Author Topic: Odd Connections in Firewall  (Read 1656 times)

0 Members and 1 Guest are viewing this topic.

Eleventeen

  • Guest
Odd Connections in Firewall
« on: June 23, 2011, 08:31:03 PM »
Hey all, I've been using avast internet security for awhile now and recently after taking a look in my firewall's connection logs (I use Comodo) I'm seeing svchost.exe making outgoing connections to various IPs resolving to "unknown.scnet.net":

216.246.75.122
216.246.75.123
216.246.75.227
216.246.75.229
216.246.75.131
216.246.75.236

I can't seem to track down the cause of these connections... the connections begin shortly after I log in to my desktop, usually just a single connection to one IP, and I also see them at seemingly random times throughout my login session.

I was wondering if this had something to do with avast! somehow. 216.246.75.227 is the IP of whois.domaintools.com which is involved in domain/whois lookups - does avast use this site/API to resolve domains for the web/network shields? Is there any other reason avast might connect to these IPs for anything?

Sorry if this is a stupid question, I'm just trying to track down the root cause for these connections! Thanks!