Unbound-Control.exe outgoing connections

Unbound
1

Hi, Has anyone any idea of why on rare occasions Unbound-control.exe wants
to make the connection detailed below?

They pop up at random times and for do apparent reasons. I thought this
program was (mainly) to control the local instance.

Thanks

Outgoing connection - TCP(6)
Dublin, Ireland
Application: unbound-control.exe
Process ld: Process 10956
Local Address: <My IPv4 address> Port 56817 Remote Address: 20.54.24,148
Port 443 Whois

2

I can't explain why unbound-control would want to make that connection. I would expect a windows machine to make that kind of connection though as it's something to do with Microsoft updates.

Specifically array612.prod.do.dsp.mp.microsoft.com resolves to the IP address 20.54.24.148

From https://learn.microsoft.com/en-us/windows/privacy/manage-windows-11-endpoints

The following endpoints are used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads won't be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network won't use peer devices for bandwidth reduction. TLSv1.2/HTTPS/HTTP *.prod.do.dsp.mp.microsoft.com

3

Here is another example that has just popped up.

I use Netlimiter (https://www.netlimiter.com/) to ask about all outgoing
connections then I I agree with what is being asked for I allow it and it
will work without issue from then on.

I have purposely left the setting as ask as I wanted to capture as many
instances as possible I could select deny and I would never get that popup
again.

I am hoping this will be useful at some point. The process ID no longer
exists in my system. I will take a look next time it pops up, that may shed
some more light.

Outgoing connection - TCP(6)
From
Unbound Remote Control Tool
services.gfe.nvidia.com
To
London, United Kingdom of Great Britain and Northern Ireland
Application:
Process ld:
Local Address:
Remote Address:
unbound-control.exe
Process 14668
<My IPv4 address> Port 56914
152.199.20.80 Port: 443 Whois

RayG

4

Interesting thought, but that last one does not look like WU. services.gfe.nvidia.com

I’ll drop an email to NL support and see if they have an explanation.