Suspicious Activity

I've found some strange network activity in my firewall's logs,

I dont know what or who it is but i think you guys can help.

Activity:

IP: 208.107.225.X (Last ocelet randomizes)

Ports so far: 1056, 3729, 3728, 1393 (all TCP, S flags)

Other suspicious time

IP: 208.107.211.105

Port: 1900 UDP

Program: svchost.exe

Its kinda creepin me out, I'm just a programmer with a little networking hobby, I haven't been doing this for long, but i locked my hosts file just incase of an attack.