PC connects to 'weird' IP's

Printable View

August 5th, 2013, 01:21 AM
Quadcore

1 Attachment(s)

PC connects to 'weird' IP's

Hi all,

I hope someone can direct me to solving the following problem.

I found out that my pc connects to on port 80 to weird IP's everytime it boots, AND while it's online to the ip 77.67.4.* several processes connect to this IP, it's not always the same program nor the same IP, but allways in the same range 77.67.4.*Attachment 791

thank you

update 1: when I block this range 77.67.4.1-77.67.4.253 in my firewall I cant browse the web anymore, it looks like my http traffic gets routed through those IP's.
August 5th, 2013, 06:50 AM
Shay

NetRange: 77.0.0.0 - 77.255.255.255
CIDR: 77.0.0.0/8
OriginAS:
NetName: 77-RIPE
NetHandle: NET-77-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2006-08-29
Updated: 2009-05-18
Ref: http://whois.arin.net/rest/net/NET-77-0-0-0-1

OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/RIPE
August 5th, 2013, 08:08 AM
Quadcore

Quote:

Originally Posted by Shay

NetRange: 77.0.0.0 - 77.255.255.255
CIDR: 77.0.0.0/8
OriginAS:
NetName: 77-RIPE
NetHandle: NET-77-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2006-08-29
Updated: 2009-05-18
Ref: http://whois.arin.net/rest/net/NET-77-0-0-0-1

OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/RIPE

Hello Shay, what does this tell me? Do you have any clue?
August 6th, 2013, 02:21 AM
Shay

Run ipconfig /all
And check your DNS server ip number.

Data Base Server set up in the Netherlands
https://www.ripe.net/

Quote:

The most prominent activity of the RIPE NCC is to act as the Regional Internet Registry (RIR) providing global Internet resources and related services (IPv4, IPv6 and AS Number resources) to members in the RIPE NCC service region.