Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Support > Strange ip connection to my computer. who is this?

Reply
Thread Tools

Strange ip connection to my computer. who is this?

 
 
farseer
Guest
Posts: n/a
 
      06-04-2005
I did a netstat on my computer and found the following ip + port:
TCP XXXXXXXXX:1048 205.188.9.92:5190 ESTABLISHED

I then did a whois on that ip can got the result below. Does anyone
know who the heck this is? also, how can i kill this connection to my
computer?

OrgName: Environment Canada
OrgID: ENVIRO-4
Address: 2121 North Service Road
Address: Trans-Canada Highway
City: Dorval
StateProv: QC
PostalCode: H9P-1J3
Country: CA

NetRange: 205.189.8.0 - 205.189.11.255
CIDR: 205.189.8.0/22
NetName: ECONET-PUBLIC
NetHandle: NET-205-189-8-0-1
Parent: NET-205-0-0-0-0
NetType: Direct Assignment
NameServer: DNS1.CMC.EC.GC.CA
NameServer: DNS2.CMC.EC.GC.CA
Comment:
RegDate: 1995-03-22
Updated: 2005-04-28

OrgTechHandle: NOC1519-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-514-421-4698
OrgTechEmail: http://www.velocityreviews.com/forums/(E-Mail Removed)

# ARIN WHOIS database, last updated 2005-06-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

 
Reply With Quote
 
 
 
 
John Holmes
Guest
Posts: n/a
 
      06-04-2005
"farseer" <(E-Mail Removed)> blabbered in 24hoursupport.helpdesk:

> I did a netstat on my computer and found the following ip + port:
> TCP XXXXXXXXX:1048 205.188.9.92:5190 ESTABLISHED
>
> I then did a whois on that ip can got the result below. Does anyone
> know who the heck this is? also, how can i kill this connection to my
> computer?



Download and install Active Ports from:
http://www.protect-me.com/freeware.html
It will tell you which program takes the connection and you can kill the
program with a single mouse click.

--
Your mother was an unwelcome window cleaner who used to practice the old
Jedi mind trick in fish and chip shops.

 
Reply With Quote
 
 
 
 
cluedweasel
Guest
Posts: n/a
 
      06-04-2005
On 4 Jun 2005 10:52:42 -0700, "farseer" <(E-Mail Removed)> wrote:

>I did a netstat on my computer and found the following ip + port:
>TCP XXXXXXXXX:1048 205.188.9.92:5190 ESTABLISHED
>

Well, 5190 is AOL IM if that is any help.
 
Reply With Quote
 
wildkyle
Guest
Posts: n/a
 
      06-04-2005

It looks like it is a weather information website / company. Here is th
address for the company: www.weatheroffice.ec.gc.ca

Kyl

--
wildkyl
-----------------------------------------------------------------------
wildkyle's Profile: http://www.iamnotageek.com/member.php?userid=1343
View this thread: http://www.iamnotageek.com/showthread.php?t=181907836

 
Reply With Quote
 
Mike Easter
Guest
Posts: n/a
 
      06-04-2005
farseer wrote:
> I did a netstat on my computer and found the following ip + port:
> TCP XXXXXXXXX:1048 205.188.9.92:5190 ESTABLISHED


5190 is AOL's AIM - instant messenger

205.188.9.92 is AOL

whois -h whois.arin.net 205.188.9.92 ...

OrgName: America Online, Inc
NetRange: 205.188.0.0 - 205.188.255.255
CIDR: 205.188.0.0/16


> NetRange: 205.189.8.0 - 205.189.11.255


Wrong IP range for your target.

--
Mike Easter
 
Reply With Quote
 
Duane Arnold
Guest
Posts: n/a
 
      06-04-2005
Your next question since posters have told what the remote IP is about
should be what is making the remote connection.

Active Ports can tell you what program is doing it.

http://www.snapfiles.com/get/activeports.html

And Process Explorer can look inside that program and see what program is
using it as a host.

http://www.pcworld.com/downloads/fil...RSS,RSS,00.asp
http://www.sysinternals.com/Utilitie...sExplorer.html
http://tinyurl.com/klw1

Duane


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
AVG Email Scanner activating at strange times with strange IP addresses dennispublic@hotmail.com Computer Support 1 08-26-2006 04:27 AM
Strange error - Connection with the server could not be establishe =?Utf-8?B?VGhvbWFzIEFuZGVyc3Nvbg==?= ASP .Net 0 07-24-2004 02:01 AM
strange sql connection prob Tim Almond ASP .Net 1 04-12-2004 05:41 PM
Question About Strange 'C' Code Syntax ( Well strange to me anyway ) Harvey Twyman C Programming 8 10-25-2003 05:54 AM
very strange problem with connection Trapulo ASP .Net 3 10-15-2003 07:59 AM



Advertisments