What is this?!?!??

2025-04-21

Hey guys, today I checked a VPS where I host some of my projects, and I did a netstat command and I found this:

tcp 0 0 primary.darxoul.com:58592 ev1s-66-98-217-195.e:domain TIME _WAIT
tcp 0 0 erig.net:http 200.82.196.80:1703 TIME _WAIT
tcp 0 0 erig.net:http 200.82.196.80:1702 TIME _WAIT
tcp 0 0 ip-64-15-128-66.revers:http 167.1.103.100:4976 TIME _WAIT
tcp 0 0 ip-209-172-59-235.reve:http AC889776.ipt.aol.com:2908 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http dsl51B7A5DF.pool.t-onl:4352 TIME _WAIT
tcp 0 0 ip-209-172-53-100.rev:58718 server.hostime.com:pop3 TIME _WAIT
tcp 0 0 erig.net:http c83-251-8-140.bredband:1199 TIME _WAIT
tcp 0 0 ip-64-15-128-82.rever:58601 82-47-199-184.stb.ubr0:auth FIN_ WAIT2
tcp 0 0 erig.net:http c83-251-8-140.bredband:1200 TIME _WAIT
tcp 0 0 erig.net:http 201008249194.user.velo:1289 TIME _WAIT
tcp 0 0 ip-64-15-128-66.revers:http S0106000f3d9e7347.vs.:46223 TIME _WAIT
tcp 0 0 erig.net:http 201008249194.user.velo:1290 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http bagu-cache-2.server.n:54871 TIME _WAIT
tcp 0 0 erig.net:http 201008249194.user.velo:1285 TIME _WAIT
tcp 0 0 erig.net:tproxy 201008249194.user.velo:1286 TIME _WAIT
tcp 0 0 erig.net:tproxy 201008249194.user.velo:1287 TIME _WAIT
tcp 0 0 erig.net:http 81-229-16-55-o1120.te:65079 TIME _WAIT
tcp 0 0 erig.net:http 81-229-16-55-o1120.te:65079 TIME _WAIT
tcp 0 0 ip-64-15-128-82.revers What is this?!?!??

mtp 68-116-207-7.dhcp.oxfr:2904 TIME _WAIT
tcp 0 0 erig.net:http rtr-9.core.lanet.net.:5**** TIME _WAIT
tcp 0 0 erig.net:tproxy hakone.magma-net.pl:3485 TIME _WAIT
tcp 0 0 erig.net:http 81-229-16-55-o1120.te:61521 TIME _WAIT
tcp 0 0 erig.net:http g157070.upc-g.chello.n:2883 FIN_ WAIT2
tcp 0 0 erig.net:http g157070.upc-g.chello.n:2882 FIN_ WAIT2
tcp 0 0 erig.net:http h95n5c1o1101.bredband:65315 TIME _WAIT
tcp 0 0 erig.net:http h95n5c1o1101.bredband:65335 FIN_ WAIT2
tcp 0 0 erig.net:tproxy g157070.upc-g.chello.n:2885 TIME _WAIT
tcp 0 0 erig.net:http eaj202.internetdsl.tpn:1310 FIN_ WAIT2
tcp 0 0 ip-209-172-53-98.rever:http 71-213-17-220.slkc.qwe:2522 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http 71-213-17-220.slkc.qwe:2520 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http 71-213-17-220.slkc.qwe:2520 TIME _WAIT
tcp 0 0 erig.net:http 82.199.191.240:50265 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http cache-frr-ae07.proxy.:46620 TIME _WAIT
tcp 0 0 erig.net:tproxy 82.199.191.240:50266 TIME _WAIT
tcp 0 0 ip-64-15-128-82.revers:http c-68-61-180-245.hsd1.m:2134 TIME _WAIT
tcp 0 0 erig.net:http lj2487.inktomisearch.:50404 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http Da4a4.d.pppool.de:61831 TIME _WAIT
tcp 0 0 erig.net:http host-81-190-138-160.ol:1168 FIN_ WAIT2
tcp 0 0 erig.net:tproxy 81-234-83-21-o1122.te:64052 TIME _WAIT
tcp 0 0 erig.net:tproxy 81-234-83-21-o1122.te:64053 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http ti221110a080-15247.bb.:4624 TIME _WAIT
tcp 0 0 erig.net:http 64.233.178.136:36515 TIME _WAIT
tcp 0 0 ip-209-172-53-98.rever:http ti221110a080-15247.bb.:4622 TIME _WAIT
tcp 0 0 erig.net:http 81-170-175-77.bahnhofb:4565 TIME _WAIT
tcp 0 0 erig.net:http 81-170-175-77.bahnhofb:4565 TIME _WAIT
tcp 0 0 erig.net:http 81-170-175-77.bahnhofb:4561 TIME _WAIT
tcp 0 0 erig.net:http 81-170-175-77.bahnhofb:4563 TIME _WAIT
tcp 0 0 ip-209-172-59-235.reve:http lj2402.inktomisearch.:45998 TIME _WAIT
tcp 0 0 ip-209-172-59-235.reve:http lj2402.inktomisearch.:45976 TIME _WAIT
tcp 0 0 erig.net:http 64.233.178.136:31892 TIME _WAIT
tcp 0 0 ip-209-172-53-99.rever:http p54BDB4C9.dip0.t-ipcon:1644 FIN_ WAIT2
tcp 0 0 erig.net:tproxy ANantes-251-1-83-196.w:4480 TIME _WAIT
tcp 0 0 erig.net:http c529d4b39.cable.wanado:3820 FIN_ WAIT2
tcp 0 0 erig.net:http 200165152170.user.velo:1611 TIME _WAIT
tcp 0 0 erig.net:http proxy4.star.net.pl:58730 TIME _WAIT

I really find it extrange, I did a reboot, and the instant that it was online again the connections suddenly appeared.

I checked erig.net and it's like a game community or something like that. But the real problem is that I did a tracert to erig.net and this are the last lines:

18 116 ms 113 ms 112 ms 209-172-35-246 [209.172.35.246]
19 111 ms 116 ms 112 ms erig.net [64.15.128.65]

209-172-35-246 its my VPS IP and the erig.net appears that is under my VPS. And I cant figure out what's going on What is this?!?!??

so If anyone can help me I would really appreciate it