Windows 8 and 8.1 Forums


Someone's trying to do something with my ip?

  1. #1


    Posts : 16
    Windows 8.1

    Someone's trying to do something with my ip?


    Hello,
    I just ran netstat -a command in CMD and I had lots of connections coming in to me with same ip and range of ports. I remember running it a few months ago and had about 10 connections at max but now i have connections coming in. My internet has also been slow lately and has disconnected sometimes. I noticed this ip matched my IPv4 address am I just making things up or what?

    Thanks!



    Attachment 39121
    Last edited by Lapiz; 09 Mar 2014 at 17:36.

      My System SpecsSystem Spec

  2. #2


    Posts : 446
    Win 8 64-bit


    The ones that aren't blacked out just look like normal outgoing connections to me, with 192.168.0.13 being your PC.

    hewlettpackard:0 - Is listening for incoming connections. Do you have any Hewlett Packard hardware/software?
    activate:wsd - Web Service Discovery. Not something I'm familiar with, but you can look it up on the web.
    db3wns2011309 - wns.windows.com. Windows Push Notifications Service for Store app push notifications.
    hg-in-f120 and the lhr14s21-in-fXX ones are Google addresses.
    m288-mp1-cvx1b is a Virgin Media address, possibly your ISP?

    If you use 'netstat -abn' it will tell you the process and numerical IP's as well (or use TCPView by Sysinternals, as it's more user friendly than Command Prompt). The wns.windows.com one will probably show explorer.exe as the process. The Google one will probably show your web browser and Virgin either your browser or a Windows process.
      My System SpecsSystem Spec

  3. #3


    Posts : 16
    Windows 8.1


    Quote Originally Posted by ARC1020 View Post
    The ones that aren't blacked out just look like normal outgoing connections to me, with 192.168.0.13 being your PC.

    hewlettpackard:0 - Is listening for incoming connections. Do you have any Hewlett Packard hardware/software?
    activate:wsd - Web Service Discovery. Not something I'm familiar with, but you can look it up on the web.
    db3wns2011309 - wns.windows.com. Windows Push Notifications Service for Store app push notifications.
    hg-in-f120 and the lhr14s21-in-fXX ones are Google addresses.
    m288-mp1-cvx1b is a Virgin Media address, possibly your ISP?

    If you use 'netstat -abn' it will tell you the process and numerical IP's as well (or use TCPView by Sysinternals, as it's more user friendly than Command Prompt). The wns.windows.com one will probably show explorer.exe as the process. The Google one will probably show your web browser and Virgin either your browser or a Windows process.
    I have got everything you listed thanks! It's just strange that I did not have as much connections. Thank you!
      My System SpecsSystem Spec

  4. #4


    Here is the link for TCPView by Sysinternals. It is a good program to have on your PC.

    TCPView for Windows
      My System SpecsSystem Spec

Someone's trying to do something with my ip?
Eight Forums Android App Eight Forums IOS App Follow us on Facebook