You are not logged in.
I have installed Archlinux and Cinnamon Desktop Environment
When I check the established connections to my system:
$ sudo lsof -i -P | grep -e ESTABLISHED -e LISTEN
I find this output:
cinnamon 962 ccm 24u IPv4 12243465 0t0 TCP arch-intel:34022->40.115.22.134:443 (ESTABLISHED)
When I check whois this IP I get the info it is registred to MICROSOFT...
I find this annoying since I am using Archlinux and have installed only packages from pacman.
No Microsoft software is allowed on my Linux machine.
I use 2 web browsers (Gnome Web and Firefox) and have disabled Bing and Google search engines on both.
Does anyone has any idea why I have this established connection from this IP to my machine?
Last edited by cjclm7 (2022-08-19 16:23:54)
Offline
from this IP to my machine?
You have that backwards. Some software you are running accesses a cloud server that happens to use a Microsoft Azure resource. What is PID 962?
FYI, using a inflammatory title on your very first post is not really a good way to introduce yourself here.
Last edited by Trilby (2022-07-13 11:34:03)
"UNIX is simple and coherent" - Dennis Ritchie; "GNU's Not Unix" - Richard Stallman
Offline
$ ps aux | grep 962
ccm 962 1.8 0.7 4762496 243640 ? Sl Jul12 11:14 cinnamon --replace
FYI, using a inflammatory title on your very first post is not really a good way to introduce yourself here.
Noted, title updated accordingly
Last edited by cjclm7 (2022-07-13 02:19:03)
Offline
http://40.115.22.134 currently gets me a "cryptocompare" webpage, but cryptocompare.com has https and a valid certificate and is resolved to cloudflare hosts.
=> it's gonna be some shitty extension/applet/widget…let you installed and it's most likely about shitcoins.
Online
I've switched from Cinnamon DE to Gnome DE and issue disappeared.
Most probably it was some browser's installed extension/applet/widget as "seth" mentioned
Offline