Forum Discussion

notlob's avatar
notlob
Copper Contributor
Jul 19, 2021

Strange Traffic - MS Edge to AWS Destination

My firewall logs show where MS Edge has tried to make TCP connections outbound to port 9573. The destination hosts are AWS IPs  (EC2s) e.g.  18.209.11[.]79 . I was able to narrow it down to process ID 4852 as seen in snips - that process ID points to the Network Service. I was either on Version 91.0.864.70, or earlier - I'm not sure if my Edge has upgraded since last week.

 

Can anyone say what might have caused this?

 

 

 

 

  • Reza_Ameri's avatar
    Reza_Ameri
    Silver Contributor
    Are you sure it was created from the Microsoft Edge?
    Have you checked any website?
    Check installed extensions in the Microsoft Edge and this connection might be from extension.
    • notlob's avatar
      notlob
      Copper Contributor

      Reza_Ameri 

      As the snips show, it does seem to have come from Edge - based on the process ID.

      There are no installed extensions here since this is newly imaged VM - very stock.

      I'm not sure what you mean by checking a website. Please expound.

Resources