Access to port 80 at cpupdate.mosaicdataservices.com

Answered

eitanc

• November 20, 2023 12:22

Hello, I try to harden the outbound communication from my CP server and I see it access cpupdate.mosaicdataservices.com at port 80, non secure HTTP, hence Downloads | cPanel, Inc. IPs: 185.125.185.32, Downloads | cPanel, Inc. (the formal resolve to the above FQDN) 110.232.143.226, Downloads | cPanel, Inc. (no PTR) 185.15.22.168, Downloads | cPanel, Inc. (168.22.15.185.servers.pt) 27.50.85.8, Downloads | cPanel, Inc. (cpanel.mirror.serversaustralia.com.au) 103.17.8.8, Downloads | cPanel, Inc. (103-17-8-8.static.ip.net.tw) ... and I guess there are more It happens about every one minute, to several of these IP on a row. Why is that? What is the use of this access? why not using HTTPS?

• 

  Benjamin D.

  • July 12, 2024 22:11

  Same in WHM 120

  0
• 

  William Del Piero cPanel Staff

  • July 13, 2024 13:28

  Hi,

   

  It seems that this is expected behavior as cpupdate.mosaicdataservices.com resolves to the same IP address as httpupdate.cpanel.net, which uses port 80 for connections during cPanel updates:

   

  What cPanel IPs do my cPanel servers need to connect to

   

  We use GPG keys to secure this connection, so port 443 shouldn't be necessary to use in this case:

   

  Download Security

   

   

  0
• 

  Benjamin D.

  • July 13, 2024 13:29

  Got it, thanks.

  0

Please sign in to leave a comment.