Tracking Syncthing with Little Snitch

[bosshoss_16 (Marc)]

Hello, I am using Snycthing on my MacOS Big Sur to sync internal computers only. I just reinstalled Little Snitch and I noticed that Snycthing is reaching out to domains and IPs all over the world. Some of the domains are aebc[dot]com, sipgate[dot]com, callwithus[dot]com, and xten[dot]com.

Can anyone help me understand why this is happening? I am attempting to learn something new by playing with Little Snitch.

Thank you.

[Nummer378 (Max)]

Most of these are relays:

Syncthing established an outgoing connection on port 22

I’m setting up a new computer and my firewall Little Snitch let me know that Syncthing established an outgoing TCP connection on port 22 (see attached screenshot). I understand that Syncthing establishes lots of connections for the relay functionality, but port 22 looks very strange, as I would expect to use the upper ports to avoid requiring privileged credentials. I installed syncthing using Homebrew. Is this normal or am I being hacked? The connection is outgoing but I’m still a little par…

Sipgate is a VOIP provider which may be related to syncthings STUN feature.