It's probably something opening a socket to the tptmp server that isn't a real tptmp client. And I guess it shows up in /online, despite not being there. It can be safely ignored. Maybe I should try fixing that.