Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I discovered a year ago (via my router) that IP 166.205.50.104 was being linked to by my laptop. I blocked this in my router a year ago. Yet, my router reveals that my laptop is still attempting to link to that IP address. How can I figure out which PROGRAM running on my laptop is attempting this link? The attempts are multiple times daily but at random times. Any guidance will be appreciated.

share|improve this question
1  
ip translates to mobile-166-205-050-104.mycingular.net - do you have a mobile phone app? –  Sean Cheshire Feb 6 '13 at 16:50
1  
@SeanCheshire - It could also be a mobile phone :-) –  Ramhound Feb 6 '13 at 17:50
    
Good point. Make sure you check the mac address of the machine sending the request in the router. –  EBGreen Feb 6 '13 at 18:25
add comment

1 Answer

In a command prompt type:

netstat -a -o

Find the line with the foreign address that you are interested in. Then open task manager and find the process with the PID that matches the PID in that line.

Haven't messed with netstat in a while. If you do:

netstat -b

It will tell you the name of the process.

Even better, open a Powershell prompt and do this:

netstat -b | Select-String '166.205.50.104' -context 1
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.