New Posts  All Forums:Forum Nav:

Lots of open ports!

post #1 of 11
2/24/10 at 11:23pm
Thread Starter 
I have been running a fresh install of Windows 7 for about 2 months. I just typed netstat in the cmd prompt and this is what came up.

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Russell>netstat

Active Connections

Proto Local Address Foreign Address State
TCP 10.10.10.4:53594 yi-in-f147:http ESTABLISHED
TCP 10.10.10.4:53736 yw-in-f113:http TIME_WAIT
TCP 10.10.10.4:53754 gx-in-f149:http TIME_WAIT
TCP 10.10.10.4:53770 gx-in-f148:http ESTABLISHED
TCP 10.10.10.4:53771 a72-247-242-210:http TIME_WAIT
TCP 10.10.10.4:53784 yw-in-f154:http TIME_WAIT
TCP 10.10.10.4:53788 yw-in-f155:http TIME_WAIT
TCP 10.10.10.4:53792 mojofarm:http TIME_WAIT
TCP 10.10.10.4:53793 97.65.135.163:http TIME_WAIT
TCP 10.10.10.4:53797 yx-in-f101:http TIME_WAIT
TCP 10.10.10.4:53798 yx-in-f101:http TIME_WAIT
TCP 10.10.10.4:53799 97.65.135.144:http TIME_WAIT
TCP 10.10.10.4:53800 149.174.254.214:http TIME_WAIT
TCP 10.10.10.4:53804 a96-6-123-26:http TIME_WAIT
TCP 10.10.10.4:53816 64:http TIME_WAIT
TCP 10.10.10.4:53817 97.65.135.146:http TIME_WAIT
TCP 10.10.10.4:53818 97.65.135.146:http TIME_WAIT
TCP 10.10.10.4:53819 97.65.135.146:http TIME_WAIT
TCP 10.10.10.4:53820 97.65.135.146:http TIME_WAIT
TCP 10.10.10.4:53821 97.65.135.146:http TIME_WAIT
TCP 10.10.10.4:53822 97.65.135.146:http TIME_WAIT
TCP 10.10.10.4:53824 65.55.11.254:http TIME_WAIT
TCP 10.10.10.4:53825 65.55.11.254:http TIME_WAIT
TCP 10.10.10.4:53826 65.55.11.254:http TIME_WAIT
TCP 10.10.10.4:53827 97.65.135.155:http ESTABLISHED
TCP 10.10.10.4:53828 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53829 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53830 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53831 97.65.135.155:http TIME_WAIT
TCP 10.10.10.4:53832 97.65.135.155:http TIME_WAIT
TCP 10.10.10.4:53833 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53834 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53835 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53836 97.65.135.155:http TIME_WAIT
TCP 10.10.10.4:53837 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53838 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53839 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53840 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53841 97.65.135.155:http TIME_WAIT
TCP 10.10.10.4:53842 97.65.135.155:http TIME_WAIT
TCP 10.10.10.4:53843 97.65.135.155:http TIME_WAIT
TCP 10.10.10.4:53845 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53846 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53847 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53848 97.65.135.162:http ESTABLISHED
TCP 10.10.10.4:53849 97.65.135.162:http ESTABLISHED
TCP 10.10.10.4:53850 97.65.135.162:http ESTABLISHED
TCP 10.10.10.4:53851 97.65.135.162:http TIME_WAIT
TCP 10.10.10.4:53852 microsoft:http TIME_WAIT
TCP 10.10.10.4:53854 65.55.11.254:http TIME_WAIT
TCP 10.10.10.4:53855 65.55.11.254:http TIME_WAIT
TCP 10.10.10.4:53856 65.55.197.248:http ESTABLISHED
TCP 10.10.10.4:53857 66.129.67.103:http TIME_WAIT
TCP 10.10.10.4:53858 box408:http TIME_WAIT
TCP 10.10.10.4:53859 box408:http TIME_WAIT
TCP 10.10.10.4:53860 box408:http TIME_WAIT
TCP 10.10.10.4:53862 box408:http TIME_WAIT
TCP 10.10.10.4:53863 box408:http TIME_WAIT
TCP 10.10.10.4:53864 ec2-174-129-36-159:http TIME_WAIT
TCP 10.10.10.4:53865 208.122.1.138:http TIME_WAIT
TCP 10.10.10.4:53868 yw-in-f155:http TIME_WAIT
TCP 10.10.10.4:53869 yw-in-f155:http TIME_WAIT
TCP 10.10.10.4:53870 digg:http TIME_WAIT
TCP 10.10.10.4:53871 tweetmeme:http TIME_WAIT
TCP 10.10.10.4:53872 ec2-174-129-36-159:http TIME_WAIT
TCP 10.10.10.4:53874 yw-in-f155:http TIME_WAIT
TCP 10.10.10.4:53875 208.122.47.54:http TIME_WAIT
TCP 10.10.10.4:53880 yw-in-f113:http ESTABLISHED
TCP 10.10.10.4:53883 gx-in-f149:http ESTABLISHED
TCP 10.10.10.4:53884 digg:http TIME_WAIT
TCP 10.10.10.4:53885 yw-in-f166:http TIME_WAIT
TCP 10.10.10.4:53887 72.21.207.165:http ESTABLISHED
TCP 10.10.10.4:53888 72.21.207.165:http ESTABLISHED
TCP 10.10.10.4:53889 a96-6-123-26:http ESTABLISHED
TCP 10.10.10.4:53890 204-232-199-5:http TIME_WAIT
TCP 10.10.10.4:53896 10.10.10.1:http TIME_WAIT
TCP 10.10.10.4:53897 10.10.10.1:http TIME_WAIT
TCP 10.10.10.4:53905 web1:http TIME_WAIT
TCP 10.10.10.4:53910 yw-in-f155:http ESTABLISHED
TCP 10.10.10.4:53911 yw-in-f155:http ESTABLISHED
TCP 127.0.0.1:53310 Russell-PC:53311 ESTABLISHED
TCP 127.0.0.1:53311 Russell-PC:53310 ESTABLISHED
TCP 127.0.0.1:53313 Russell-PC:53314 ESTABLISHED
TCP 127.0.0.1:53314 Russell-PC:53313 ESTABLISHED
TCP [::1]:2869 Russell-PC:54113 TIME_WAIT
TCP [::1]:2869 Russell-PC:54114 ESTABLISHED
TCP [::1]:54114 Russell-PC:icslap ESTABLISHED

C:\Users\Russell>

Seems like alot of open ports to me....
What is going on?
Reply
Reply
post #2 of 11
2/24/10 at 11:54pm
from the looks of it, it appears you've got direct connections to digg and twitter as well as your ISP (I presume TW Telecom is your ISP), but it does look like you've got a lot of programs with open ports
Reply
Reply
post #3 of 11
2/25/10 at 12:23am
Thread Starter 
Wow, thats very very strange. I have never even been on twitter or digg (dont even know what that is). And my ISP is Comporium. What should I do about this?
Reply
Reply
post #4 of 11
2/25/10 at 1:56am
hmm, that's very odd. I'd try to shut down different programs and check again after each one. That might reveal which one is opening the extra ports.
Reply
Reply
post #5 of 11
2/25/10 at 7:32am
What anti Virus and Spyware programs are you using? Also what are your firewall settings.
Reply
Reply
post #6 of 11
2/25/10 at 8:17am
Have you checked out the start-up processes and services for things that don't look normal?

I use Microsoft Security Essentials and default Windows Firewall settings myself.

cheers ...
Reply
Reply
post #7 of 11
2/25/10 at 9:44am
Thread Starter 
The thing is, I'm not completely stupid when it comes to computers, just when it comes to ports. As you can see form the screen shots, I only have a couple of things selected for start up and only a few non microsoft services running.
I am running Avira free edition for my antivirus and the windows firewall. I am behind a router with mac filtering enabled.
http://i1006.photobucket.com/albums/...mey/Screen.png
http://i1006.photobucket.com/albums/...mey/router.png
http://i1006.photobucket.com/albums/...ey/router1.png
http://i1006.photobucket.com/albums/...ey/screen1.png
http://i1006.photobucket.com/albums/...y/ipconfig.png
Can't seem to figure this out. I'm going to download Comodo once I get home and see what it can do.
Reply
Reply
post #8 of 11
2/25/10 at 10:02am
Thread Starter 
another thing, why is it when I look at the connections under netstat, some IP's are showing up like nodes are connected, but im the only computer on the network. My address is 10.10.10.4 and my xbox is off. I have mac filtering enabled too.
Reply
Reply
post #9 of 11
2/25/10 at 4:58pm
Is file and print sharing enabled? (It is by default in win7)
Reply
Reply
post #10 of 11
2/25/10 at 9:44pm
Okay, I'm guessing that Utorrent is the culprit. It's most likely opening up a ton of ports so multiple users can download the stuff you have on your Torrent. Peer to peer networks are infamous for this sort of thing.
Reply
Reply
post #11 of 11
2/27/10 at 3:08am
Djembe, Good call I totally missed that one.
Reply
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Notebook Forums - General