My naive guess would be to dump the threads and find if a networking library or something left around a non-daemonized thread.