Skip to main content
Solved

StopProc.vbs is trying to connect to some public IP addresses


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Commvault Certified Expert
  • 83 replies

Hello guys,

 

The Customer has noticed that the StopProc.vbs script that is based in C:\Program Files\Commvault\ContentStore\Base\StopProc.vbs is always trying to reach the following public IP addresses:

104.83.4.209

104.83.4.160 

104.87.169.183

Do you know, what these addresses are? Is it normal behaviour?

 

Rgds,

Kamil

 

Best answer by Mike Struening RETIRED

We have an answer:

I have the update from Development Team,

 

The VB script that we installed does not connect to any external website.

It only stops the local services. Development Team has highly recommended to check with Microsoft for the sites contacted.

It is possible that WScript.exe that is part of Windows OS is contacting these sites.

View original
Did this answer your question?

9 replies

Mike Struening
Vaulter
Forum|alt.badge.img+23

@Kamil W , that script is used to shutdown Media Agents:

https://documentation.commvault.com/11.26/expert/12598_restart_deduplication_database_mediaagent.html

Are those IPs from within their CommCell?


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • June 9, 2022

Hi Mike,

I have forwared you question to the Customer. I’ll let you know ASAP.

Rgds,

Kamil


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • June 13, 2022

Hi Mike,

I spoke to the Customer.

These addresses are outside of the CommCell (outside of the internal network)

Rgds,

Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+23

In that case, open a support incident.  Definitely sounds like it should be checked/verified.

Let me know the case number once you do.


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • June 14, 2022

Thanks Mike.

I will do.

Rgds,

Kamil


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • June 14, 2022

Mike Struening
Vaulter
Forum|alt.badge.img+23

Thanks, @Kamil W !


Forum|alt.badge.img+7
  • Vaulter
  • 62 replies
  • June 17, 2022

@Kamil W - The mentioned IPs resolve to Akamai and is a service that is used by Commvault.  

Additional information on the usage can be found here

https://documentation.commvault.com/11.24/expert/4787_external_urls_for_commvault_features.html

Usage:  Fetches Akamai server time to generate Akamai token.

I’m interested in how it was determined that the vbs script was performing the communication to akamai?  Do you have a log snippet (log name) showing that the script was making this call?  Since, this script performs a shutdown of services. 


Mike Struening
Vaulter
Forum|alt.badge.img+23

We have an answer:

I have the update from Development Team,

 

The VB script that we installed does not connect to any external website.

It only stops the local services. Development Team has highly recommended to check with Microsoft for the sites contacted.

It is possible that WScript.exe that is part of Windows OS is contacting these sites.


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings