Hello all,
According to the Wireshark record my computer connects to various services often, including Amazon, Hetzner, 1337 Services GmbH, Evanzo GmbH and ThomasFamilyInvestments. The most often were the connections to mail.my-mail.rocks which is a part of Netcup GmbH. I have a somewhat minimal distro and the attached recordings were made when no app was open including no browser. I can send the other screenshots showing other connections too. I’m suspecting of malware since some time ago but can you help me clarify these connections please?
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 124 users / day
- 1.05K users / week
- 1.3K users / month
- 4.58K users / 6 months
- 1 subscriber
- 4.17K Posts
- 105K Comments
- Modlog
I find wireshark too confusing unless you have a lot of experience with it.
It looks like you are using linux because I see Wlan0 at the top of the image
I use ss
ss --help
to see what you are connecting to
ss -x -a
ss -o state established
ss -o state established ‘( dport = :http or sport = :http )’
what processes are using open sockets
ss -pl
TCP sockets
ss -t -a
UDP sockets
ss -t -a
a deeper guide here:
https://www.cyberciti.biz/tips/linux-investigate-sockets-network-connections.html
SS is a weird name but ok.
Socket shark, maybe? The repeating 2 digit namespace is valuable enough that there was no way
sswas going unused, nazi-association be damned-ufor udp in the last one.