August 17th, 2003, 05:28 AM
strange ips connected to me
I have like 5 or 6(around there, changes all the time) ips connected to me( i used "netstat") and i want to know if this is normal... And if not what exactly can i do lol! I have a firewall and antivirus and they are on all the time.
August 17th, 2003, 05:44 AM
Are you running any P2P applications i.e kazza, morpheus?
You have any messenger services?
I to have some IPs connected to me all the time but these are my loopback ones 127.0.0.1 but on different ports.
August 17th, 2003, 05:47 AM
A little more info would probably get you a more detailed answer....what OS are we dealing with? What kind of connection? The more you tell the more we can assess and assist.
It isn't paranoia when you KNOW they're out to get you...
August 17th, 2003, 12:35 PM
It's useful to play around with 'nslookup' [preferably 'host' if you're running *nix] to see exactly what's the deal with them... but most likely, you have messenging/P2P apps connected. ANy decent firewall should give you some information on what program launched those connections, info ab the IPs etc.
August 18th, 2003, 03:53 AM
What ports are they connecting on?
August 18th, 2003, 04:20 AM
May sound like a stupit question, but do you have any applications open.
Like maybe 5 instances of Ineternet Explorer to 5 different web sites?
If not, you have a problem, otherwise dont panick your more than likely
seeing connections that yoyu initiated out to the internet
August 18th, 2003, 04:47 AM
it would really be helpfull if you could post a netstat...with your ip addy Xed out of course
Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
August 18th, 2003, 04:52 AM
Best thing would be to provide us with more info. Some of the information you might want to provide would be...
1-any programs open?
3-the list of ip addresses if possible and the ports they are connected to
with these info, we might be able to provide u with a better answer rather than just guessing it.
August 19th, 2003, 12:34 AM
sorry i couldn't reply i was away for a few days(out of town). I'll send you the netstat if(when) they connect. And no i don't have any P2P networks open and i'm not running 5 different internet explorers . I had my internet connection and aol instant messenger running(with nobody direct connected) and that was all.
August 20th, 2003, 12:10 AM
heres my netstat(as close as i can get it beause i can't copy/paste)
Proto Local Address Foreign Address State
TCP xxxxxxxxxxxx 22.214.171.124:1863 ESTABLISHED
TCP xxxxxxxxxxxx 126.96.36.199:5190 ESTABLISHED
TCP xxxxxxxxxxxx 188.8.131.52:5190 ESTABLISHED
TCP xxxxxxxxxxxx 184.108.40.206:5190 ESTABLISHED
TCP xxxxxxxxxxxx 220.127.116.11:5190 ESTABLISHED
I hope someone can give me more information