Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 23

Thread: strange ips connected to me

  1. August 20th, 2003, 12:23 AM #11
    sk8
    sk8 is offline
    Member
    Join Date
    Sep 2002
    Posts
    36
    um, ctrl + enter to resize your command prompt window, at the top of the window there are the copy/paste buttons
    heh =)
    I don\'t wanna grow up change my skateboard for a tie
    Reply With Quote Reply With Quote
  2. August 20th, 2003, 12:27 AM #12
    a_person
    a_person is offline
    Member
    Join Date
    Jan 2003
    Posts
    48
    ctrl-enter does nothing...
    Reply With Quote Reply With Quote
  3. August 20th, 2003, 01:05 AM #13
    Tedob1
    Tedob1 is offline
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    207.46.107.16 = microsoft.com (auto-update?)

    64.12.25.153= Aol (not an account but an aol server)

    64.12.24.105 = another AOL server

    205.188.6.218 another

    205.188.4.112 and another

    their all aol servers!

    one is a proxy another is DNS. one is probably for the buddy list but their all direct assignment ips. none belong to members
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
    Reply With Quote Reply With Quote
  4. August 20th, 2003, 01:08 AM #14
    cheyenne1212
    cheyenne1212 is offline
    Senior Member
    Join Date
    Feb 2003
    Location
    Memphis, TN
    Posts
    3,747
    Port Number 5190

    aol 5190/tcp America-Online
    aol 5190/udp America-Online
    Port Number 1863


    msnp 1863/tcp MSNP
    msnp 1863/udp MSNP
    MSNP= Microsoft Instant Messaging Protocol

    [edit]
    guess I posted to late. But these are what the ports are that you should on those IPs
    =
    Reply With Quote Reply With Quote
  5. August 20th, 2003, 01:09 AM #15
    a_person
    a_person is offline
    Member
    Join Date
    Jan 2003
    Posts
    48
    what about 61.94.190.9?

    and what the hecks epmap?
    Reply With Quote Reply With Quote
  6. August 20th, 2003, 01:33 AM #16
    cheyenne1212
    cheyenne1212 is offline
    Senior Member
    Join Date
    Feb 2003
    Location
    Memphis, TN
    Posts
    3,747
    emap

    Microsoft DCE Locator service aka. end-point mapper. It works like Sun RPC portmapper, except that end-points can also be named pipes. Microsoft relies upon DCE RPC to remotely manage services. Some services that use port 135 of end-point mapping are:
    DHCP server
    DNS server
    WINS server
    AKA NCS local location broker
    source
    http://www.iss.net/security_center/a...35/default.htm
    =
    Reply With Quote Reply With Quote
  7. August 20th, 2003, 01:57 AM #17
    _1l31l2uTiCu$_
    _1l31l2uTiCu$_ is offline
    Junior Member
    Join Date
    Aug 2003
    Posts
    5
    5190 is AIM. Were you chatting with someone when you checked the netstat? If yes... how many?
    \"Bad deeds spawns rebirth\"
    \"Rebirth itself shall be denied with good deeds\"
    Reply With Quote Reply With Quote
  8. August 20th, 2003, 02:13 AM #18
    a_person
    a_person is offline
    Member
    Join Date
    Jan 2003
    Posts
    48
    i wasn't talking to anyone at the time... i got connections from some place called level3.net, what exactly is that?
    Reply With Quote Reply With Quote
  9. August 20th, 2003, 02:51 AM #19
    Tedob1
    Tedob1 is offline
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    you dont have to be chatting...its a part of aol they keep looking to see if your there. its on as soon as you go on line. it nothing to worry about.


    C:\>netstat

    Active Connections

    Proto Local Address Foreign Address State
    TCP <my Computer>:1672 berp-cn19.dial.aol.com:13784 ESTABLISHED
    TCP <my Computer>:1674 205.188.49.120:5190 ESTABLISHED
    TCP <my Computer>:1834 cache02.ns.uu.net:domain ESTABLISHED
    TCP <my Computer>:1838 cache02.ns.uu.net:domain ESTABLISHED
    TCP <my Computer>:1842 cache02.ns.uu.net:domain ESTABLISHED
    TCP <my Computer>:1844 cache02.ns.uu.net:domain ESTABLISHED

    if you do the netstat without any flags you get names instead of IPs

    http://www.level3.com/

    go to http://samspade.org down load sam spade. it free and will allow you to learn allot
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
    Reply With Quote Reply With Quote
  10. August 20th, 2003, 02:58 AM #20
    _1l31l2uTiCu$_
    _1l31l2uTiCu$_ is offline
    Junior Member
    Join Date
    Aug 2003
    Posts
    5
    If I remembered correctly, I had traces that led to that DNS. It was an OS Fingerprinting
    attempt. I contacted them but had no help. Seemed like everyone there all had their heads up their asses. But it seemed to have work cause I didn't get anymore attempts =) This might not be the case but I hope it helps.

    Goodluck
    \"Bad deeds spawns rebirth\"
    \"Rebirth itself shall be denied with good deeds\"
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules