://source.domaintools.com/email.pgif?md5=c72112c15f4371cf4ed525391784ac8e&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent[/IMG][/URL] OrgTechRef: [URL="https://whois.arin.net/rest/poc/IC161-ARIN"]Whois-RWS[/URL] OrgAbuseHandle: NAPO-ARIN OrgAbuseName: Network Abuse and Policy Observance OrgAbusePhone: +1-888-565-4329 OrgAbuseEmail: [URL='http://reversewhois.domaintools.com/?email=300f56607ceaae5530f7acc5b2691feb'][IMG]http://source.domaintools.com/email.pgif?md5=300f56607ceaae5530f7acc5b2691feb&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent[/IMG][/URL] OrgAbuseRef: [URL="https://whois.arin.net/rest/poc/NAPO-ARIN"]Whois-RWS[/URL] NetRange: 50.128.0.0 - 50.255.255.255 CIDR: 50.128.0.0/9 NetName: CCCH3-4 NetHandle: NET-50-128-0-0-1 Parent: NET50 (NET-50-0-0-0-0) NetType: Direct Allocation OriginAS: AS7922 Organization: Comcast Cable Communications, LLC (CCCS) RegDate: 2010-10-21 Updated: 2016-08-31 Ref: [URL="https://whois.arin.net/rest/net/NET-50-128-0-0-1"]Whois-RWS[/URL] OrgName: Comcast Cable Communications, LLC OrgId: CCCS Address: 1800 Bishops Gate Blvd City: Mt Laurel StateProv: NJ PostalCode: 08054 Country: US RegDate: 2001-09-18 Updated: 2008-10-04 Ref: [URL="https://whois.arin.net/rest/org/CCCS"]Whois-RWS[/URL] Here are a couple of screenshots of TCPView on my system scrubbed for privacy. [ATTACH=full]131324[/ATTACH] [ATTACH=full]131325[/ATTACH] Can someone direct me to a better ports program than these two? And more specifically can someone help me figure out how I can find out which program is making all these connection attempts? It seems like surely there ought to be a way for me to pin that down. [/QUOTE]
Insert quotes…
Verification
Post reply
Top