how to check where ip address is coming from.
 

I am needing a command for checking who is trying to connect to my computer...

netstat

Here are two that wil do what you want:

traceroute <fqdn/ipnumber>
netstat <fqdn/ipnumber>

See manpages for all the options

Thanks, is there a pause command to see the beginning...

netstat | less
or
netstat | more

either one :)

On the otherhand, it could be a spoofed IP address... in that case, too bad.

try using IPTraf?