strange connections

today i noticed a few odd connections to my server, like so:

Code: 
tcp        0      0 12.34.56.78:50827      221.193.34.92:113       FIN_WAIT2
tcp        0      0 12.34.56.78:50828      218.19.155.253:113      FIN_WAIT2
obviously, i've edit my own IP, am i right in thinking these are outgoing connections to port 113 on the foreign ips?

what puzzles me is the IP connecting to them is a dedicated IP for a small, single site that has no software or programs of anykind that would make calls home, like i know stuff like vBulletin will make connections like this to the license server (though normally to port 80 not 113 i think) so i've no idea what these are and if i should be worried about them?

 

 

 

 

Top