Windows ruft etliche IP-Adressen bei einer Neuinstallation auf.
CAP erzeugen per er Fritzbox:
- Um den Datestrom zu verringern am einfachsten den PC mit der Neuinstallation an das Gastnetz anschließen
- http://fritz.box/html/capture.html mit einem 2. PC aufrufen und den netzwerkschnittstellen Mitschnitt von guest per Start aufnehmen.
- nach einer Zeit den Mitschnitt stoppen
Alle Ziel-IP Addressen auslesen geht leider nicht in einem Schritt. Hierfür bietet sich Whireshark und Excel an.
- *.cap Datei in Whireshark laden.
- Vorfilter anwenden: (IP6 und Broadcast etc entfernen für eine bessere Übersicht)
Rot ist der eigene IP-Bereich.
Menü: Datei -> Kopfdaten entfernen und folgendes im Dialogfenster einfügen
Datei sichern als Wireshark *.pcapng!(ipv6 || ip.addr==224.0.0.0/4 || _ws.col.protocol=="HomePlug AV" || _ws.col.protocol=="LLDP"
|| eth.dst==01:80:c2:00:00:0e || eth.dst==ff:ff:ff:ff:ff:ff || _ws.col.protocol=="ARP" || (ip.src==192.168.189.0/24 && ip.dst==192.168.189.0/24))
- Spaltenansicht auf Source reduzieren
# Rechtsklick auf Spaltenkopf und alle anderen ausklicken - per STRG-A und STRG-C alle IP-Adressen kopieren
Duplikate entfernen (in Excel)
# Excel-Datei öffnen
# per STRG-V die kopierten Ip-Adressen einfügen
# IP-Adressen karkieren und im Menü: Daten -> Duplikate entfernen - via https://ipinfo.io/ können jetzt nach und nach die einzelnen Adressen ausgewertet werden.
IPs die aufgerufen werden nach einer Windows 11 prof. Neuinstallation
| IP | IP-Range | Wer | Info | IP Einzeln |
| 134.120.195.249 | ? | |||
| 173.222.108.0/23 | Akamai International B.V. | 173.222.108.226 | ||
| 184.24.77.0/24 | Akamai International B.V. | |||
| 2.18.64.0/24 | Akamai International B.V. | www.msftconnecttest.com | 2.18.64.197 | |
| 2.21.22.0/24 | Akamai International B.V. | 2.21.22.170 | ||
| 2.21.78.0/23 | Akamai International B.V. | 2.21.79.26 | ||
| 2.21.78.0/23 | Akamai International B.V. | |||
| 2.22.89.0/24 | Akamai International B.V. | 2.22.89.20 | ||
| 2.22.89.0/24 | Akamai International B.V. | |||
| 23.11.206.0/24 | Akamai International B.V. | 23.11.206.65 | ||
| 23.2.13.0/24 | Akamai International B.V. | 23.2.13.26 | ||
| 23.216.77.0/24 | Akamai International B.V. | 23.216.77.147 | ||
| 23.32.100.0/22 | Akamai International B.V. | 23.32.101.182 | ||
| 23.53.40.0/22 | Akamai International B.V. | 23.53.42.26; 23.53.41.243 | ||
| 23.53.40.0/22 | Akamai International B.V. | 23.53.42.121; 23.53.42.179 | ||
| 92.123.104.0/24 | Akamai International B.V. | 92.123.104.38 | ||
| 96.16.122.0/24 | Akamai International B.V. | 96.16.122.69 | ||
| 184.30.128.0/21 | Akamai International B.V. | 184.30.131.245 | ||
| 23.209.208.0/22 | Akamai International B.V. | 23.209.209.225 | ||
| 142.250.0.0/15 | Amazon Data Services NoVa | |||
| 18.173.152.0/21 | Amazon Data Services NoVa | |||
| 18.173.184.0/21 | Amazon Data Services NoVa | |||
| 18.66.192.0/24 | Amazon Data Services NoVa | |||
| 205.251.197.0/24 | Amazon Data Services NoVa | |||
| 205.251.198.0/24 | Amazon Data Services NoVa | |||
| 205.251.199.0/24 | Amazon Data Services NoVa | |||
| 52.85.64.0/22 | Amazon.com, Inc. | 52.85.65.70 | ||
| 104.18.32.0/24 | Cloudflare, Inc. | Hmm warum? | 104.18.32.137 | |
| 104.18.80.0/20 | Cloudflare, Inc. | Hmm warum? | ||
| 152.199.21.0/24 | Edgecast Inc. | 152.199.21.175 | ||
| 192.229.221.0/24 | Edgecast Inc. | 192.229.221.95 | ||
| 199.232.188.0/22 | Fastly, Inc. | Domainhoster ? | 199.232.190.172 | |
| 92.223.40.0/24 | G-Core Labs S.A. | Border Gateway Protocol | 92.223.40.62 | |
| 142.250.184.0/24 | ||||
| 142.251.36.0/24 | ||||
| 172.217.16.0/24 | ||||
| 172.217.23.0/24 | ||||
| 216.58.206.0/23 | ||||
| 34.104.0.0/14 | ||||
| 34.108.0.0/14 | ||||
| 34.116.0.0/14 | 104.18.87.42; 104.18.32.137 | |||
| 34.120.0.0/14 | ||||
| 34.148.0.0/14 | 34.149.100.209 | |||
| 34.160.0.0/16 | ||||
| 34.32.0.0/11 | ||||
| 35.244.0.0/16 | 35.244.181.201 | |||
| 66.102.1.0/24 | 66.102.1.188 | |||
| 8.8.8.0/24 | ||||
| 20.192.0.0/10 | Microsoft | 20.199.58.43 | ||
| 23.209.208.0/22 | Microsoft | 23.209.210.54 | ||
| 4.224.0.0/12 | Microsoft | 4.231.128.59 | ||
| 72.152.0.0/14 | Microsoft | 72.154.7.113 | ||
| 13.104.0.0/14 | Microsoft | 13.107.253.45 | ||
| 13.104.0.0/14 | Microsoft | 13.107.246.45 | ||
| 13.107.42.0/24 | Microsoft | 13.107.42.16 | ||
| 13.107.5.0/24 | Microsoft | 13.107.5.93 | ||
| 13.64.0.0/11 | Microsoft | 13.89.179.10 | ||
| 150.171.0.0/16 | Microsoft | 150.171.70.254 | ||
| 20.0.0.0/11 | Microsoft | 20.31.61.205 | ||
| 20.0.0.0/11 | Microsoft | |||
| 20.184.0.0/13 | Microsoft | 20.190.159.23; 20.190.160.22 | ||
| 20.192.0.0/10 | Microsoft | 20.223.36.55 | ||
| 20.40.0.0/13 | Microsoft | 20.42.73.24 | ||
| 20.48.0.0/12 | Microsoft | 20.50.73.8 | ||
| 20.64.0.0/10 | Microsoft | 20.73.194.208 | ||
| 204.79.197.0/24 | Microsoft | 204.79.197.222 | ||
| 204.79.197.0/24 | Microsoft | 204.79.197.203 | ||
| 208.84.0.0/21 | Microsoft | |||
| 28.251.0.0/16 | Microsoft | 128.251.127.23 | ||
| 4.144.0.0/12 | Microsoft | 4.151.228.221 | ||
| 4.208.0.0/12 | Microsoft | 4.208.165.245 | ||
| 4.224.0.0/12 | Microsoft | 4.231.128.59 | ||
| 40.112.0.0/13 | Microsoft | 40.113.110.67 | ||
| 40.126.0.0/18 | Microsoft | 40.126.31.69 | ||
| 40.127.0.0/16 | Microsoft | 40.127.240.158 | ||
| 48.208.0.0/13 | Microsoft | 48.209.108.37 | ||
| 51.124.0.0/16 | Microsoft | 51.124.78.146 | ||
| 52.113.194.0/24 | Microsoft | 52.113.194.132 | ||
| 52.120.0.0/14 | Microsoft | 52.123.128.14 | ||
| 52.96.0.0/12 | Microsoft | 52.109.32.97; 52.109.89.117; 52.109.76.240 | ||
| 72.144.0.0/14 | Microsoft | 72.145.26.121; 72.145.35.98 | ||
| 72.152.0.0/14 | Microsoft | 72.153.5.135 | ||
| 217.20.57.0/24 | Qwilt INC | Werbung |
Per folgender Formal in Excel kann jetzt ein Filter erzeugt werden um obige IP/Bereich auszufiltern. für jede Zeile einzeln.
=" ip.addr=="&WENN(A2="";B2;TEXT(A2;"0.0.0.0"))&"||"
Alle Zellen danach kopieren und am Anfang !( und am Ende ) hinfügen. Letztes || noch löschen!
!(ip.addr==134.120.195.249 || ip.addr==13.107.253.45 || ip.addr==150.171.70.254
|| ip.addr==2.21.79.26 || ip.addr==2.22.89.20 || ip.addr==20.223.36.55
|| ip.addr==20.31.61.205 || ip.addr==204.79.197.222 || ip.addr==23.11.206.65
|| ip.addr==23.53.41.243 || ip.addr==23.53.42.26 || ip.addr==52.85.65.70
|| ip.addr==184.24.77.0/24 || ip.addr==23.216.77.0/24 || ip.addr==23.2.13.0/24
|| ip.addr==2.21.78.0/23 || ip.addr==2.22.89.0/24 || ip.addr==173.222.108.0/23
|| ip.addr==184.24.77.0/24 || ip.addr==2.21.22.0/24 || ip.addr==23.32.100.0/22
|| ip.addr==23.53.40.0/22 || ip.addr==92.123.104.0/24 || ip.addr==96.16.122.0/24
|| ip.addr==142.250.0.0/15 || ip.addr==18.173.152.0/21 || ip.addr==18.173.184.0/21
|| ip.addr==18.66.192.0/24 || ip.addr==205.251.198.0/24 || ip.addr==205.251.198.0/24
|| ip.addr==205.251.199.0/24 || ip.addr==205.251.197.0/24 || ip.addr==104.18.80.0/20
|| ip.addr==104.18.32.0/24 || ip.addr==192.229.221.0/24 || ip.addr==152.199.21.0/24
|| ip.addr==199.232.188.0/22 || ip.addr==34.148.0.0/14 || ip.addr==142.250.184.0/24
|| ip.addr==142.251.36.0/24 || ip.addr==142.251.36.0/24 || ip.addr==172.217.23.0/24
|| ip.addr==216.58.206.0/23 || ip.addr==34.104.0.0/14 || ip.addr==34.108.0.0/14
|| ip.addr==34.116.0.0/14 || ip.addr==34.120.0.0/14 || ip.addr==34.160.0.0/16
|| ip.addr==34.32.0.0/11 || ip.addr==172.217.16.0/24 || ip.addr==8.8.8.0/24
|| ip.addr==34.120.0.0/14 || ip.addr==34.160.0.0/16 || ip.addr==35.244.0.0/16
|| ip.addr==66.102.1.0/24 || ip.addr==20.0.0.0/11 || ip.addr==208.84.0.0/21
|| ip.addr==4.144.0.0/12 || ip.addr==52.113.194.0/24 || ip.addr==13.104.0.0/14
|| ip.addr==13.107.42.0/24 || ip.addr==13.107.5.0/24 || ip.addr==20.184.0.0/13
|| ip.addr==20.0.0.0/11 || ip.addr==204.79.197.0/24 || ip.addr==40.112.0.0/13
|| ip.addr==40.126.0.0/18 || ip.addr==51.124.0.0/16 || ip.addr==52.96.0.0/12
|| ip.addr==217.20.57.0/24)