"
Hi @alex_62450,
I had the same issue and tried to find the source of those connection attempts (ports 22,80,5353 to many LAN hosts).
It seems to be caused by ntopng 'Active Discovery' (Settings -> Preferences -> Network Discovery -> "Active Network Discovery" (ntopng v6.4, OPNsense 26.1.1)).
The frequency of these requests have been 15 minutes, which aligns with the setting I had (doing the check every 15 mins). Since I disabled the "Active Network Discovery", the connection requests vanished.
BTW– even though this does not fully relate, but might be helpful for others hunting similar topics: At least for me, dtrace hasn't been working, which prevented me to track the actual socket creation tracking.
HTH
BR
I had the same issue and tried to find the source of those connection attempts (ports 22,80,5353 to many LAN hosts).
It seems to be caused by ntopng 'Active Discovery' (Settings -> Preferences -> Network Discovery -> "Active Network Discovery" (ntopng v6.4, OPNsense 26.1.1)).
The frequency of these requests have been 15 minutes, which aligns with the setting I had (doing the check every 15 mins). Since I disabled the "Active Network Discovery", the connection requests vanished.
BTW– even though this does not fully relate, but might be helpful for others hunting similar topics: At least for me, dtrace hasn't been working, which prevented me to track the actual socket creation tracking.
HTH
BR
