# Unusual Traffic from Pritunl Server to Oracle IPs **URL:** \ **Category:** Pritunl VPN\ **Tags:** pritunl\ **Created:** [April 24, 2024, 8:44am UTC](https://forum.pritunl.com/t/unusual-traffic-from-pritunl-server-to-oracle-ips/2007 "2024-04-24T08:44:25Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![carlos](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/c/ecae2f/32.png) [@carlos](https://forum.pritunl.com/u/carlos)\ **Post date:** [April 24, 2024, 8:44am UTC](https://forum.pritunl.com/t/unusual-traffic-from-pritunl-server-to-oracle-ips/2007/1 "2024-04-24T08:44:25Z")
Hello Community, I recently noticed some unexpected traffic from my Pritunl server to Oracle IP addresses `129.158.247.162` and `129.213.195.176`. I only have Pritunl installed on this server, and I’m finding this behavior a bit unusual. Has anyone else experienced this? Is there any documentation or explanation that might cover why Pritunl would be communicating with these IPs? Thanks for any insights you might have! ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [April 25, 2024, 8:02pm UTC](https://forum.pritunl.com/t/unusual-traffic-from-pritunl-server-to-oracle-ips/2007/2 "2024-04-25T20:02:15Z")
One is `app.pritunl.com` this is used for the [**self shutdown system**](https://docs.pritunl.com/docs/security#self-shutdown-notification-system). If a vulnerability were found in the software specific versions can be notified to shutdown. This allows using the software without needing to monitor for security announcements. Vulnerable versions would automatically shutdown. This domain is also used for the license if a subscription is activated. The other is `app4.pritunl.com` and also `app6.pritunl.com` if IPv6 is enabled. These are used to automatically detect the public address of the server for the configuration.