Why is port 443 listed in NetStat with an Amazon IP address?

Curits James McConnell March 25, 2015
Ads by Google

Why is port 443 listed in NetStat with an Amazon IP address?

In reading this article 15 Windows Command Prompt (CMD) Commands You Must Know The command prompt is still a powerful Windows tool. Here are the most useful CMD commands every Windows user needs to know. Read More , I came across and ran the NetStat command in Windows. The output included this line CLOSE_WAIT

A reverseIP lookup says that IP goes to Amazon. I don’t have that much dealings with Amazon. Why do they merit a connection on my computer, and what are they waiting for?

I have searched MUO Answers and did a reverse lookup on the IP addresses. Can someone please explain why an Amazon IP address appears to be receiving data from my computer?

  1. Curtis James McConnell
    March 29, 2015 at 9:57 pm

    These were very informative and helpful. Thank you.

  2. Reahubber
    March 25, 2015 at 11:49 pm CLOSE_WAIT

    Command is simple, ip give you outgoing connection ip , and close_wait is what is status of connection with

    The last is port, you are connected with the on port 443 of remote computer.

  3. ha14
    March 25, 2015 at 8:44 am

    Port 443 Details
    HTTPS / SSL - encrypted web traffic.

  4. Jan F.
    March 25, 2015 at 7:01 am

    Bruce already explained the most of it. Some application on your computer loaded something from an Amazon server via port 443. The connection is now closed but not fully "terminated". Some connection can stay in this state until the application is closed.

    Real world scenario?
    Most likely while surfing the web your browser loaded an ad or something from an Amazon server via https (port 443) and once you close it this close_wait connection should disappear.

    Your computer will always establish, hold, listen or terminate random connections to various IP addresses on the internet. This can be automatic updates, DNS lookups, receiving or sending data,and what not.

  5. Bruce E
    March 25, 2015 at 4:37 am

    CLOSE_WAIT indicates that the first FIN signal from the client has been received by the server and it is waiting for the application to execute the close() function.

    Port 443 is the default port for HTTPS.

    So what we have here is a connection that was established to an Amazon server, possibly by another application that runs on Amazon's S3 such as some file storage services or you recently downloaded a file that is stored in S3 and is in the process of closing the TCP connection. The connection can remain in this state indefinitely until the close() function is executed.

  6. Cole
    March 25, 2015 at 2:19 am

    Port 443 is the well known port for secure websites (HTTPS) (http://www.penguintutor.com/linux/network-services-ports). If you are not aware, Amazon is not just a shopping site, they provide hosting services used by hundreds or thousands of websites (http://aws.amazon.com/). It is most likely that you have visited an Amazon-hosted site at some point recently.

    P.S. - The title of that article is misleading, most Windows users don't need to know those commands.

Ads by Google