What the hell is this IP thats connected to me? And why cant i disconnect it?!

[Shockwave]

So, I've been playin with network security a bit.
I pulled up netstat to see whats goin on, I have 3 connections. I hit the Lock button on ZA, and 2 of them close. I stays established! How the hell did it do that?!

The IP is 203.17.15.134:27030

How can I find out what is is, who it is and where it goes and most importantly what its doing??
Thnks

 

[guyver01]

isn't 27030 the CounterStrike port?

anyways i dunno what that IP is..

can't find 203.17.15.137: Non-existent domain


Answer:
No A records exist for 203.17.15.137. [Neg TTL=86400 seconds]

Details:
a.root-servers.net (an authoritative nameserver for (root)) says that there are no A records for 203.17.15.137.

 

[Hossenfeffer]

It's one hop off of content-delivery-syd.comindico.net.au (203.194.26.6)

Guyver, it's 134 not 137

A counter-strike server in Australia?

Using Steam?

 

[guyver01]

No A records exist for 203.17.15.134. [Neg TTL=86400 seconds]

Details:
e.root-servers.net (an authoritative nameserver for (root)) says that there are no A records for 203.17.15.134.


same answer

 

[moonshinemadness]

no response from either here

 

[Shockwave]

I do have Steam. Thats what I thought it was, but shouldnt the lock button on ZA stop ALL in/outbound traffic?
And why would I connect to a server is Aus??

 

[kranky]

IP is registered to Arksoft Systems in New South Wales, Australia

 

[Shockwave]

Appreciate all the help guys. Next quesiton, links please? Whatchya usin to find this out??

 

[guyver01]

I use a site called DNS Stuff

http://www.dnsstuff.com/

can do alot of lookups... great as a technical troubleshooting tool


and when that doesn't work..

SamSpade

http://www.samspade.org/

 

[Turin39789]

inetnum: 203.17.14.0 - 203.17.15.255
netname: ARKSOFT-AU
descr: ArkSoft Systems P/L
descr: PO Box 333
descr: Zetland
descr: NSW 2017
country: AU
admin-c: ST162-AP
tech-c: ST162-AP
remarks: ** Conversion note - reference 'ST12-AU' changed to 'ST162-AP'
remarks: Record imported from AUNIC as part of AUNIC->APNIC migration
remarks: Please see http://www.apnic.net/db/aunic/
mnt-by: MAINT-AU-ST162-AP
changed: nobody@aunic.net 19950622
changed: aunic-transfer@apnic.net 20010525
status: ALLOCATED PORTABLE
source: APNIC

person: Samantha Teh
address: ArkSoft Systems Pty Limited
address: PO Box 333
address: Zetland
address: NSW 2017
phone: +61 2 310 3315
phone: +61 2 310 3362
e-mail: sam@fish.net.au
nic-hdl: ST162-AP
remarks: This data originated from AUNIC, and was copied as part of
remarks: the AUNIC to APNIC migration. http://www.apnic.net/db/aunic/
remarks: Original nic-hdl in AUNIC: ST12-AU
mnt-by: MAINT-AU-ST162-AP
changed: nobody@aunic.net 19960326
changed: aunic-transfer@apnic.net 20010523
source: APNIC

 

[LordJezo]

Can you just install a firewall and disallow that ip access to your machine?