Privacy and Security - Strange Log Entries

I was reviewing my logs and saw these three errors.

Each is my server trying to connect to external websites.

Problem:

  • I have no bookmarks to these websites

  • This instance of nextcloud is a test account and only has 1 user (me) … and I didn’t go to these sites.

Any ideas?

Blockquote GuzzleHttp\Exception\ConnectException: cURL error 28: Connection timed out after 30001 milliseconds (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for http://www.edri.org/

Blockquote GuzzleHttp\Exception\ConnectException: cURL error 28: Connection timed out after 30001 milliseconds (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for http://www.eff.org/

Blockquote GuzzleHttp\Exception\ConnectException: cURL error 28: Failed to connect to www.startpage.com port 80: Connection timed out (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for http://www.startpage.com/

***** BREAK

Here’s an example of the error:

GuzzleHttp\Handler\CurlFactory::createRejection()

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlFactory.php - line 110:

GuzzleHttp\Handler\CurlFactory::finishError()

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlHandler.php - line 47:

GuzzleHttp\Handler\CurlFactory::finish()

/var/www/nextcloud/lib/private/Http/Client/DnsPinMiddleware.php - line 146:

GuzzleHttp\Handler\CurlHandler->__invoke()

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php - line 35:

OC\Http\Client\DnsPinMiddleware->OC\Http\Client{closure}(“*** sensiti … *”)

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php - line 31:

GuzzleHttp\PrepareBodyMiddleware->__invoke()

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/RedirectMiddleware.php - line 71:

GuzzleHttp\Middleware::GuzzleHttp{closure}(“*** sensiti … *”)

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php - line 63:

GuzzleHttp\RedirectMiddleware->__invoke()

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/HandlerStack.php - line 75:

GuzzleHttp\Middleware::GuzzleHttp{closure}(“*** sensiti … *”)

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php - line 331:

GuzzleHttp\HandlerStack->__invoke()

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php - line 168:

GuzzleHttp\Client->transfer()

/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php - line 187:

GuzzleHttp\Client->requestAsync()

/var/www/nextcloud/lib/private/Http/Client/Client.php - line 223:

GuzzleHttp\Client->request()

/var/www/nextcloud/apps/settings/lib/Controller/CheckSetupController.php - line 179:

OC\Http\Client\Client->get()

/var/www/nextcloud/apps/settings/lib/Controller/CheckSetupController.php - line 162:

OCA\Settings\Controller\CheckSetupController->isSiteReachable()

/var/www/nextcloud/apps/settings/lib/Controller/CheckSetupController.php - line 746:

OCA\Settings\Controller\CheckSetupController->hasInternetConnectivityProblems()

/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php - line 217:

OCA\Settings\Controller\CheckSetupController->check()

/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php - line 126:

OC\AppFramework\Http\Dispatcher->executeController()

/var/www/nextcloud/lib/private/AppFramework/App.php - line 156:

OC\AppFramework\Http\Dispatcher->dispatch()

/var/www/nextcloud/lib/private/Route/Router.php - line 302:

OC\AppFramework\App::main()

/var/www/nextcloud/lib/base.php - line 1006:

OC\Route\Router->match()

/var/www/nextcloud/index.php - line 36:

OC::handleRequest()

This would indicate this is a core feature to check whether the Nextcloud instance has internet access.