unusual activity

General
1

Hello, I’ve been using Syncthing for around years. simply love it and works great.

Last week I noticed some unusual activity. My main Syncthing device is sending and receiving large amounts of data.

i.e. I saw this on my firewall

outbound to 206.190.135.76 - sent 108GB on port 22067, received 308MB - duration 30 hours

outbound to 162.246.157.114 - sent 98.42GB on port 443, received 877MB - duration 4.9 days

inbound to my device - received 179.94GB on port 22067, sent 500MB - duration 2.1 days

inbound to my device - received 101.67GB on port 443, sent 1.1GB - duration 6.1 days

outbound to 104.131.145.187 - sent 72.34GB on port 22067, received 193MB - duration 4.9 days

I dont have such a large folders. I never saw this type of behavior before. Can you please help me figure out what is generating this traffic

thanks, –emax

2

Syncthing is uses relays when it can’t connect directly. 22067 is the port used by a relay.

https://docs.syncthing.net/users/relaying.html#relaying

3

Thanks Audrius, I was reading about relays using port 22067. Is it possible to figure out what devices are using these relays and which folders?

4

Folders don’t have separate connections, devices do, check the logs, they print what address was used to connect.