Nextcloud version (eg, 18.0.2):
Operating system and version (eg, Ubuntu 18.04):
nginx version 1.14
PHP version 7.4
Hello Everyone,
I am pretty new to NextCloud. I installed new instance yesterday on Ubuntu 18.04. So far its working great. Today i configured a backup and while i was testing connection to my NAS (where backup will be copied) i noticed that nextcloud was talking to some strange IP’s. Some of them are in Italy.
When i ran netstat -cpat or iftop i noticed that is connecting to few strange IP addresses. Is this normal or expected?
nextcloud => _gateway 0b 3.23Kb 2.41Kb
<= 0b 312b 476b
nextcloud => host45-112-static.97-5-b.business.telecomit 176b 35b 9b
<= 320b 64b 16b
nextcloud => host14-39-61-217.static.dns-aruba.cloud 176b 35b 53b
<= 0b 0b 8b
nextcloud => host24-39-61-217.static.dns-aruba.cloud 176b 35b 53b
<= 0b 0b 8b
nextcloud => resolver1.opendns.com 0b 0b 98b
<= 0b 0b 167b
nextcloud => host-5-97-112-112.business.telecomitalia.it 0b 0b 9b
<= 0b 0b 16b
nextcloud => host-5-97-112-166.business.telecomitalia.it 0b 0b 9b
<= 0b 0b 16b
nextcloud => host-5-97-112-169.business.telecomitalia.it 0b 0b 9b
<= 0b 0b 16b
nextcloud => host186-112-static.97-5-b.business.telecomi 0b 0b 9b
<= 0b 0b 16b
nextcloud => host25-39-61-217.static.dns-aruba.cloud 0b 0b 9b
<= 0b 0b 0b
nextcloud => host-5-97-112-224.business.telecomitalia.it 0b 0b 9b
<= 0b 0b 0b
netstat output:
tcp 0 0 nextcloud:https 5.97.112.247:16543 SYN_RECV -
tcp 0 0 nextcloud:http 5.97.112.254:11340 SYN_RECV -
tcp 0 0 nextcloud:http 5.97.112.232:50547 SYN_RECV -
tcp 0 0 nextcloud:https 217.61.47.18:22498 SYN_RECV -
tcp 0 0 nextcloud:https 217.61.47.1:33951 SYN_RECV -
tcp 0 0 nextcloud:http 217.61.39.7:pipe-server SYN_RECV -
tcp 0 0 nextcloud:http 217.61.46.15:19636 SYN_RECV -
tcp 0 0 nextcloud:https 217.61.39.10:30511 SYN_RECV -
tcp 0 0 nextcloud:https _gateway:50746 TIME_WAIT -
tcp 0 0 nextcloud:http 217.61.47.0:2941 SYN_RECV -
tcp 0 0 localhost:57110 localhost:6379 TIME_WAIT -
tcp 0 0 localhost:57118 localhost:6379 TIME_WAIT -
IP’s that worry me are 5.97.112.232 or 217.61.39.10. Any idea if this is expected or how to find out what is causing it?
Thanks in advance!