My stats.pl seems to be the #1 load on my server, typically about 2-4%. Not such a problem by itself, but I’m wondering what all these random connections to the open port 555 are from outside? I always have 3-4 connections to port 555 from the outside, and they look like bots and other things.
Why is port 555 open? What external, unauthenticated service is stats.pl providing? I can connect from outside, but it doesn’t seem like it’s talking HTTP. But why is it open at all?
It’s not used locally, unless you’re running your browser on the server. A WebSocket connection is made from your browser to the Webmin system to stream the data for the moving graphs.
I would like to see its footprint reduced, though. It’s too big for what it does, but I don’t see obvious paths for how to shrink it, though much of it should be shared libraries, since it’s all the same libraries as all the other Webmin processes.