Skip to main content
Answer

StopProc.vbs is trying to connect to some public IP addresses

  • June 7, 2022
  • 9 replies
  • 464 views

Kamil W
Certified Expert
Forum|alt.badge.img+10

Hello guys,

 

The Customer has noticed that the StopProc.vbs script that is based in C:\Program Files\Commvault\ContentStore\Base\StopProc.vbs is always trying to reach the following public IP addresses:

104.83.4.209

104.83.4.160 

104.87.169.183

Do you know, what these addresses are? Is it normal behaviour?

 

Rgds,

Kamil

 

Best answer by Mike Struening

We have an answer:

I have the update from Development Team,

 

The VB script that we installed does not connect to any external website.

It only stops the local services. Development Team has highly recommended to check with Microsoft for the sites contacted.

It is possible that WScript.exe that is part of Windows OS is contacting these sites.

9 replies

Mike Struening
Vaulter
Forum|alt.badge.img+22

@Kamil W , that script is used to shutdown Media Agents:

https://documentation.commvault.com/11.26/expert/12598_restart_deduplication_database_mediaagent.html

Are those IPs from within their CommCell?


Kamil W
Certified Expert
Forum|alt.badge.img+10
  • Author
  • Certified Expert
  • June 9, 2022

Hi Mike,

I have forwared you question to the Customer. I’ll let you know ASAP.

Rgds,

Kamil


Kamil W
Certified Expert
Forum|alt.badge.img+10
  • Author
  • Certified Expert
  • June 13, 2022

Hi Mike,

I spoke to the Customer.

These addresses are outside of the CommCell (outside of the internal network)

Rgds,

Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+22

In that case, open a support incident.  Definitely sounds like it should be checked/verified.

Let me know the case number once you do.


Kamil W
Certified Expert
Forum|alt.badge.img+10
  • Author
  • Certified Expert
  • June 14, 2022

Thanks Mike.

I will do.

Rgds,

Kamil


Kamil W
Certified Expert
Forum|alt.badge.img+10
  • Author
  • Certified Expert
  • June 14, 2022

Here you go, @Mike Struening 

https://ma.commvault.com/Case/Details/220614-168

Rgds,

Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+22

Thanks, @Kamil W !


Forum|alt.badge.img+7
  • Vaulter
  • June 17, 2022

@Kamil W - The mentioned IPs resolve to Akamai and is a service that is used by Commvault.  

Additional information on the usage can be found here

https://documentation.commvault.com/11.24/expert/4787_external_urls_for_commvault_features.html

Usage:  Fetches Akamai server time to generate Akamai token.

I’m interested in how it was determined that the vbs script was performing the communication to akamai?  Do you have a log snippet (log name) showing that the script was making this call?  Since, this script performs a shutdown of services. 


Mike Struening
Vaulter
Forum|alt.badge.img+22

We have an answer:

I have the update from Development Team,

 

The VB script that we installed does not connect to any external website.

It only stops the local services. Development Team has highly recommended to check with Microsoft for the sites contacted.

It is possible that WScript.exe that is part of Windows OS is contacting these sites.