Question

PC sending packets to random IP's from a range of ports.

So this is somewhat of a strange issue. I have a program called PeerGuardian 2 and it allows me to simplistically see the packets being sent to and from devices on my home network. It's showing that my computer is sending packets to random IP addresses, some of them reoccur, on a massive range of ports all going in order.

(example)
From 192.168.1.253:6812 - To 74.120.148.2:80
From 192.168.1.253:6813 - To 74.120.148.2:80
From 192.168.1.253:6814 - To 74.120.148.2:80
From 192.168.1.253:6815 - To 74.120.148.2:80
From 192.168.1.253:6816 - To 74.120.148.2:80
From 192.168.1.253:6817 - To 74.120.148.2:80

This happens in spurts and it usually sends 20-40 to varying IP addresses in a matter of a few seconds. I asked my ISP if they understood what this was and it stumped the technician I spoke with. I also have run multiple virus/malware scans and everything comes up clean.

Discussion is locked
Follow
Reply to: PC sending packets to random IP's from a range of ports.
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: PC sending packets to random IP's from a range of ports.
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments
- Collapse -
Answer
Looks to belong to GigYa

If you have any social plugins, they may do that.
Bob

- Collapse -
Answer
valid or not

Hard to say this is exactly what opening a web page looks like.

Every little image on a screen opens and downloads as a separate session. By default a machine will normally increment the source port number when it open a new session. It is not uncommon for a single web page to open 10-20 session.

You may also see lots of what looks like random addresses. There are tons of tracking scripts being run on your average web page. These open session to many different sites.

Even THIS web page attempts to open sessions to google, gigya,crowd source, netratings,twitter,scorecard and a few more....which I block with ghostery.

CNET Forums