Sitting in front of a laptop and a PC, I just type in "ss" on the keyboard of the PC. Just for fun or curiosity.

It tells me at the bottom line:

Strangely, I didn't start any Internet application since I powered on the PC. So, why is there this https connection?

157.249.177.128 is from Norway, by the way, and I got the Opera browser installed on this PC. But Opera doesn't run automatically.

Typing in "ss" a second time, this connection is gone and everything looks now as I presume it should be.

Then, just for curiosity, I type in "ss" on the laptop. And there again! This IP address 157.249.177.128 is there, too!

As Firefox runs on that laptop, I kill the process of Firefox. All connections are gone then, only "157.249.177.128:https" keeps "CLOSE-WAIT".

Anyone knows what could be going on?

Just found it. False alarm. This IP address belongs to the "Meteorologisk Institutt Oslo" and the xfce weather application uses TCP, too. So, let them keep on spying ... ;-)

1 members found this post helpful.