Another suspicious connection in NETSTAT

The VCR King

Well-Known Member
I typed NETSTAT into Command Prompt to monitor connections as I do every day, and this one showed at the bottom of the list and it had a REALLY long name and a suspicious-looking IP address. Snapshot is attached.
 
Last edited:
There is no IP address in that image, Looks more like a mac address but not really. Actually, that is your IPV6 address. Open a command prompt and type ipconfig and hit enter. You should see that same number where it says link local IPV6 address.
 
You wouldn't happen to be a member on Anandtech, would you? Someone on there asked the same question, but the port was for Samba.
 
Facedesk.

You could just ipconfig /all and compare the fe80 addresses or 'netsh int ipv6 show neigh' to see the IPv6->MAC association.

The IPv4 link-local equivalent would be something like the APIPA 169.254/16 range, both of which aren't routable on the internet, so by definition it is just traffic on your local LAN itself. You probably don't even have an IPv6 WAN address from your provider, either.

Also, you really aren't going to 'catch' anything checking netstat unless you were already screwed, especially if you don't have a particular breadth of networking knowledge.
 
Last edited:
Back
Top