Hi! Can you give please more informations (IP/port/protocoll/source/destination/etc) what kind of connection is kept open? What makes you think it's Xolox? I have some downloads running, but can check it later.