Remote Connections

By | September 29, 2018

These PowerShell scripts list the remote IPs connecting on 443 , while filtering out local IPs and devices on ATT (107.77)

Get-NetTCPConnection -LocalPort 443 -State Established| group RemoteAddress -NoElement | ?{$_.Name -notmatch '127.0.0' -and $_.Name -notmatch '::' -and $_.Name -notmatch '192.168.' -and $_.Name -notmatch '107.77.'} | sort name
</pre>
<pre class="">Get-NetTCPConnection -LocalPort 443 -State Established | group RemoteAddress -NoElement | select name | convertto-csv | ?{$_ -notmatch '127.0.0' -and $_ -notmatch '::' -and $_ -notmatch '192.168.' -and $_ -notmatch '107.77.'} | sort -descending | Select-Object -Skip 2