Why is my server always connecting to www.axigen.com?

1

Hi All

 Just got my server up and running for my family domain and so far love it.

I have a PiHole box blocking unwanted sites and tracking and see the server is constantly polling www.axigen.com why is this and can I stop it?

2

Hello Alan,

From my knowledge what you are seeing into the PiHole logs / interface should be in relation with the"updates" related information provided into the WebAdmin > Dashboard page.

Not sure why you are considering to block it but you may put it on your block list without any known dysfunctionalities into the core product.

BR,
Ioan

3

Thanks for the reply.
Not really looking to block it but its made 6210 requests in the last 8 hours, just seems excessive??

4

Hello Alan,

In this case (more than 6000 requests in the last 8 hours) it should be investigated more closely as for sure it is not the expected behavior.

Please let us know the Axigen version and OS you are using.

Also, please share the exact logs or a screen capture from PiHole interface so we could understand better your report.

Best regards,
Ioan

5

Hello

  This does seem to have calmed down now but still 1191 after I reset the counter yesterday.

Does this just happen initially?
I wasnt expecting it to poll axigen.com at all really so just trying to make sure its not relaying emails or data.

Axigen version 10.5.19
Linux - debian 12.5

Cheers
Alan

Screenshot 2024-05-09 07.47.46
Screenshot 2024-05-09 07.47.461920×1080 288 KB

6

Screenshot 2024-05-09 07.47.30
Screenshot 2024-05-09 07.47.301920×1080 367 KB

7

Hello Alan,

Could you please confirm if on May 8th, at 13:34 you have logged-in on the WebAdmin interface?

Also, could you please confirm the IP address of the Axigen server?
From your screenshot we see 5 different client IP addresses and we should filter only the one generated by your server.

My proposal is like this:
1/ restart Axigen - so any possible WebAdmin sessions will be disconnected
2/ do not login into WebAdmin for at least 1-2 days
3/ check PiHole interface for any DNS or HTTPS requests related to www.axigen.com initiated from the IP address of the Axigen server during the WebAdmin “inactivity” period.

HTH,
Ioan

PS: we are confirming that we are not “exfiltrating” any data from Axigen systems without admin knowledge (everything should be documented into EULA) but we like to continue to investigate this report just to have a clear picture of what is happening on your system.

8

Thanks for the reply

Understand and will revert in a few days

Regards
Alan

9

This has totally dropped off in the last 24hrs, thankyou for your help.

So we assume this is calls to you from the webadmin tool?

10

Without any additional information the conclusion is that the requests you seen in PiHole for www.axigen.com AND generated from the client IP address = <axigen.server.ip.address> are in relation with the login events into your WebAdmin interface / any further display of the Dashboard page (where details about available “updates” are listed).

HTH,
Ioan