Hello! I'm not an expert, but you should be able to check processes which originate this connection with something like:
netstat -tulnp ss -tulnp Also this walk through blog post seems to be relevant to your situation: https://hacklido.com/blog/233-investigating-unknown-ports-and-services-on-linux-system D. On July 25, 2024 2:04:47 AM GMT+02:00, "A. F. Cano via Freedombox-discuss" <[email protected]> wrote: > >Hi, > >This is similar to the unexplained traffic I had noticed before to/from >the coturn app, but it is now disabled. It is happening (per iftop) >to/from this address and port: > >pool-108-50-237-254.nwrknj.fios.verizon.net:50983 > >but no useful informationg comes out of a search. > >This is what iftop says: > >c-XX-XX-XXX-XXX.hsd1.nj.comcast.net:https => >pool-108-50-237-254.nwrknj.fios.verizon.net:50983 > 35.4Kb 38.3Kb 36.2Kb > <= 25.9Kb 26.6Kb 25.1Kb > >I'm not running anything that justifies this level of I/O. Does anyone >have any idea what this might be and how to stop it? I realize it says >https so it might be one of the many tabs I have open in multiple >browsers, but I'd certainly like to know what information is being sent. >I certainly did not explicitly connect to that "pool" site. The >anonymized XX-XX-XXX_XXX address is the address of the primary interface >of the FreedomBox. > >Thanks. > >Augustine > >_______________________________________________ >Freedombox-discuss mailing list >[email protected] >https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss
_______________________________________________ Freedombox-discuss mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss
