Netstat who is connected to my computer

Wireshark isn't the easiest of programs to learn, but it'll give you a good overview of the wireless traffic on your system. Open a command prompt and run "netstat -a" without the quotes. You can also use netstat with linux, but you might want to read the man page for all the options.

With Windows: - look into the comand Netstat. It shows open ports and what IP is connected to them. The Windows firewall is better than nothing so make sure it's configured to only leave open what you absolutely can't live without; which should be nothing unless you have network shared directories on your laptop for some reason.

This will show you what is normal for your system based upon what you have running and what isn't. You will also probably be surprised at how much is set to automatically access the internet for updates. I turn all of that crap off, especially on a laptop. On the Linux Distro machines, it's a two second command to habitually check for updates at my first daily login. On Windows, once a month I take some time for patch tuesday then each of the other applications.

AV is about the only auto-update I leave running though not on the notebok. Submit and view feedback for This product This page. View all page feedback. Displays the executable involved in creating each connection or listening port. In some cases well-known executables host multiple independent components, and in these cases the sequence of components involved in creating the connection or listening port is displayed. Note that this option can be time-consuming and will fail unless you have sufficient permissions.

Displays Ethernet statistics, such as the number of bytes and packets sent and received. This parameter can be combined with -s.

Displays active TCP connections, however, addresses and port numbers are expressed numerically and no attempt is made to determine names. I would go hunt down Most admins turn this off. Things can always lie and pretend to be something else, but if you have this feature enabled then you are probably fine. The random client port allows for multiple client connections. Oh sorry I just noticed the top one that you have highlighted.

Ya, that's RDP which might be concerning. Nothing look out of the ordinary in the DNS entries. Also, I ran netstat -ant as you suggested and this what I got. Since you are getting "can not obtain ownership" try netstat -ano this should give you the process ID and then you can you that to identify which application. However, this to me then looks like who ever is on So if this was not expected, I would go investigate that laptop and review RDP the settings on Ok so now that you have the PID you need to find what process is associated with that.

Open up an elevated Powershell window and try this. Could be a leftover connection that wasn't terminated properly, but then it should have timed out by now.

What Is svchost. Browse All Privacy and Security Articles Browse All Linux Articles Browse All Buying Guides. Best Portable Monitors. Best Gaming Keyboards.

Best Drones. Best 4K TVs. Best iPhone 13 Cases. Best Tech Gifts for Kids Aged Best 8K TVs. Best VR Headsets. Best iPad Mini Cases. Best Gifts for Cutting the Cord. Best Bluetooth Speakers.

Awesome PC Accessories. Best Linux Laptops. Best Gaming Monitors. Best iPads. Best iPhones.