help with netstat & netstat -ano

[Computernerd22]

TCP 192.168.1.100


That is part of your local lan. A private IP number.


Check your computer for p2p type programs having been installed and portforwarding in you router.


TCP 192.168.1.100:62728 8.19.18.172:
Now that line tells me your router is using port 62728 to connect to 8.19.18.172 in New York city. A ad server from the looks of things and yes those ad servers can really slow/mess things up.

I know 192.168.1.100 is the one assigned to me from the router but i was not sure about the port it what using so thank you for the information i greatly appreciated.

Check your computer for p2p type programs having been installed and portforwarding in you router.

I looked through my system and didn't find any p2p applications. I scanned my system with spybot, malware antimalware, and AVG and hijack this and everything came out fine. However, when i check netstat -ano this is the latest output

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.


C:\Users\Mike>netstat -ano


Active Connections


Proto Local Address Foreign Address State PID
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 1088
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING 784
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING 1184
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING 1480
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING 1220
TCP 0.0.0.0:49156 0.0.0.0:0 LISTENING 840
TCP 0.0.0.0:49157 0.0.0.0:0 LISTENING 828
TCP 0.0.0.0:49251 0.0.0.0:0 LISTENING 3524
TCP 127.0.0.1:9421 0.0.0.0:0 LISTENING 3524
TCP 127.0.0.1:9422 0.0.0.0:0 LISTENING 3524
TCP 127.0.0.1:9423 0.0.0.0:0 LISTENING 3524
TCP 169.254.16.78:139 0.0.0.0:0 LISTENING 4
TCP 192.168.1.100:139 0.0.0.0:0 LISTENING 4
TCP 192.168.1.100:49216 209.107.220.188:443 ESTABLISHED 3524
TCP 192.168.1.100:49318 69.171.227.71:443 ESTABLISHED 3840
TCP 192.168.1.100:49767 173.194.37.0:80 ESTABLISHED 3840
TCP 192.168.1.100:50279 69.171.227.71:443 ESTABLISHED 3840
TCP 192.168.1.100:50417 173.194.37.1:80 ESTABLISHED 3840
TCP 192.168.1.100:50450 184.84.252.250:80 ESTABLISHED 3840
TCP 192.168.1.100:50451 184.84.252.250:80 ESTABLISHED 3840
TCP 192.168.1.100:50458 184.84.252.250:80 ESTABLISHED 3840
TCP 192.168.1.100:50461 184.84.252.215:80 ESTABLISHED 3840
TCP 192.168.1.100:50470 184.28.189.231:80 ESTABLISHED 3840
TCP 192.168.1.100:50473 184.84.252.215:80 ESTABLISHED 3840
TCP 192.168.1.100:50495 173.194.37.4:80 ESTABLISHED 3840
TCP 192.168.1.100:50496 173.194.37.5:80 ESTABLISHED 3840
TCP 192.168.1.100:50497 173.194.37.5:80 ESTABLISHED 3840
TCP 192.168.1.100:50498 173.194.37.5:80 ESTABLISHED 3840
TCP 192.168.1.100:50499 173.194.37.6:80 ESTABLISHED 3840
TCP 192.168.1.100:50500 173.194.37.6:80 ESTABLISHED 3840
TCP 192.168.1.100:50501 173.194.37.6:80 ESTABLISHED 3840
TCP 192.168.1.100:50502 173.194.37.6:80 ESTABLISHED 3840
TCP 192.168.1.100:50504 173.194.37.7:80 ESTABLISHED 3840
TCP 192.168.1.100:50505 173.194.37.7:80 ESTABLISHED 3840
TCP 192.168.1.100:50507 173.194.37.3:80 ESTABLISHED 3840
TCP 192.168.1.100:50508 173.194.37.2:443 ESTABLISHED 3840
TCP 192.168.1.100:50509 173.194.29.146:80 ESTABLISHED 3840
TCP 192.168.1.100:50510 173.194.37.3:80 ESTABLISHED 3840
TCP 192.168.1.100:50511 173.194.41.111:80 ESTABLISHED 3840
TCP 192.168.1.100:50512 173.194.37.8:80 ESTABLISHED 3840
TCP 192.168.1.100:50513 173.194.41.111:443 ESTABLISHED 3840
TCP [::]:135 [::]:0 LISTENING 1088
TCP [::]:445 [::]:0 LISTENING 4
TCP [::]:5357 [::]:0 LISTENING 4
TCP [::]:49152 [::]:0 LISTENING 784
TCP [::]:49153 [::]:0 LISTENING 1184
TCP [::]:49154 [::]:0 LISTENING 1480
TCP [::]:49155 [::]:0 LISTENING 1220
TCP [::]:49156 [::]:0 LISTENING 840
TCP [::]:49157 [::]:0 LISTENING 828
UDP 0.0.0.0:123 *:* 1480
UDP 0.0.0.0:500 *:* 1220
UDP 0.0.0.0:3702 *:* 1480
UDP 0.0.0.0:3702 *:* 1480
UDP 0.0.0.0:4500 *:* 1220
UDP 0.0.0.0:5355 *:* 1600
UDP 0.0.0.0:62091 *:* 1480
UDP 0.0.0.0:64872 *:* 3524
UDP 0.0.0.0:64874 *:* 3524
UDP 127.0.0.1:1900 *:* 1480
UDP 127.0.0.1:52291 *:* 3524
UDP 127.0.0.1:57623 *:* 1220
UDP 127.0.0.1:61564 *:* 1480
UDP 127.0.0.1:64873 *:* 3524
UDP 169.254.16.78:137 *:* 4
UDP 169.254.16.78:138 *:* 4
UDP 169.254.16.78:1900 *:* 1480
UDP 169.254.16.78:61563 *:* 1480
UDP 192.168.1.100:137 *:* 4
UDP 192.168.1.100:138 *:* 4
UDP 192.168.1.100:1900 *:* 1480
UDP 192.168.1.100:61562 *:* 1480
UDP [::]:123 *:* 1480
UDP [::]:500 *:* 1220
UDP [::]:3702 *:* 1480
UDP [::]:3702 *:* 1480
UDP [::]:5355 *:* 1600
UDP [::]:62092 *:* 1480
UDP [::1]:1900 *:* 1480
UDP [::1]:61560 *:* 1480
UDP [fe80::100:7f:fffe%9]:1900 *:* 1480


UDP [fe80::100:7f:fffe%9]:61561 *:* 148
0
UDP [fe80::4df9:543a:a3a2:104e%12]:1900 *:*
1480
UDP [fe80::4df9:543a:a3a2:104e%12]:61559 *:*
1480
UDP [fe80::f456:f2f2:6a95:321a%8]:1900 *:*
1480
UDP [fe80::f456:f2f2:6a95:321a%8]:61558 *:*
1480


C:\Users\Mike>

i checked the routers logs all icoming & outgoing (outgoing was full) incoming like 1 or 2. Also, port forwarding is not enabled.


There's something on this system that is connecting out thing is i have a firewall monitoring incomming/outgoing connections so thinkin w.t.f anyways, thank you guys for your help.