I've found some strange network activity in my firewall's logs,
I dont know what or who it is but i think you guys can help.
Activity:
IP: 208.107.225.X (Last ocelet randomizes)
Ports so far: 1056, 3729, 3728, 1393 (all TCP, S flags)
Other suspicious time
IP: 208.107.211.105
Port: 1900 UDP
Program: svchost.exe
Its kinda creepin me out, I'm just a programmer with a little networking hobby, I haven't been doing this for long, but i locked my hosts file just incase of an attack.