Tweet
Maybe some computer whiz out there can help me. Recently, I had some browser slowdowns (Firefox 3.x). Also, one of my SPYWARE detectors showed me that my computer was over and over again trying to access different sites the SPYWARE application considered unsafe and they were being refused. (I assume if one was not refused, I would never know about it.)
When I ran “netstat” with the extension “ –o” and “ –n” to see the connections, I saw one that seemed to be trying to connect to “74-203-241-xx” (different last 2 numbers tried) which I was able to see something about tw Telecom (I have since forgotten what extension showed me that!). Sometimes it shows “close wait” and sometimes “established”
I tried accessing the URL with the numbers I saw under netstat but access was denied. "The requested URL is invalid"
Can anyone tell me what is happening?
When doing a GOOGLE search for the numbers "74.203.241, I get a hit that will take me to:
OrgName: tw telecom holdings, inc.
OrgID: TWTC
Address: 10475 Park Meadows Drive
City: Littleton
StateProv: CO
PostalCode: 80124
Country: US
ReferralServer: rwhois://rwhois.twtelecom.net[whois]:4321
NetRange: 74.202.0.0[whois][trace][reverse ip] - 74.203.255.255[whois][trace][reverse ip]
CIDR: 74.202.0.0[whois][trace][reverse ip]/15
NetName: TWTC-NETBLK-9
NetHandle: NET-74-202-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.TWTELECOM.NET[whois]
NameServer: NS2.TWTELECOM.NET[whois]
Comment:
RegDate: 2006-11-14
Updated: 2007-10-01
RAbuseHandle: TWTAD-ARIN
RAbuseName: tw telecom Abuse Desk
RAbusePhone: +1-800-898-6473
RAbuseEmail: [whois]
RNOCHandle: TDN1-ARIN
RNOCName: TWTC Data NOC
RNOCPhone: +1-800-898-6473
RNOCEmail: [whois]
RTechHandle: ZT87-ARIN
RTechName: IP Manager
RTechPhone: +1-800-829-0420
RTechEmail: [whois]
OrgAbuseHandle: TWTAD-ARIN
OrgAbuseName: tw telecom Abuse Desk
OrgAbusePhone: +1-800-898-6473
OrgAbuseEmail: [whois]
OrgNOCHandle: TDN1-ARIN
OrgNOCName: TWTC Data NOC
OrgNOCPhone: +1-800-898-6473
OrgNOCEmail: [whois]
OrgTechHandle: NST12-ARIN
OrgTechName: NOC SWIP Team
OrgTechPhone: +1-800-898-6473
OrgTechEmail: [whois]
# ARIN WHOIS database, last updated 2009-07-10 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.
Found a referral to rwhois.twtelecom.net[whois]:4321.
%rwhois V-1.5:003AB6:00 rwhois.twtelecom.net[whois] (rwhois_ngd v0.9.0 by James Sella)
network:Class-Name:network
network:ID:f301fe2a-d993-11dc-a9f4-0015c5e45005
network:Auth-Area:74.203.0.0[whois][trace][reverse ip]/16
network:Network-Name:Akamai-74-203-241-0
network:IP-Network:74.203.241.0[whois][trace][reverse ip]/26
network:Organization;I:ce2f5ba2-ca66-11db-ad69-0015c5e45005
network:Org-Name:Akamai
network:Street-Address:8 CAMBRIDGE CENTER
network:City:Cambridge
network:State:MA
network:Postal-Code:02142
network:Country-Code:us
network:Phone:none
network:Admin-Contact;I:none
network:Tech-Contact;I:none
network:Abuse-Contact;I:[whois]
network:Updated:20080212100217000
%ok
I have multiple spyware detectors and use McAfee. I run them frequently.
When I ran “netstat” with the extension “ –o” and “ –n” to see the connections, I saw one that seemed to be trying to connect to “74-203-241-xx” (different last 2 numbers tried) which I was able to see something about tw Telecom (I have since forgotten what extension showed me that!). Sometimes it shows “close wait” and sometimes “established”
I tried accessing the URL with the numbers I saw under netstat but access was denied. "The requested URL is invalid"
Can anyone tell me what is happening?
When doing a GOOGLE search for the numbers "74.203.241, I get a hit that will take me to:
OrgName: tw telecom holdings, inc.
OrgID: TWTC
Address: 10475 Park Meadows Drive
City: Littleton
StateProv: CO
PostalCode: 80124
Country: US
ReferralServer: rwhois://rwhois.twtelecom.net[whois]:4321
NetRange: 74.202.0.0[whois][trace][reverse ip] - 74.203.255.255[whois][trace][reverse ip]
CIDR: 74.202.0.0[whois][trace][reverse ip]/15
NetName: TWTC-NETBLK-9
NetHandle: NET-74-202-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.TWTELECOM.NET[whois]
NameServer: NS2.TWTELECOM.NET[whois]
Comment:
RegDate: 2006-11-14
Updated: 2007-10-01
RAbuseHandle: TWTAD-ARIN
RAbuseName: tw telecom Abuse Desk
RAbusePhone: +1-800-898-6473
RAbuseEmail: [whois]
RNOCHandle: TDN1-ARIN
RNOCName: TWTC Data NOC
RNOCPhone: +1-800-898-6473
RNOCEmail: [whois]
RTechHandle: ZT87-ARIN
RTechName: IP Manager
RTechPhone: +1-800-829-0420
RTechEmail: [whois]
OrgAbuseHandle: TWTAD-ARIN
OrgAbuseName: tw telecom Abuse Desk
OrgAbusePhone: +1-800-898-6473
OrgAbuseEmail: [whois]
OrgNOCHandle: TDN1-ARIN
OrgNOCName: TWTC Data NOC
OrgNOCPhone: +1-800-898-6473
OrgNOCEmail: [whois]
OrgTechHandle: NST12-ARIN
OrgTechName: NOC SWIP Team
OrgTechPhone: +1-800-898-6473
OrgTechEmail: [whois]
# ARIN WHOIS database, last updated 2009-07-10 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.
Found a referral to rwhois.twtelecom.net[whois]:4321.
%rwhois V-1.5:003AB6:00 rwhois.twtelecom.net[whois] (rwhois_ngd v0.9.0 by James Sella)
network:Class-Name:network
network:ID:f301fe2a-d993-11dc-a9f4-0015c5e45005
network:Auth-Area:74.203.0.0[whois][trace][reverse ip]/16
network:Network-Name:Akamai-74-203-241-0
network:IP-Network:74.203.241.0[whois][trace][reverse ip]/26
network:Organization;I:ce2f5ba2-ca66-11db-ad69-0015c5e45005
network:Org-Name:Akamai
network:Street-Address:8 CAMBRIDGE CENTER
network:City:Cambridge
network:State:MA
network:Postal-Code:02142
network:Country-Code:us
network:Phone:none
network:Admin-Contact;I:none
network:Tech-Contact;I:none
network:Abuse-Contact;I:[whois]
network:Updated:20080212100217000
%ok
I have multiple spyware detectors and use McAfee. I run them frequently.
Comment