Very Odd time.windows.com behavior

[Mike]

My PC keeps trying to connect to time.windows.com but the IP address
it tries to connect to does not belong to Microsoft. It belongs to
Brooks, Sultera, Sattler, P.C. and Network Access Solutions in
Virginia. I saw this in my firewall traffic log and did a backtrace
and Whois. I also went to DShield.org to get info on the address and
it gave me the same thing.
Why is my computer trying to connect with them? And not only that but
instead of trying to use svchost, it's using whatever program I've
currently got running like Internet Explorer, Mozilla, Divx Player,
various instant messengers, and AVG download update. My computer does
not have any viruses, worms, spyware, etc. I ran two scans. One using
AVG software and one using the Trend Micro Housecall online scan. I
also used Spybot and nothing was found.

Any ideas as to what's going on?

 

[Will Denny]

Hi

time.windows.com resolves to 207.46.130.100 - which is a Microsoft IP
Address. It is used by 'Internet Time' to keep your PC clock up to date:

WHOIS:

OrgName: Microsoft Corp
OrgID: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
NetRange: 207.46.0.0 - 207.46.255.255
CIDR: 207.46.0.0/16
NetName: MICROSOFT-GLOBAL-NET
NetHandle: NET-207-46-0-0-1
Parent: NET-207-0-0-0-0

--

Will Denny
MS-MVP Windows - Shell/User


| My PC keeps trying to connect to time.windows.com but the IP address
| it tries to connect to does not belong to Microsoft. It belongs to
| Brooks, Sultera, Sattler, P.C. and Network Access Solutions in
| Virginia. I saw this in my firewall traffic log and did a backtrace
| and Whois. I also went to DShield.org to get info on the address and
| it gave me the same thing.
| Why is my computer trying to connect with them? And not only that but
| instead of trying to use svchost, it's using whatever program I've
| currently got running like Internet Explorer, Mozilla, Divx Player,
| various instant messengers, and AVG download update. My computer does
| not have any viruses, worms, spyware, etc. I ran two scans. One using
| AVG software and one using the Trend Micro Housecall online scan. I
| also used Spybot and nothing was found.
|
| Any ideas as to what's going on?

 

[Mike]

Ok I already know all that. But my question was - why is the IP
address for time.windows.com something other than one that belongs to
Microsoft?

Maybe I should rephrase that. If time.windows.com is supposed to
connect to the Microsoft IP Address 207.46.130.100 then why is my
computer trying to connect to 63.210.23.17? This does not belong to
Microsoft. It belongs to Brooks, Sultera, Sattler, P.C. and/or Network
Access Solutions. Can someone explain that?

 

[David Candy]

Ask your ISP. It would be them telling your computer where time.microsoft.com is.

 

[Festus Hagen]

-----Original Message-----
My PC keeps trying to connect to time.windows.com but the IP address
it tries to connect to does not belong to Microsoft. It belongs to
Brooks, Sultera, Sattler, P.C. and Network Access Solutions in
Virginia. I saw this in my firewall traffic log and did a backtrace
and Whois. I also went to DShield.org to get info on the address and
it gave me the same thing.
Why is my computer trying to connect with them? And not only that but
instead of trying to use svchost, it's using whatever program I've
currently got running like Internet Explorer, Mozilla, Divx Player,
various instant messengers, and AVG download update. My computer does
not have any viruses, worms, spyware, etc. I ran two scans. One using
AVG software and one using the Trend Micro Housecall online scan. I
also used Spybot and nothing was found.

Any ideas as to what's going on?
.

Check your hosts files in system32\drivers\etc
Also search your drives for other hosts files
Check your registry for it's current hosts location.
HKLM\System\CurrentContolSet\Services\TcpIp\Parameters

-Enjoy
fh