You can try to turn off every software running on your cell phone to check if that connection is started from device's default software or third-party software. If it is from device's default software, there is nothing to concern. If not, try to turn on your software one by one to identify where the problem is. Then you can uninstall the software that connection is starting from or do whatever you want!

Hi I'm new here and have security question about my cell phone. I don't know anything about programming or ip address..... but I downloaded terminal emulator to monitered my Internet traffic.. with command netstat, I found I weird foreign ip address " nobody.yourvserve:http establish and 2 lines below nobody.yourvserve:http FIN_WAIT1" what does this mean? Am I been hack or monitered? If yes what can I do to stop it?