# Sensu-backend connecting out to us-west-2.compute.amazonaws.com

**URL:** <https://discourse.sensu.io/t/sensu-backend-connecting-out-to-us-west-2-compute-amazonaws-com/3074>\
**Category:** Sensu Go\
**Created:** [February 6, 2023, 7:35am UTC](https://discourse.sensu.io/t/sensu-backend-connecting-out-to-us-west-2-compute-amazonaws-com/3074 "2023-02-06T07:35:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![madhatter22](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.sensu.io/madhatter22/32/686_2.png) [@madhatter22](https://discourse.sensu.io/u/madhatter22)\
**Post date:** [February 6, 2023, 7:35am UTC](https://discourse.sensu.io/t/sensu-backend-connecting-out-to-us-west-2-compute-amazonaws-com/3074/1 "2023-02-06T07:35:39Z")

</div>

## Description of your problem

On a fresh install of sensu-backend, I see a TCP connection from sensu-backend out to an external IP address

```auto
root@sensu-backend:/home/ubuntu# lsof -i -n -P | grep sensu
sensu-bac 5529 sensu 7u IPv4 53006 0t0 TCP 127.0.0.1:2380 (LISTEN)
sensu-bac 5529 sensu 8u IPv4 53007 0t0 TCP 127.0.0.1:2379 (LISTEN)
sensu-bac 5529 sensu 12u IPv4 53022 0t0 TCP 127.0.0.1:50562->127.0.0.1:2379 (ESTABLISHED)
sensu-bac 5529 sensu 14u IPv4 53023 0t0 TCP 127.0.0.1:2379->127.0.0.1:50562 (ESTABLISHED)
sensu-bac 5529 sensu 15u IPv4 53025 0t0 TCP 127.0.0.1:50564->127.0.0.1:2379 (ESTABLISHED)
sensu-bac 5529 sensu 16u IPv4 53026 0t0 TCP 127.0.0.1:2379->127.0.0.1:50564 (ESTABLISHED)
sensu-bac 5529 sensu 18u IPv6 53051 0t0 TCP *:8080 (LISTEN)
sensu-bac 5529 sensu 19u IPv6 53053 0t0 TCP *:8081 (LISTEN)
sensu-bac 5529 sensu 20u IPv6 53055 0t0 TCP *:3000 (LISTEN)
sensu-bac 5529 sensu 22u IPv4 54433 0t0 TCP 10.3.3.27:51320->35.155.39.192:443 (ESTABLISHED)

```

The last connection to 35.155.39.192 looks suspicious, a reverse DNS lookup gives  
`ec2-35-155-39-192.us-west-2.compute.amazonaws.com`

I searched the sensugo docs and googled it as best I could but couldn’t find anything, I looked in the logs - couldn’t see anything there.

Should I be worried? Is this normal? Can I stop it?

## Environmental information

### Operating system information

`<!--Please select the operating system that you're using Sensu Go on-->`

Ubuntu 22.04

### Package versions

`<!--Please provide the package versions for all installed Sensu Go, Etcd, and PostgreSQL packages-->`

Sensu Go: 6.9.1+ee

### Plugin information

`<!--If you're having an issue with a plugin, please use the following section to provide additional details-->`

No plugins installed

---

<div class="post-metadata">

**Author:** ![justinhenderson](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.sensu.io/justinhenderson/32/1035_2.png) [@justinhenderson](https://discourse.sensu.io/u/justinhenderson)\
**Post date:** [February 6, 2023, 5:14pm UTC](https://discourse.sensu.io/t/sensu-backend-connecting-out-to-us-west-2-compute-amazonaws-com/3074/2 "2023-02-06T17:14:52Z")

</div>

Hey @madhatter22 👋

Your Sensu backend is connecting to Tessen, which is documented [here](https://docs.sensu.io/sensu-go/latest/operations/monitor-sensu/tessen/):

_Tessen is the Sensu call-home service. It is enabled by default on Sensu backends. Tessen sends anonymized data about Sensu instances to Sensu Inc., including the version, cluster size, number of events processed, and number of resources created (like checks and handlers). We rely on Tessen data to understand how Sensu is being used and make informed decisions about product improvements._

 ![image](https://us1.discourse-cdn.com/flex016/uploads/sensu/original/1X/4f0209068858fb51e109ea0be22edaadd28ea052.png)

This can be disabled as noted in the docs, but does provide good, anonymized, information for future product improvements

Best,

Justin

---

<div class="post-metadata">

**Author:** ![madhatter22](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.sensu.io/madhatter22/32/686_2.png) [@madhatter22](https://discourse.sensu.io/u/madhatter22)\
**Post date:** [February 7, 2023, 11:41pm UTC](https://discourse.sensu.io/t/sensu-backend-connecting-out-to-us-west-2-compute-amazonaws-com/3074/3 "2023-02-07T23:41:18Z")

</div>

Hi Justin,

Thanks, that makes sense - I couldn’t find it in the docs when I searched but glad to know its expected behaviour.

Regards,  
Grant.

---

<div class="post-metadata">

**Author:** ![justinhenderson](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.sensu.io/justinhenderson/32/1035_2.png) [@justinhenderson](https://discourse.sensu.io/u/justinhenderson)\
**Post date:** [February 9, 2023, 5:27pm UTC](https://discourse.sensu.io/t/sensu-backend-connecting-out-to-us-west-2-compute-amazonaws-com/3074/4 "2023-02-09T17:27:00Z")

</div>

Hey Grant,

Glad to help. Also want to let you know, based on this conversation, I’ve requested an update to the docs to try and bring a bit more light to the dark where Tessen is concerned.

Best,

Justin
