# Recurring Nordvpn http calls in journalctl **URL:** \ **Category:** Applications\ **Created:** [September 3, 2026, 7:10pm UTC](https://forum.endeavouros.com/t/recurring-nordvpn-http-calls-in-journalctl/81280 "2026-09-03T19:10:55Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![kazuq](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/k/c67d28/32.png) [@kazuq](https://forum.endeavouros.com/u/kazuq)\ **Post date:** [September 3, 2026, 7:10pm UTC](https://forum.endeavouros.com/t/recurring-nordvpn-http-calls-in-journalctl/81280/1 "2026-09-03T19:10:55Z")
Hello, when I opened my terminal to update my system I found [this](https://postimg.cc/JDDLWFCm) in my journal log (apparently I forgot to quit my live follow). Is this normal? I don’t fully understand what they are about, and apparently they have been consistently happening every 15-40 minutes for at least the last 7 hours (altough my pc was in sleep mode for about 3 hours of that). I don’t check my journal logs that often, but I do check them every now and then when I feel something weird is happening, or just to see if everything is good/out of curiosity. I don’t remember ever seeing these http calls, and if, then definitely not that many at once. So just to be save I wanted to come here and ask if I need to be worried about this. I didn’t do anything to my system and I also didn’t use my vpn at all in the last 3 or 4 weeks. The only thing I did was a power cycle 3/4 days ago because I kept getting a “stop job is running for rule based device manager” message every time I booted, which delayed it by about 2 min every time, and I read that other people solved it like that. Apparently my system also cannot load my bluetooth firmware since then (which there’s no driver for my motherboard anyway, but it sends multiple error messages every second. I “fixed” it by unloading the btusb module, but I need to do that every time I boot), but that would be for another post. ---
**Author:** ![Bink](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/bink/32/87216_2.png) [@Bink](https://forum.endeavouros.com/u/Bink)\ **Post date:** [September 4, 2026, 12:35am UTC](https://forum.endeavouros.com/t/recurring-nordvpn-http-calls-in-journalctl/81280/2 "2026-09-04T00:35:46Z")
Welcome to the community @kazuq 👋😃 :enos_flag: > [@kazuq](#): > > Apparently my system also cannot load my bluetooth firmware since then (which there’s no driver for my motherboard anyway, but it sends multiple error messages every second. I “fixed” it by unloading the btusb module, but I need to do that every time I boot), but that would be for another post. Have a look in your BIOS/UEFI settings, you may have an option to simply disable the Bluetooth altogether. > [@kazuq](#): > > Hello, when I opened my terminal to update my system I found [this](https://postimg.cc/JDDLWFCm) in my journal log… When sharing log output, it helps us if you’re able to share it as text, and not a screenshot. Currently it’s a wall of text 😵‍💫 so there’s a bit to wade through and it’s difficult search, and copy data from. The process running there is your `nordvpnd`, a service. From what I can see, it’s simply pulling down hash values for various things. For example: [`https://downloads.nordcdn.com/apps/linux/config/prod/nordvpn-hash.json`](https://downloads.nordcdn.com/apps/linux/config/prod/nordvpn-hash.json) ```auto {"hash": "1463c6a409960fded3b6772d23bfee778e6cc82f53b03a2fbcb06c988cbfc01b"} ``` As a guess, I suspect it’s simply comparing hash’s against local versions. If a hash is found to be different, it likely means there’s an update/change available for that item. ---
**Author:** ![kazuq](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/k/c67d28/32.png) [@kazuq](https://forum.endeavouros.com/u/kazuq)\ **Post date:** [September 4, 2026, 9:31am UTC](https://forum.endeavouros.com/t/recurring-nordvpn-http-calls-in-journalctl/81280/3 "2026-09-04T09:31:30Z")
Thank you for your answer! I’ll take a look at my bios settings later. Ooh I see, yeah it is pretty difficult to read. You don’t mean text as in copy paste, but I’ve seen a post here explaining how you can upload your journal logs, you mean that right? Alright, so it’s nothing I need to worry about then? It’s just weird that it’s suddenly happening so frequently.. thank you again for your answer!! 🙂 ---
**Author:** ![thefrog](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/thefrog/32/114250_2.png) [@thefrog](https://forum.endeavouros.com/u/thefrog)\ **Post date:** [September 4, 2026, 10:25am UTC](https://forum.endeavouros.com/t/recurring-nordvpn-http-calls-in-journalctl/81280/4 "2026-09-04T10:25:45Z")
> [@kazuq](#): > > You don’t mean text as in copy paste yes this is what is meant. Its best to just use `eos-sendlog` so in this case you could copy the context of the journal that is relevant save that in a file then upload the file using `eos-sendlog` ---
**Author:** ![kazuq](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/k/c67d28/32.png) [@kazuq](https://forum.endeavouros.com/u/kazuq)\ **Post date:** [September 4, 2026, 1:09pm UTC](https://forum.endeavouros.com/t/recurring-nordvpn-http-calls-in-journalctl/81280/5 "2026-09-04T13:09:23Z")
oohh okay, thank you! ---
**Author:** ![system](https://forum.endeavouros.com/uploads/default/original/2X/9/9ea52f9fd5ef8e609e593c362d61a36295f48be8.png) [@system](https://forum.endeavouros.com/u/system)\ **Post date:** [September 6, 2026, 1:10pm UTC](https://forum.endeavouros.com/t/recurring-nordvpn-http-calls-in-journalctl/81280/6 "2026-09-06T13:10:05Z")
This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.