Netstat connections (?)

[ciggys]

my ISP is roadrunner and I have this in my netstat and it seems like more and more just keep popping up overtime with ESTABLISHED state it's confusing to me I don't really know if I should be worried about it or anything or if I should call my ISP

any help would be greatly appreciated!

Proto Local Address Foreign Address State
TCP Butchersoft-1:2407 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2408 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2410 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2488 rdc-024-025-026-011.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2489 rdc-024-025-026-011.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2490 rdc-024-025-026-011.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2572 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2604 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2609 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2630 rdc-024-025-026-018.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2631 rdc-024-025-026-018.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2651 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2652 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2662 rdc-024-025-026-018.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2666 rdc-024-025-026-018.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2670 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED
TCP Butchersoft-1:2686 rdc-024-025-026-050.southeast.rr.com:http ESTABLISHED

 

[felizcat]

I've just discovered something similar here. I am a roadrunner customer myself and I was tracking my web traffic. I've got lots of my web traffic going through hosts in the subnet 24.25.26.x, all through port 80.

I expect this to be some sort of web proxy/cache, but roadrunner doesn't confirm this, yet. I went through a customer support chat session. They told me, they don't use proxies and 24.25.26 is a customer subnet, not one of their own.

I use Traffic Shaper XP to trace traffic. I did block traffic to a single host that popped up in the trace without obvious impact. However, blocking the entire /24 subnet leads to white webpages and timeouts. I am trying to get to nytimes.com for my tests. Other websites seem less sensitive.