nethogs not helping understanding suspicious network traffic
You can use netstat -tulpn | grep <portnumber> to find which process is listening on a certain port. Alternatively you can use the lsof utility to view open connections, including the process ID.
That said, the connection in Nethogs output seems like an NFS connection (based on the port numbers). Do you have an NFS mount on your system?