WinXP SP3 Comodo Ver. 5.0.163652.1142.
Ever since I installed the Comodo ver 5. update, I have noticed a TCP port 1024 - 1040 or so connect to 24.143.xxx.xxx IP range. Whois shows this as a Alkcami redirect to Roadrunner.
I am hoping this is something to do with the Comodo cloud scanners?
Appears to only occur one time at initial boot for the day.
I also saw something yesterday that I did not like on the initial boot. That was a localhost 127.0.0.1 TCP connect from svchost.exe to ports 1024 -1040 that I could not resolve. Did not occur today so I am not to concerned since I had Prevx SafeOnline self protection configured to maximum and that was conflicting with Symantec’s Endpoint’s ccapp.exe. Pegged ccapp.exe at a constant 25% usage against all four CPU cores!
Akamai is a big hosting company that delivers mirrors and caching for big web sites. Another descirption from Wikipedia:
Akamai transparently mirrors content—sometimes all site content including HTML, CSS, and software downloads, and sometimes just media objects such as audio, graphics, animation, and video—from customer servers. Though the domain name (but not subdomain) is the same, the IP address points to an Akamai server rather than the customer’s server. The Akamai server is automatically picked depending on the type of content and the user’s network location.
It is said to host about 25% of the complete web. In the time when I used to use AVG free I saw their updates were coming from Akamai servers for example.
It is a safe bet to assume Comodo may have hired Akamai.