I know I have not ever posted much at all but I have been a long time reader of MDL. Anyhow, I install a Asus Rog program the other day and was playing around with it this morning and discovered that Windows 8 has a permanant connect to this IP address through TCP and it also starts and stops a UDP connection to the same IP address. The IP address is 18.104.22.168 with a port of 443 This one is through Explorer.exe with a TCP connection IP:22.214.171.124 Neighborhood Host:bn1wns1011320.wns.windows.com Country:United States # The following results may also be obtained via: # h**p://whois.arin.net/rest/nets;q=126.96.36.199?showDetails=true&showARIN=false&ext=netref2 # NetRange: 188.8.131.52 - 184.108.40.206 CIDR: 220.127.116.11/16, 18.104.22.168/15, 22.214.171.124/14 OriginAS: AS8075 NetName: MSFT-GFS NetHandle: NET-157-54-0-0-1 Parent: NET-157-0-0-0-0 NetType: Direct Assignment Comment: Abuse complaints will only be responded to if sent to abuse @microsoft.com[ and abuse @msn.com. RegDate: 1994-04-28 Updated: 2010-08-19 Ref: h**p://whois.arin.net/rest/net/NET-157-54-0-0-1 OrgName: Mi*rosoft Corp OrgId: MSFT Address: One Mi*rosoft Way City: Redmond StateProv: WA PostalCode: 98052 Country: US RegDate: 1998-07-10 Updated: 2011-04-26 Ref: h**p://whois.arin.net/rest/org/MSFT The Whois Whois record : MarkMonitor is the Global Leader in Online Brand Protection. Domain Management MarkMonitor Brand Protectionâ¢ MarkMonitor AntiPiracyâ¢ MarkMonitor AntiFraudâ¢ Professional and Managed Services Visit MarkMonitor at w*w.markmonitor.com The UDP starts and stops and is 126.96.36.199 with a port 3544 All the IP info and Whois is the same for the UDP connection. This got me a little concerned that windows 8 is doing this. Anyone able to shed some light on this? Thoughts?