Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Suspected connection between our hosted server and atlassian server

The rkhunter was detected a suspect connection between our hosted confluence and an external server as described below :

Warning: Network TCP port 60922 is being used by /home/confluence/atlassian/confluence/jre/bin/java. Possible rootkit: zaRwT.KiT

The netstat commande give us a connexion between MYIP:60922 and

It is normal ??

1 answer

0 votes
Shannon Atlassian Team Sep 27, 2019

Hello @smsmode,

Welcome to Atlassian Community. It's nice to have you. 

Confluence Server doesn't use port 60922, but I did a search on the error message and that port, and I found some resources online talking about that error message along with rkhunter, and about how the message was a false alarm for them.

Here is one example:

I'm not familiar with rkhunter myself, but perhaps the same is true for the message you're getting?

For a comprehensive list of ports used by Atlassian applications have a look below:

Let us know if you have any questions about this.



Suggest an answer

Log in or Sign up to answer
Community showcase
Published in Jira

Do you use Jira Cloud with Microsoft Teams?

Hi, Jira users! Do you use Jira alongside Microsoft Teams? We want to hear how you’ve used the power of Jira Cloud and Microsoft Teams (via the Jira Cloud for Microsoft Teams app) to achieve a team...

125 views 1 5
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you