This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unknown connections from ACC

Hello,

every hour at the same time I see the following connections from ACC:

11:00:07.405570 IP 10.23.160.171.62180 > 216.167.31.83.33436: UDP, length 12
11:00:07.405821 IP 10.23.160.171.62180 > 216.167.31.83.33436: UDP, length 12
11:00:10.211172 IP 10.23.160.171.62180 > 216.167.31.83.33439: UDP, length 12
11:00:10.211415 IP 10.23.160.171.62180 > 216.167.31.83.33439: UDP, length 12
11:00:13.106732 IP 10.23.160.171.62180 > 216.167.31.83.33442: UDP, length 12
11:00:13.107028 IP 10.23.160.171.62180 > 216.167.31.83.33442: UDP, length 12
11:00:16.167258 IP 10.23.160.171.62180 > 216.167.31.83.33445: UDP, length 12
11:00:16.167498 IP 10.23.160.171.62180 > 216.167.31.83.33445: UDP, length 12
11:00:19.133306 IP 10.23.160.171.62180 > 216.167.31.83.33448: UDP, length 12
11:00:19.133492 IP 10.23.160.171.62180 > 216.167.31.83.33448: UDP, length 12
...and so on.

These connections goes every hour to three servers, every hour at the same time to the same servers:

ds80-237-192-98.dedicated.hosteurope.de: 80.237.192.98
15.telemaxx.net: 213.144.15.25
216.167.31.83 (no dns-entry found)

The source port varies between  45118-62180, the destination port varies between 33435-33449.

The ACC is behind an Upstream proxy and has no direct internet-connection. The upstream-proxy is not used for the above connections and I have no idea, what this is for.

Has anyone an explanation?

The ACC is the VMware-version, unmodified from Astaro.

Regards,
Manuel


This thread was automatically locked due to age.