i noticed constant (24/7) traffic from my freepbx instance to Ip address 18.104.22.168:80.
I could not find any information about that ip (except is does not belong to my provider) online.
I did not add any Plugins or modules to the installation.
Does anybody know what this ip belongs to? Is this part of freepbx or is it something i should worry about?
whois -h whois.cymru.com ' -v 22.214.171.124' AS | IP | BGP Prefix | CC | Registry | Allocated | AS Name 9211 | 126.96.36.199 | 188.8.131.52/20 | DE | ripencc | 2005-10-06 | WORK-AS [email protected] Internet Informationssysteme GmbH, DE
That’s what i found out by googling the ip. But as far as i found out, this company has nothing to do with my provider (German Telekom). So Why should freepbx connect to that?
Well, we see a conversation going on but from your post, “You started it at line 1”
tcpdump -s 0 -AX 'tcp dst port 80 and host 184.108.40.206'
would be a little more diagnostic.
now replace dst with src (or remove it) to get the responses
I found the answer to “who is this ip”:
someone added a radio webstream as holdmusik. A dns lookup of the stream address showed 220.127.116.11. That explains the unreadable http responses.
Thanks for your Help @dicko
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.