Why does my computer create web connections to addresses in the Amazon, Google and Youtube range when I start Firefox?

I think I already disabled all the updating functions, yet, SOMETIMES when I start Firefox, (with about:blank), my network monitor shows one to five connections to IP addresses mostly in the 74.125.225.x, 74.125.227.x, 74.125.228.x, and 72.21.x.x ranges. Those ranges include Google, Amazon, and Youtube.
I use Kaspersky, and have scanned multiple times for malware, and even had their technical support look into my computer. They see no malware. It is the Kaspersky Network Monitor that revealed the problem.
As I find them happening, I try to jot down the addresses, (quickly, because some of these connections only last a second or two), then add those to a firewall rule I created to try to combat the problem. Yet, next time I start, new addresses are "attacking". Of course, some get away, because I don't get the address jotted down before it goes away. At one point I used masking that ended up keeping me from Google and Youtube, so I have to add the addresses individually, and my block list in that one rule is 13 items long now. The only IPs not in those ranges are 23.5.251.27, and 173.194.46.5. Not sure where those go.
I used to get attacked by addresses in the range that includes Amazon ... 72.21.x.x. I have a separate firewall rule for them that has 33 addresses being blocked.
I should not have to do all that. Firefox should start and just sit there quietly until I start clicking or typing in it. This has been happening in Firefox versions going back to 11. May have gone on before that, but I wasn't tracking it then.
Also, it doesn't always happen, or, more precisely, with addresses I have not already blocked, (because my only way to know it's happening is when the connections are allowed to be made). It does not always happen right after Firefox is up, but sometimes several minutes later. I have started Firefox and just sat and watched the network monitor without doing anything in Firefox, and have seen this happen up to 15 minutes after I start Firefox ... mostly just two or three minutes when there's a delay at all.

Firefox does not do anything but sit on about:blank after I start it as long as I have a firewall rule enabled that completely blocks these subnets:
74.125.222.0/24
74.125.227.0/24
74.125.228.0/24
173.194.46.0/24
173.194.115.0/24
173.194.121.0/24
64.233.171.0/24
54.230.90.0/24
54.230.88.0/24
72.21.194.0/24
72.21.195.0/24
72.21.215.0/24
207.171.163.0/24
Otherwise, Fire fox creates connections to one to five addresses in those ranges. Note that there are more than 5 subnets above, but usually three connections satisfies whatever purpose these connections are being made for. If I had some links or whatever that is causing these connections, I would expect all of them would come up every time.
Also, these connections do not start immediately upon starting Firefox, they wait up to 15 minutes to start ... fifteen minutes of just sitting idle ... no actions on my part that could possibly initiate them. Usually these start within three minutes. A typical ploy of malware is to wait until no one is looking, or the until there's a forest to put their tree in so it won't be noticed.
While the above rules are in place, I do not have access to Amazon, Youtube, or Google, (or any of the various blog sites and services sponsored by Google, including Google Maps and Gmail). That list may not be complete, as I have other firewall rules in place that mainly block individual addresses.
It seems to me as simple as; figure out who owns those subnets, and you have your bad guys. Then go after them.
It's true that I have a bookmarks to Google, Gmail, and Youtube, but these are not "active" bookmarks nor RSS feeds. I have not voluntarily gone to Amazon on this computer.
The traffic being transmitted is unknown. It is usually not extremely large amounts of data ... less than a meg, but I have seen close to a Gig transmitted out of my computer, and over 400 meg transmitted to my computer, when I was not paying attention to block the offender. Even if it's small amounts, things like cookies, path structures, configuration settings, histories, etc. do not involve a lot of data, but, to me, represent a security breach, if someone decides to look at them unsolicited by me, not unlike your landlord, mortgage holder, or neighborhood police officer walking into your home while you're not there, and taking pictures of, or simply inventorying your belongings.
It is VERY much like some sort of backdoor malware. No malware is detected on my computer.
I looked at the suggestion above for OS changes for logging HTTP activity, but the author neglected to include instructions for backing out these changes after using them. If this were to create more jewels in a drawer the thief has access to, reformatting and restoring my drive is not the kind of back out process I enjoy. Therefore it would be foolish to apply them. To me it would be like bungee diving with no bungee. Fun until you hit the bottom. Give me the bungee, let me make sure it's short enough, then I'll dive.

Similar Messages

Why does my computer say its connected through wi-fi but wont open a web page, why does my computer say its connected through wi-fi but wont open a web page but will work if im hardwired into the internet

my computer is showing full connection through the airport but wont open any web pages it says it is not connected to the internet... When i hard wire the internet in with the cord it works just fine so i think i somehow messed up or turned of my wi fi capability but i show my airport is on

Your computer is showing it's connected to the Wifi router all right, but perhaps the router isn't connected to the Internet.
If your connecting the Ethernet cable directly to the modem and resetting it, bypassing th erouter and then getting online, fine that's good.
If your connecting to the router directly and getting on the Internet fine, it means the router is connected to the Internet.
If the last one is true then likely what has occured is your DCHP lease is expired because your computer doesn't have the right time and date as the router, it's showing a good signal but your not connecting.
Open System Preference and check the date and time and set it to update to Apple's time server for your location.
Sometimes Apple's time is off, as third party routers get their time elsewhere and sometimes the two don't match and thus DCHP lease is expired.
..WiFi, Internet problems, possible solutions

Why does my computer self-assign an IP address whenever I rest the network?

All of a sudden both my wife's and my MacBook Pro dropped their internet connections (Verizon FIOS). I spent a long time with the Verizon tech person and he suggested that I post here.
My computer is running Mountain Lion and my wife's is running Lion.
Thanks.
Jon

Rest the network? Why would you do that? It's not like it builds up lactic acid. Actually turning electrical devices on/off can actually degrade performance/reliability over time.
When MacOS loses connection with the network it will self-assign an IP address.. see above. Turn the network back on, and I suspect it reconnects. No?
If you recently upgraded to M/L I suggest you go into System Preferences/Network, delete the Wifi service ("-") and then recreate it ("+"). Do the same with the Ethernet service connection. Also, use WPA2 for router/network security.
Then repair permissions.
BTW, I use Verizon FIOS and experience no problems.

Why does my mac mini re-open all of my previous sessions activity and windows even when I have closed them before turning my mac off?

When ever I boot up my mac mini it re-opens all of my activity from my previous use of it. This happens even if I quit all the running programes before I turned it off. It does not effect the computer when its running but it is bugging the crap out of me. Any help would be much appreiciated.

Try going to System Preferences > General > and uncheck Restore windows when quitting and re-opening apps
See if that helps.
Also when you say you quit all running programs, do you just click on the red X ballon in the top left or do you actually CMD + Quit?

Why does my Bridge read RGB or B&W for the Color Mode on a file, when in Illustrator I have set it to CMYK?

I'm kind of stumped and this has been a question of mine for some time. I did some further digging on it, and did find that what it's reading is the Photoshop Color Mode XMP data, which is odd since the files were never in Photoshop, and were created in Illustrator. Is there a way to remove this info? How do I fix it?

Probably can be chalked up to one of Illustrators mysterious color issues.
Therefor it might be best to drop this question in the AI forum itself. I know to less of AI but just tried a bit with a new document, you can't convert to a new color profile like used to in PS, only select CMYK or RGB and assign a profile but that is not the same as converting.
Also in color settings it says by default to preserve numbers in stead of the profile itself.
And yes, mysteries are common at Adobe, although being one company one doubts often if they are even aware of the existence of Bridge and even other applications in the suites. Not even all file types of Adobe seem to be fully supported in Bridge…

Why does my iPod keep asking me to put my password in over and over again when I try to view my Apple ID without ever letting me in

Please help me figure out why I cannot view my Apple ID on my iPod touch. Everytime I try to buy a album or anything it asks me to up date my billing info and when I go to do so it asks for my password over and over again and I keep puttiń it in and it never lets me in.

Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Go to Settings>iTunes and App Store and sign out and sign back in
- Reset your Apple ID password
How do I change or recover a forgotten Apple ID Password?
If you've forgotten your Apple ID Password or want to change it, go to My Apple ID and follow the instructions. SeeChanging your Apple ID password if you'd like more information.

HT202044 Why does my iPad say that it has to download the firmware for my AV adapter when I plug it in?

I am trying to play videos from my iPad to my TV, but when I plug in my AV adapter to my iPad it says it has to download the firmware for the accsory. And it is supposidly already downloading when the message pops up I can never see any type of status bar or anything like that.

That appears to be a bug in iOS 8.2. Restoring your iPad to Factory settings has fixed it for those reporting the problem.
See here: Use iTunes to restore your iOS device to factory settings - Apple Support

Why does my mouse keep losing connection every minute

why does my mouse keep losing connection every minute, its not the batteries

I'm having the same issue. Every so often it loses connection then re establishes. This goes on repeatedly.
If you change batteries while the computer is still active then it takes for ever to re connect.
Can't wait until someone replies to your question.

Why does my E72 create a PDP context without my pe...

Why does my E72 create a PDP context without my permission and send data to 131.228.18.5 ?
No apps are running.
Connection set to "when needed"
I haven't installed any new apps.
Email not configured.

Host name of 131.228.18.5 is em1x-5.lhr.messaging.nokia.com
Do you have email accounts set up to synchronise automatically or via OVI mail or Nokia messaging?
How did you find yout the IP-address of the destination?
I never managed to find that out unless i sniffed network traffic over the WLAN.

Why does my computer buffer videos so bad

Why does my computer buffer videos so bad?

It can be a number of things, RAM and connection speed are the two on the top of my list.

Why does my computer play strange music at random times and how can I stop it?

why does my computer play strange music at random times and how can I stop it? The music isn't anything on my machine and the only way I can switch it off is to reboot. Can anyone advise me please. It's driving me nuts ... I don't even like the music it's playing!

What apps are open and are you really still only on 10.5.1??????? At the very least please update your profile, also please remember to post more information. I suspect it's something going on with just your user account. You can verify that by creating another user account (call it TEST ACCOUNT) and log into that account and test. Once this has been verified then you will need to check which apps are running to determine what is causing your issue.

I have a DVD I recorded from my tv. I am trying to make copies and when I insert the DVD I get a message saying it is blank even though it is not. My question are: Why does my computer think it's blank? And how can I copy a DVD?

I have a DVD I recorded from my tv. I am trying to make copies and when I insert the DVD, I get a message saying the DVD is blank, which it is not. My questions are: Why does my computer think it's blank? And how can I copy the DVD providing my computer recognizes there is content on it?
Thanks, Sheila

TV video typically is copyrighted content. We'd be breaking several rules trying to help you. Good luck!

Why does my computer display a spring coloured wheel that stops me from doing anything

Why does my computer display a spinning coloured wheel that stops me from doing anything, the only way to get rid is to switch off and reload...

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
Step 1
For this step, the title of the Console window should be All Messages. If it isn't, select
          SYSTEM LOG QUERIES ▹ All Messages
from the log list on the left. If you don't see that list, select
          View ▹ Show Log List
from the menu bar at the top of the screen.
In the top right corner of the Console window, there's a search box labeled Filter. Initially the words "String Matching" are shown in that box. Enter "BOOT_TIME" (without the quotes.)
Each message in the log begins with the date and time when it was entered. Select the BOOT_TIME log message that corresponds to the last boot time when you had the problem. Now clear the search box to reveal all messages. Select the ones logged before the boot, during the time something abnormal was happening. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
For example, if the system was unresponsive or was failing to shut down for three minutes before you forced a restart, post the messages timestamped within three minutes before the boot time, not after. Please include the BOOT_TIME message at the end of the log extract—not at the beginning.
If there are long runs of repeated messages, please post only one example of each. Don’t post many repetitions of the same message.
When posting a log extract, be selective. A few dozen lines are almost always more than enough.
Some private information, such as your name, may appear in the log. Anonymize before posting.
Please don't indiscriminately dump thousands of lines from the log into this discussion.
Please don't post screenshots of log messages—post the text.
Step 2
In the Console window, select
          DIAGNOSTIC AND USAGE INFORMATION ▹ System Diagnostic Reports
(not Diagnostic and Usage Messages) from the log list on the left. If you don't see that list, select
          View ▹ Show Log List
from the menu bar.
There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of reports. A crash report has a name that begins with the name of the crashed process and ends in ".crash". A panic report has a name that begins with "Kernel" and ends in ".panic". A shutdown stall report has a name that ends in ".shutdownstall". Select the most recent of each, if any. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot. It's possible that none of these reports exists.
I know the report is long, maybe several hundred lines. Please post all of it anyway.
If you don't see any reports listed, but you know there was a crash or panic, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.
In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)
Please don’t post other kinds of diagnostic report—they're very long and rarely helpful.

Why does my iPad keep losing connectivity

Why does my iPad
keep losing connectivity ?

Hi Joan,
I'm sorry to hear you are having issues connecting with Wi-Fi from your iPad.
The article below may be able to help you with this issue.
Click on the link below to see more details and screenshots.
I've quoted some helpful highlights for you:
iOS: Troubleshooting Wi-Fi networks and connections
Be sure that you are in range of your Wi-Fi router (access point).
Tap Settings > Wi-Fi and turn Wi-Fi off and then on again.If unable to do so, see this article.
Confirm that your Wi-Fi router and Cable or DSL modem are connected to power, turned on, and indicate that they are connected to the Internet.If not, refer to your network administrator or ISP for assistance.
Restart your iOS device.
Tap Settings > Wi-Fi and locate the Wi-Fi network to which you are connected. Then tap the blue dot and choose Forget this Network. Try to connect to your desired Wi-Fi network again.
Note: You will need to enter your Wi-Fi password again if your desired network requires one.
Turn your Wi-Fi router off and then on again2. If your ISP also provides cable or phone service, check with them before attempting this step to avoid interruption of service.
Update your device to the latest version of software.
Update your Wi-Fi router to the latest firmware2.For AirPort Base Stations, see this article for information about firmware updates.
If your issue is still unresolved
Follow the steps below for the issue you are experiencing.
Unable to locate a Wi-Fi network
Unable to connect to a Wi-Fi network
Wi-Fi disconnects, or signal strength is less than expected
Unable to access the Internet while connected to Wi-Fi
Unable to automatically connect to Wi-Fi
I hope this information helps ....
Have a great day!
- Judy

Why does my computer keep disconnecting from my wifi?

Why does my computer keep disconnecting from my wifi?

Some users with various Wi-Fi problems have reported that they were given the following instructions by Apple Support, sometimes with success. After completing the procedure, you'll have to recreate all your settings in the Networkpreference pane. Make sure you know how to do that before you begin. Taking screenshots of the preference pane may be helpful.
Step 1
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/Preferences/SystemConfiguration
Right-click or control-click the highlighted line and select
Services ▹ Reveal
from the contextual menu.* A folder should open with an item named "SystemConfiguration" selected. Move the selected item to the Trash. You may be prompted for your administrator password. Reboot and recreate the network settings.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combinationcommand-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
Step 2
Reset the System Management Controller.
Step 3
Reset the PRAM.

Why does my computer create web connections to addresses in the Amazon, Google and Youtube range when I start Firefox?

Similar Messages

Maybe you are looking for