On my box I ran netstat and I got:
#netstat
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 1 0 172.16.1.36:50308 193.28.235.37:http CLOSE_WAIT
And I ran "whois" 193.28.235.37:http on Ip address
Is this someone hacking my box ?
My box is ; 72.16.1.36:50308
# whois 193.28.235.37
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See
http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '193.28.235.0 - 193.28.235.255'
inetnum: 193.28.235.0 - 193.28.235.255
org: ORG-RLFR1-RIPE
netname: reloufr
descr: RelouFR net and hosting addressing
country: FR
admin-c: VOX-RIPE
tech-c: VOX-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: RELOUFR-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: RELOUFR-MNT
mnt-domains: RELOUFR-MNT
source: RIPE # Filtered
organisation: ORG-RLFR1-RIPE
org-name: RELOUFR
org-type: OTHER
address: Antoine Versini
address: 27 rue des Morillons
address: 75015 PARIS
address: France
e-mail:
vox@reloufr.net
mnt-ref: RELOUFR-MNT
mnt-by: RELOUFR-MNT
source: RIPE # Filtered
person: Antoine Versini
org: ORG-RLFR1-RIPE
address: 27 rue des Morillons
address: 75015 PARIS
address: FRANCE
e-mail:
vox@starnode.net
phone: +33 1 55 45 45 00
nic-hdl: VOX-RIPE
mnt-by: RELOUFR-MNT
source: RIPE # Filtered
% Information related to '193.28.235.0/24AS31375'
route: 193.28.235.0/24
org: ORG-RLFR1-RIPE
descr: RELOUFR PI
origin: AS31375
mnt-by: RELOUFR-MNT
source: RIPE # Filtered
organisation: ORG-RLFR1-RIPE
org-name: RELOUFR
org-type: OTHER
address: Antoine Versini
address: 27 rue des Morillons
address: 75015 PARIS
address: France
e-mail:
vox@reloufr.net
mnt-ref: RELOUFR-MNT
mnt-by: RELOUFR-MNT
source: RIPE # Filtered
