# Tracking Syncthing with Little Snitch

**URL:** https://forum.syncthing.net/t/tracking-syncthing-with-little-snitch/15881
**Category:** Support
**Created:** [November 14, 2020, 7:02pm UTC](https://forum.syncthing.net/t/tracking-syncthing-with-little-snitch/15881 "2020-11-14T19:02:08Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![bosshoss\_16](https://forum.syncthing.net/letter_avatar_proxy/v4/letter/b/fbc32d/32.png) [@bosshoss\_16](https://forum.syncthing.net/u/bosshoss_16)
#### Post date: [November 14, 2020, 7:02pm UTC](https://forum.syncthing.net/t/tracking-syncthing-with-little-snitch/15881/1 "2020-11-14T19:02:08Z")

</div>

Hello, I am using Snycthing on my MacOS Big Sur to sync internal computers only. I just reinstalled Little Snitch and I noticed that Snycthing is reaching out to domains and IPs all over the world. Some of the domains are aebc[dot]com, sipgate[dot]com, callwithus[dot]com, and xten[dot]com.

Can anyone help me understand why this is happening? I am attempting to learn something new by playing with Little Snitch.

Thank you.

---

<div class="post-metadata">

### Author: ![Nummer378](https://forum.syncthing.net/user_avatar/forum.syncthing.net/nummer378/32/5958_2.png) [@Nummer378](https://forum.syncthing.net/u/Nummer378)
#### Post date: [November 14, 2020, 7:18pm UTC](https://forum.syncthing.net/t/tracking-syncthing-with-little-snitch/15881/2 "2020-11-14T19:18:01Z")

</div>

Most of these are relays:

> [@Syncthing established an outgoing connection on port 22](https://forum.syncthing.net/t/syncthing-established-an-outgoing-connection-on-port-22/12538):
>
> I’m setting up a new computer and my firewall Little Snitch let me know that Syncthing established an outgoing TCP connection on port 22 (see attached screenshot). I understand that Syncthing establishes lots of connections for the relay functionality, but port 22 looks very strange, as I would expect to use the upper ports to avoid requiring privileged credentials. I installed syncthing using Homebrew. Is this normal or am I being hacked? The connection is outgoing but I’m still a little par…

Sipgate is a VOIP provider which may be related to syncthings STUN feature.

---

<div class="post-metadata">

### Author: ![system](https://forum-uploads.syncthingcdn.net/original/2X/0/0b50e0a202b22ae6a67190759e8c868805b8ed9f.png) [@system](https://forum.syncthing.net/u/system)
#### Post date: [December 14, 2020, 7:18pm UTC](https://forum.syncthing.net/t/tracking-syncthing-with-little-snitch/15881/3 "2020-12-14T19:18:01Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
