Ask Your Question
2

What is 152.19.134.142 at fedora project on UNC, North Carolina?

asked 2017-04-17 18:30:25 -0600

My Bro security system that I run on my fedora 25 work station reports 152.19.134.142 connected to port 80(http). Note this connection is reported even though I am not running a web browser at the time. What is going on? This IP address is at UNC in the Fedora Project.

edit retag flag offensive close merge delete

Comments

Thank you - I tried connection to 152.19.134.142 with http and received the following error message, "The owner of 152.19.134.142 has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website." Also 209.132.181.15 at fedora project on UNC stays connected as well.

rothauserch gravatar imagerothauserch ( 2017-04-18 07:49:31 -0600 )edit

2 Answers

Sort by ยป oldest newest most voted
2

answered 2017-04-17 19:20:00 -0600

sideburns gravatar image

Welcome to ask.fedora! Please note that as a new user, all of your posts are moderated, meaning that they won't show up until a moderator approves it; that means that if you repeat your post because it didn't show up, all that happens is that a moderator will reject the duplicate. (One of the forum rules is, "One question per issue," but there's no punishment involved.)

As for your question, nslookup 152.19.134.142 reveals that the machine's canonical name is vm3.fedora.ibiblio.org and whois shows that it's owned by the University of North Carolina at Chapel Hill. My guess is that it's the home to a mirror of one of the Fedora repositories, but I can't tell you why it's connecting to your computer over Port 80. Is the connection sending data, receiving it or both?

It's quite possible that this is being caused by some sort of package management systems looking for updates, but I'm not sure, right now, as to how to find out for sure.

edit flag offensive delete link more
1

answered 2017-04-18 10:19:31 -0600

florian gravatar image

This is a Fedora mirror and either

  1. dnf is connecting to it in the background to refresh package information, or
  2. Gnome Software (packagekit) is connecting to it in the background to refresh package information, or
  3. all of the above

More information:

edit flag offensive delete link more

Comments

Thank you for that information - http is a strange service for DNF to use though

rothauserch gravatar imagerothauserch ( 2017-04-19 07:07:41 -0600 )edit

Offtopic, but why do you think DNF using http is strange?

florian gravatar imageflorian ( 2017-04-19 11:36:09 -0600 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2017-04-17 18:30:25 -0600

Seen: 89 times

Last updated: Apr 18 '17