Umm...

For reasons unrelated to this post, I was just perusing the results of 'netstat-atn', when I noticed a connection to an unfamiliar IP. whois told me it belongs to a British coding bootcamp named Datacamp. I have no connection as either customer or employee to said site. Down the rabbit hole I went.

I couldn't find an app listening for it (port 57852) from either ss or lsof; so I decided KDE might have some behind-the-scenes weird telemetry going on. I logged out and into XFCE and netstat came up shorn of the connection. (That fact doesn't indict KDE, it could have snuck on from any web site.)

To be thorough, I went to speedguide.net to see what the port was used for. It turns out to be used by Logitech firmware (I run an MX575 trackball and a wireless keyboard).

So - why was my firmware communicating to a British commercial web site?!