strange ips connected to me

um, ctrl + enter to resize your command prompt window, at the top of the window there are the copy/paste buttons
heh =)

ctrl-enter does nothing...

207.46.107.16 = microsoft.com (auto-update?)

64.12.25.153= Aol (not an account but an aol server)

64.12.24.105 = another AOL server

205.188.6.218 another

205.188.4.112 and another

their all aol servers!

one is a proxy another is DNS. one is probably for the buddy list but their all direct assignment ips. none belong to members

Port Number 5190

Quote:

---

aol 5190/tcp America-Online
aol 5190/udp America-Online

---

Port Number 1863

Quote:

---

msnp 1863/tcp MSNP
msnp 1863/udp MSNP

---

MSNP= Microsoft Instant Messaging Protocol

[edit]
guess I posted to late. But these are what the ports are that you should on those IPs

what about 61.94.190.9?

and what the hecks epmap?

emap

Quote:

---

Microsoft DCE Locator service aka. end-point mapper. It works like Sun RPC portmapper, except that end-points can also be named pipes. Microsoft relies upon DCE RPC to remotely manage services. Some services that use port 135 of end-point mapping are:
DHCP server
DNS server
WINS server
AKA NCS local location broker

---

source
http://www.iss.net/security_center/a...35/default.htm

5190 is AIM. Were you chatting with someone when you checked the netstat? If yes... how many?

i wasn't talking to anyone at the time... i got connections from some place called level3.net, what exactly is that? :confused:

you dont have to be chatting...its a part of aol they keep looking to see if your there. its on as soon as you go on line. it nothing to worry about.


C:\>netstat

Active Connections

Proto Local Address Foreign Address State
TCP <my Computer>:1672 berp-cn19.dial.aol.com:13784 ESTABLISHED
TCP <my Computer>:1674 205.188.49.120:5190 ESTABLISHED
TCP <my Computer>:1834 cache02.ns.uu.net:domain ESTABLISHED
TCP <my Computer>:1838 cache02.ns.uu.net:domain ESTABLISHED
TCP <my Computer>:1842 cache02.ns.uu.net:domain ESTABLISHED
TCP <my Computer>:1844 cache02.ns.uu.net:domain ESTABLISHED

if you do the netstat without any flags you get names instead of IPs

http://www.level3.com/

go to http://samspade.org down load sam spade. it free and will allow you to learn allot

If I remembered correctly, I had traces that led to that DNS. It was an OS Fingerprinting
attempt. I contacted them but had no help. Seemed like everyone there all had their heads up their asses. But it seemed to have work cause I didn't get anymore attempts =) This might not be the case but I hope it helps.

Goodluck