Forum Discussion
notlob
Jul 19, 2021Copper Contributor
Strange Traffic - MS Edge to AWS Destination
My firewall logs show where MS Edge has tried to make TCP connections outbound to port 9573. The destination hosts are AWS IPs (EC2s) e.g. 18.209.11[.]79 . I was able to narrow it down to process ID 4852 as seen in snips - that process ID points to the Network Service. I was either on Version 91.0.864.70, or earlier - I'm not sure if my Edge has upgraded since last week.
Can anyone say what might have caused this?
- Reza_AmeriSilver ContributorAre you sure it was created from the Microsoft Edge?
Have you checked any website?
Check installed extensions in the Microsoft Edge and this connection might be from extension.- notlobCopper Contributor
As the snips show, it does seem to have come from Edge - based on the process ID.
There are no installed extensions here since this is newly imaged VM - very stock.
I'm not sure what you mean by checking a website. Please expound.