Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb











up vote
2
down vote

favorite












I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running



I am not able to understand why wpnservice & cdpusersvc ( via svchost.exe ) are connected to host like www.weebly.com, facebook.com , amazonaws, bom05s12-in-f14.1e100.net.



When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests



Are these safe ? for now do I need to block them using ? or let them run as it is ?



FYI, ip and port mentioned here are already masked



  WpnService

 [svchost.exe]

  TCP    206.151.43.145:20743   edge-star-mini-shv-02-bom1.facebook.com:https  TIME_WAIT

  TCP    206.151.43.145:20739   edge-star-shv-01-bom1.facebook.com:https  TIME_WAIT





networking windows-10 connection netstat svchost







share|improve this question
























  • Can see a negative vote, it will be good if you leave negative vote with proper comment, so that can do require improvement.
    – Girish
    Nov 20 at 3:16










  • wpnservice and cdpusersvc are the Windows Push Notification Service and the Connected Devices Platform Service respectively. WPN allows apps to send you notifications the same way this works on your phone. The CDP service handles "casting" and handoff features, again similar to features found on phones. You should also be aware that every tile on your Start Menu (like the weather app, or the Microsoft Store app) gets updates even if you don't use them -- kind of like your phone! Basically, Windows 10 thinks it's a phone and chews up bandwidth constantly the same way your phone does.
    – Wes Sayeed
    Nov 20 at 5:56















up vote
2
down vote

favorite












I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running



I am not able to understand why wpnservice & cdpusersvc ( via svchost.exe ) are connected to host like www.weebly.com, facebook.com , amazonaws, bom05s12-in-f14.1e100.net.



When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests



Are these safe ? for now do I need to block them using ? or let them run as it is ?



FYI, ip and port mentioned here are already masked



  WpnService

 [svchost.exe]

  TCP    206.151.43.145:20743   edge-star-mini-shv-02-bom1.facebook.com:https  TIME_WAIT

  TCP    206.151.43.145:20739   edge-star-shv-01-bom1.facebook.com:https  TIME_WAIT





networking windows-10 connection netstat svchost







share|improve this question
























  • Can see a negative vote, it will be good if you leave negative vote with proper comment, so that can do require improvement.
    – Girish
    Nov 20 at 3:16










  • wpnservice and cdpusersvc are the Windows Push Notification Service and the Connected Devices Platform Service respectively. WPN allows apps to send you notifications the same way this works on your phone. The CDP service handles "casting" and handoff features, again similar to features found on phones. You should also be aware that every tile on your Start Menu (like the weather app, or the Microsoft Store app) gets updates even if you don't use them -- kind of like your phone! Basically, Windows 10 thinks it's a phone and chews up bandwidth constantly the same way your phone does.
    – Wes Sayeed
    Nov 20 at 5:56













up vote
2
down vote

favorite









up vote
2
down vote

favorite











I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running



I am not able to understand why wpnservice & cdpusersvc ( via svchost.exe ) are connected to host like www.weebly.com, facebook.com , amazonaws, bom05s12-in-f14.1e100.net.



When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests



Are these safe ? for now do I need to block them using ? or let them run as it is ?



FYI, ip and port mentioned here are already masked



  WpnService

 [svchost.exe]

  TCP    206.151.43.145:20743   edge-star-mini-shv-02-bom1.facebook.com:https  TIME_WAIT

  TCP    206.151.43.145:20739   edge-star-shv-01-bom1.facebook.com:https  TIME_WAIT





networking windows-10 connection netstat svchost







share|improve this question















I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running



I am not able to understand why wpnservice & cdpusersvc ( via svchost.exe ) are connected to host like www.weebly.com, facebook.com , amazonaws, bom05s12-in-f14.1e100.net.



When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests



Are these safe ? for now do I need to block them using ? or let them run as it is ?



FYI, ip and port mentioned here are already masked



  WpnService

 [svchost.exe]

  TCP    206.151.43.145:20743   edge-star-mini-shv-02-bom1.facebook.com:https  TIME_WAIT

  TCP    206.151.43.145:20739   edge-star-shv-01-bom1.facebook.com:https  TIME_WAIT





networking windows-10 connection netstat svchost




networking windows-10 connection netstat svchost






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 20 at 4:17

























asked Nov 20 at 2:37









Girish

1135




1135












  • Can see a negative vote, it will be good if you leave negative vote with proper comment, so that can do require improvement.
    – Girish
    Nov 20 at 3:16










  • wpnservice and cdpusersvc are the Windows Push Notification Service and the Connected Devices Platform Service respectively. WPN allows apps to send you notifications the same way this works on your phone. The CDP service handles "casting" and handoff features, again similar to features found on phones. You should also be aware that every tile on your Start Menu (like the weather app, or the Microsoft Store app) gets updates even if you don't use them -- kind of like your phone! Basically, Windows 10 thinks it's a phone and chews up bandwidth constantly the same way your phone does.
    – Wes Sayeed
    Nov 20 at 5:56


















  • Can see a negative vote, it will be good if you leave negative vote with proper comment, so that can do require improvement.
    – Girish
    Nov 20 at 3:16










  • wpnservice and cdpusersvc are the Windows Push Notification Service and the Connected Devices Platform Service respectively. WPN allows apps to send you notifications the same way this works on your phone. The CDP service handles "casting" and handoff features, again similar to features found on phones. You should also be aware that every tile on your Start Menu (like the weather app, or the Microsoft Store app) gets updates even if you don't use them -- kind of like your phone! Basically, Windows 10 thinks it's a phone and chews up bandwidth constantly the same way your phone does.
    – Wes Sayeed
    Nov 20 at 5:56
















Can see a negative vote, it will be good if you leave negative vote with proper comment, so that can do require improvement.
– Girish
Nov 20 at 3:16




Can see a negative vote, it will be good if you leave negative vote with proper comment, so that can do require improvement.
– Girish
Nov 20 at 3:16












wpnservice and cdpusersvc are the Windows Push Notification Service and the Connected Devices Platform Service respectively. WPN allows apps to send you notifications the same way this works on your phone. The CDP service handles "casting" and handoff features, again similar to features found on phones. You should also be aware that every tile on your Start Menu (like the weather app, or the Microsoft Store app) gets updates even if you don't use them -- kind of like your phone! Basically, Windows 10 thinks it's a phone and chews up bandwidth constantly the same way your phone does.
– Wes Sayeed
Nov 20 at 5:56




wpnservice and cdpusersvc are the Windows Push Notification Service and the Connected Devices Platform Service respectively. WPN allows apps to send you notifications the same way this works on your phone. The CDP service handles "casting" and handoff features, again similar to features found on phones. You should also be aware that every tile on your Start Menu (like the weather app, or the Microsoft Store app) gets updates even if you don't use them -- kind of like your phone! Basically, Windows 10 thinks it's a phone and chews up bandwidth constantly the same way your phone does.
– Wes Sayeed
Nov 20 at 5:56










1 Answer
1






active

oldest

votes

















up vote
1
down vote



accepted










This is typical background noise caused by Windows checking if you have internet connectivity, reporting back to Microsoft, Google services running, and so on. You can run them down one by one if you really want to.




When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests




The side that has your IP address and port is the source, that is, your side. You've connected to a server's HTTPS port. You can see that by looking over at the destination side where the port is "https".






share|improve this answer





















  • I understand microsoft & google may have couple of services reporting back to their hosts, but don't really understand how sites weebly, facebook or amazonaws too reporting, I never installed their client on local system.
    – Girish
    Nov 20 at 3:14






  • 1




    @Girish Amazonaws is a cloud computing provider that is used by many services, it doesn't mean that you're using some Amazon service directly. Facebook is used by everyone and everything -- lots of apps have various Facebook services built in. You can track them down one by one if you want -- start by figuring out which process each connection is associated with.
    – David Schwartz
    Nov 20 at 3:19










  • thanks, understood now these are some services running using svchost. Will check separately how to find which service exactly behind svchost.
    – Girish
    Nov 20 at 4:15











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1376840%2fsuggest-me-to-understand-why-my-windows-10-found-connected-to-that-many-hosts-c%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes








up vote
1
down vote



accepted










This is typical background noise caused by Windows checking if you have internet connectivity, reporting back to Microsoft, Google services running, and so on. You can run them down one by one if you really want to.




When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests




The side that has your IP address and port is the source, that is, your side. You've connected to a server's HTTPS port. You can see that by looking over at the destination side where the port is "https".






share|improve this answer





















  • I understand microsoft & google may have couple of services reporting back to their hosts, but don't really understand how sites weebly, facebook or amazonaws too reporting, I never installed their client on local system.
    – Girish
    Nov 20 at 3:14






  • 1




    @Girish Amazonaws is a cloud computing provider that is used by many services, it doesn't mean that you're using some Amazon service directly. Facebook is used by everyone and everything -- lots of apps have various Facebook services built in. You can track them down one by one if you want -- start by figuring out which process each connection is associated with.
    – David Schwartz
    Nov 20 at 3:19










  • thanks, understood now these are some services running using svchost. Will check separately how to find which service exactly behind svchost.
    – Girish
    Nov 20 at 4:15















up vote
1
down vote



accepted










This is typical background noise caused by Windows checking if you have internet connectivity, reporting back to Microsoft, Google services running, and so on. You can run them down one by one if you really want to.




When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests




The side that has your IP address and port is the source, that is, your side. You've connected to a server's HTTPS port. You can see that by looking over at the destination side where the port is "https".






share|improve this answer





















  • I understand microsoft & google may have couple of services reporting back to their hosts, but don't really understand how sites weebly, facebook or amazonaws too reporting, I never installed their client on local system.
    – Girish
    Nov 20 at 3:14






  • 1




    @Girish Amazonaws is a cloud computing provider that is used by many services, it doesn't mean that you're using some Amazon service directly. Facebook is used by everyone and everything -- lots of apps have various Facebook services built in. You can track them down one by one if you want -- start by figuring out which process each connection is associated with.
    – David Schwartz
    Nov 20 at 3:19










  • thanks, understood now these are some services running using svchost. Will check separately how to find which service exactly behind svchost.
    – Girish
    Nov 20 at 4:15













up vote
1
down vote



accepted







up vote
1
down vote



accepted






This is typical background noise caused by Windows checking if you have internet connectivity, reporting back to Microsoft, Google services running, and so on. You can run them down one by one if you really want to.




When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests




The side that has your IP address and port is the source, that is, your side. You've connected to a server's HTTPS port. You can see that by looking over at the destination side where the port is "https".






share|improve this answer












This is typical background noise caused by Windows checking if you have internet connectivity, reporting back to Microsoft, Google services running, and so on. You can run them down one by one if you really want to.




When exactly these ports like 45982 were opened on my windows 10, I don't remember approving such firewall requests




The side that has your IP address and port is the source, that is, your side. You've connected to a server's HTTPS port. You can see that by looking over at the destination side where the port is "https".







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 20 at 2:58









David Schwartz

56.1k684128




56.1k684128












  • I understand microsoft & google may have couple of services reporting back to their hosts, but don't really understand how sites weebly, facebook or amazonaws too reporting, I never installed their client on local system.
    – Girish
    Nov 20 at 3:14






  • 1




    @Girish Amazonaws is a cloud computing provider that is used by many services, it doesn't mean that you're using some Amazon service directly. Facebook is used by everyone and everything -- lots of apps have various Facebook services built in. You can track them down one by one if you want -- start by figuring out which process each connection is associated with.
    – David Schwartz
    Nov 20 at 3:19










  • thanks, understood now these are some services running using svchost. Will check separately how to find which service exactly behind svchost.
    – Girish
    Nov 20 at 4:15


















  • I understand microsoft & google may have couple of services reporting back to their hosts, but don't really understand how sites weebly, facebook or amazonaws too reporting, I never installed their client on local system.
    – Girish
    Nov 20 at 3:14






  • 1




    @Girish Amazonaws is a cloud computing provider that is used by many services, it doesn't mean that you're using some Amazon service directly. Facebook is used by everyone and everything -- lots of apps have various Facebook services built in. You can track them down one by one if you want -- start by figuring out which process each connection is associated with.
    – David Schwartz
    Nov 20 at 3:19










  • thanks, understood now these are some services running using svchost. Will check separately how to find which service exactly behind svchost.
    – Girish
    Nov 20 at 4:15
















I understand microsoft & google may have couple of services reporting back to their hosts, but don't really understand how sites weebly, facebook or amazonaws too reporting, I never installed their client on local system.
– Girish
Nov 20 at 3:14




I understand microsoft & google may have couple of services reporting back to their hosts, but don't really understand how sites weebly, facebook or amazonaws too reporting, I never installed their client on local system.
– Girish
Nov 20 at 3:14




1




1




@Girish Amazonaws is a cloud computing provider that is used by many services, it doesn't mean that you're using some Amazon service directly. Facebook is used by everyone and everything -- lots of apps have various Facebook services built in. You can track them down one by one if you want -- start by figuring out which process each connection is associated with.
– David Schwartz
Nov 20 at 3:19




@Girish Amazonaws is a cloud computing provider that is used by many services, it doesn't mean that you're using some Amazon service directly. Facebook is used by everyone and everything -- lots of apps have various Facebook services built in. You can track them down one by one if you want -- start by figuring out which process each connection is associated with.
– David Schwartz
Nov 20 at 3:19












thanks, understood now these are some services running using svchost. Will check separately how to find which service exactly behind svchost.
– Girish
Nov 20 at 4:15




thanks, understood now these are some services running using svchost. Will check separately how to find which service exactly behind svchost.
– Girish
Nov 20 at 4:15


















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.





Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


Please pay close attention to the following guidance:


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1376840%2fsuggest-me-to-understand-why-my-windows-10-found-connected-to-that-many-hosts-c%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

AnyDesk - Fatal Program Failure

Image
up vote 0 down vote favorite Good day all. I have a window that pops up saying Fatal Program Failure (AnyDesk). This is what I have done so far: Uninstalled AnyDesk and reinstalled it. ( The window still appeared ) I disabled AnyDesk start up in Msconfig and the window seems to have disapeared. Lastly I made sure that AnyDesk worked by remoting into it, and it worked. Today the same window appeared. How do I get rid of this window? remote-desktop share | improve this question edited 10 hours ago Tomasz Jakub Rup 552 3 13 ...
Read more

How to calibrate 16:9 built-in touch-screen to a 4:3 resolution?

Image
up vote 0 down vote favorite I need help with an issue we're facing in a project where we are moving from a Windows-based POS environment to one running on CentOS7. The problem consists of a number of factors, please find the details below: The supplier of our POS application will only deliver an application that is hard-coded to run in a 1024:768 4:3 format. The hardware we are using is a POS unit from HP that has a built-in 16:9 touch-screen. The employees using this solution is not supposed to see nor have access to anything but the POS application. Our sales organization demands that touch is an available feature when going live with the new POS environment. Going further into this, allow me to explain what we have encountered on the way trying to achieve the goal of having a touch-screen: We've simply change...
Read more

QoS: MAC-Priority for clients behind a repeater

Image
1 1 I've setup a wireless network using a Linksys-Router (DD-WRT) as an AP and a TP-Link repeater for range extension. To manage bandwith for specific users, I've setup QoS-Rules on the AP (DD-WRT) using MAC-Priority: However the AP shows only the Repeater's MAC and the MACs of users inside the AP-Range. The MAC addresses of users behind the Repeater are not listed : The purple MAC is not listed in the AP-Clientlist. Its related to a device connected via the TP-Link repeater. Q: How can I setup MAC-Priority for repeater-clients? Do I simply add the purple MAC in AP-MAC priority list although it's not listed as a client? I want to setup specific priority instead of giving one priority for all clients behind the repeater by adding the repeater's MAC in the MAC priority list in the AP as ...
Read more