Digital Subscriber Line Why are these IPs doing a TimeWait?

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Why are these IPs doing a TimeWait? Harry Avant 11-16-07
Posted by Harry Avant on November 16, 2007, 7:51 pm
Please log in for more thread options
I just ran netstat -a -n and here is a partial list of results.

Port        IP                        Time Wait        IP owner
1594        69.26.187.18:80                 XEEX-COMMUNICATIONS, Santa
Monica, CA

1644        66.216.44.9:80                                WV Fiber, Nashville,
TN                        

1671        69.26.187.32:80                                XEEX

1713        66.150.96.119:80                                Feed Burner

1731        76.12.37.226:80                                LNH, Newark, DE
(Hostmysite)


Can someone tell me what "Time Wait" means and why are these IP
addresses showing up? I looked them up to find the owners such as XEEX
whom I've never heard of. Do I have a problem with my internet
connection?

Thanks,

Harry

Posted by msg on November 16, 2007, 10:14 pm
Please log in for more thread options
Harry Avant wrote:

> I just ran netstat -a -n and here is a partial list of results.
>
> Port        IP                        Time Wait        IP owner
> 1594        69.26.187.18:80                 XEEX-COMMUNICATIONS, Santa
> Monica, CA
>
> 1644        66.216.44.9:80                                WV Fiber, Nashville,
> TN                        
>
> 1671        69.26.187.32:80                                XEEX
>
> 1713        66.150.96.119:80                                Feed Burner
>
> 1731        76.12.37.226:80                                LNH, Newark, DE
> (Hostmysite)
>
>
> Can someone tell me what "Time Wait" means and why are these IP
> addresses showing up? I looked them up to find the owners such as XEEX
> whom I've never heard of. Do I have a problem with my internet
> connection?
>

All are TCP connections to remote port 80 (http), from your host, awaiting
timeout. Some application on your host (web browser, malware, etc.) made
these connections.

Regards,

Michael

Posted by Harry Avant on November 17, 2007, 1:49 pm
Please log in for more thread options



>Harry Avant wrote:
>
>> I just ran netstat -a -n and here is a partial list of results.
>>
>> Port        IP                        Time Wait        IP owner
>> 1594        69.26.187.18:80                 XEEX-COMMUNICATIONS, Santa
>> Monica, CA
>>
>> 1644        66.216.44.9:80                                WV Fiber, Nashville,
>> TN                        
>>
>> 1671        69.26.187.32:80                                XEEX
>>
>> 1713        66.150.96.119:80                                Feed Burner
>>
>> 1731        76.12.37.226:80                                LNH, Newark, DE
>> (Hostmysite)
>>
>>
>> Can someone tell me what "Time Wait" means and why are these IP
>> addresses showing up? I looked them up to find the owners such as XEEX
>> whom I've never heard of. Do I have a problem with my internet
>> connection?
>>
>
>All are TCP connections to remote port 80 (http), from your host, awaiting
>timeout. Some application on your host (web browser, malware, etc.) made
>these connections.
>
>Regards,
>
>Michael

Well I think I understand. Could this be due to some cookies, like
tracking cookies? I do run antivirus scans and Adaware along with
Spybot once a week.

As I continued to run netstat I got things like:

TCP 192.168.1.100:1737 205.178.187.13:80 ESTABLISHED
(Network Solutiosn)
TCP 192.168.1.100:1738 205.178.187.13:80 ESTABLISHED
TCP 192.168.1.100:1740 70.42.134.12:80 ESTABLISHED
(Internap Network Services)

TCP 192.168.1.100:1745 66.150.96.119:80 ESTABLISHED
TCP 192.168.1.100:1747 66.150.96.119:80 ESTABLISHED
TCP 192.168.1.100:1752 72.247.193.187:443 ESTABLISHED
(Akamai Technologies)
TCP 192.168.1.100:1753 72.247.193.187:443 ESTABLISHED

So may I assume that something did establish these connections, and
if they were not my doing how could I find the cause?

Harry

Similar ThreadsPosted
Why are these IPs doing a TimeWait? November 16, 2007, 7:51 pm