This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Firefox rises dozen of connections

more options

Good day. Every time I open a webpage Firefox establishes dozen of tcp connections. As you can from the screenshot see there are 10 subnets where browser established connections to. Is that normal behaviour or my system is got infected somehow?

Good day. Every time I open a webpage Firefox establishes dozen of tcp connections. As you can from the screenshot see there are 10 subnets where browser established connections to. Is that normal behaviour or my system is got infected somehow?
Attached screenshots

Modified by DreamWalker32

All Replies (5)

more options

I don't know exactly what these are, but they don't look like normal traffic. Looking at http://www.ip-address.org/lookup/ip-locator.php, almost all of these are located in or near Russia, which is unusual. If you are near Russia (or possibly using a proxy) this would make sense, but otherwise you should definitely not be seeing this. Also, firefox shouldn't be establishing that many connections anyway.

I would suggest trying the steps found at Troubleshoot Firefox issues caused by malware, although I'm not sure how many of these are applicable to linux. Also, you have a plugin, "Videos 3.10.1 plugin", that sounds suspicious. Try disabling that and see if the problem goes away.

more options

user293 said

Also, you have a plugin, "Videos 3.10.1 plugin", that sounds suspicious. Try disabling that and see if the problem goes away.

Actually, nevermind, that's the VLC media player plugin

more options

user293 said

I don't know exactly what these are, but they don't look like normal traffic. Looking at http://www.ip-address.org/lookup/ip-locator.php, almost all of these are located in or near Russia, which is unusual. If you are near Russia (or possibly using a proxy) this would make sense, but otherwise you should definitely not be seeing this. Also, firefox shouldn't be establishing that many connections anyway. I would suggest trying the steps found at Troubleshoot Firefox issues caused by malware, although I'm not sure how many of these are applicable to linux. Also, you have a plugin, "Videos 3.10.1 plugin", that sounds suspicious. Try disabling that and see if the problem goes away.

Actually, yes, I opened russian web-resource. But even if I don't open russian web-sites up to 20 connections are also risen. I opened mortalkombat.com (definitely not russian) and retrieved AKAMAI, Google, Amazon, Canonical and EdgeCast subnets. I doubt they have something in common with NetherRealm stuidos. Moreover, same behaviour happens even when I use another browser (Chrome). Either we don't know the real reason why do browsers behave themselves in such a way, either my system is got infected somehow (despite of my Linux usage)! Nevertheless I have to check this on somebody's else system.

more options

Oh, this happens only when you open a webpage, not when you just open firefox?

If this only happens when you open websites, that's actually expected behavior, and not something you have to worry about. Most websites these days use a huge number of third-party websites to load content in order to make the website faster. Also, a lot of this comes from tracking companies and ad networks.

The Lightbeam addon shows you interactive graphs of these third party websites, which makes it a lot easier to understand.

Also, an adblocker, like uBlock, blocks a lot of the tracking and ad stuff.

more options

Unfortunately not. :( When I initially open a blank page it also happens, however the number of connections is much less (up to 5-7).

One thing I have noticed - connections are not durable; if I do nothing (don't open new pages/refresh current page) they vanish after a minute.

Modified by DreamWalker32