Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Daily Executive Report

I am using Astaro Firmware Version: 7.005 and everyday when I look at my Daily Executive Report I am always seeing the same items under the Top 10 Servers list, what are they being used for can someone maybe explain to me?  Is the astaro gateway using these for a purpose?:

 IP;                     Hostname;          Packets;  Traffic;      % of total;

213.144.15.5;      15.telemaxx.net;      57.476;     43.2 MB;     42.87 %
69.10.147.76;  unknown.rackforce.com;  48.809;         37.9 MB;         37.65 %
128.121.10.115;             n/a;                  22.035;         16.3 MB;         16.22%
209.97.208.98;              n/a;           14.362;  1.2 MB;          1.18 %
69.10.147.75;  unknown.rackforce.com;   1.193;          157.9 KB;        0.15 %
128.121.10.116;               n/a;           1.104;    154.7 KB;        0.15 %
213.144.15.6;         imap.astaro.com;       996;       143.8 KB;      0.13 %

     Also under the Top 10 Services I noticed this one from day to day:

Service Name; Protocol;  Service Port;  Connections;  Traffic;    % of total;

        X11;     TCP;            6000;              2.267;  345.2 KB;     0.33 %

     I looked this service up, some folks say possible trojan?  I am not sure completely, but I know I am paranoid about keeping my system clean on a daily basis, etc.
     Anyone have any ideas on all of this stuff, maybe they can compare it with their reports and let me know if they see any of the same things?

Thanks.


This thread was automatically locked due to age.
Parents
  • Mostly up2date server addresses:

                'Ip' => '213.144.15.5',
                'Host' => 'v7up2date3.astaro.com',

                'Ip' => '213.198.93.249',
                'Host' => 'v7up2date1.astaro.com',

                'Ip' => '128.121.10.115',
                'Host' => 'v7up2date5.astaro.com',

                'Ip' => '128.242.114.243',
                'Host' => 'v7up2date4.astaro.com',

                'Ip' => '69.10.147.76',
                'Host' => 'v7up2date2.astaro.com',

                'Ip' => '218.213.238.229',
                'Host' => 'v7up2date6.astaro.com',

    Those hostnames do not necessarily map to the same IP addresses every time, but it should give you a hint about the networks used.

    209.97.208.98 is www.astaro.org  [:)]

    Cheers,
     andreas
  • Mostly up2date server addresses:


    Ahh I see, thanks for the information.  I was hoping it was something along those lines.
Reply Children
No Data