sudo netstat -ap grep http
[sudo] password for pc-notebook:
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 localhost:35255 0.0.0.0:* LISTEN 1733/expressvpn-age
tcp 0 0 127.0.0.53:domain 0.0.0.0:* LISTEN 666/systemd-resolve
tcp 0 0 localhost:ipp 0.0.0.0:* LISTEN 16768/cupsd
tcp 0 0 localhost:38133 0.0.0.0:* LISTEN 14936/openvpn
tcp 0 0 pcnotebook:39082 ec2-54-165-115-48:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:41152 69.173.151.98:https TIME_WAIT -
tcp 0 0 pcnotebook:54154 123.208.120.34.bc:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:52056 lga25s79-in-f2.1e:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:53824 ec2-52-22-107-116:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:33926 151.101.124.193:https ESTABLISHED 2087/firefox
tcp 0 0 localhost:35255 localhost:60380 ESTABLISHED 1733/expressvpn-age
tcp 0 0 pcnotebook:42090 ec2-34-195-94-154:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:49364 76.237.120.34.bc.:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:39038 32.121.122.34.bc.g:http TIME_WAIT -
tcp 0 0 pcnotebook:34940 ec2-54-187-146-10:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:49288 bg-in-f155.1e100.:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:60806 139.148.107.34.bc:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:55804 113.140.107.34.bc:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:36108 ec2-3-230-217-116:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:56796 104.36.115.111:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:44290 ec2-34-236-83-94.:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:43644 lga25s78-in-f2.1e:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:57844 ec2-52-206-112-68:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:54902 server-13-225-185:https ESTABLISHED 2087/firefox
tcp 0 0 pcnotebook:46196 lga25s74-in-f14.1:https ESTABLISHED 2087/firefox
tcp 0 0 localhost:60380 localhost:35255 ESTABLISHED 1055/expressvpnd
tcp 0 0 pcnotebook:55914 102.115.120.34.bc:https ESTABLISHED 2087/firefox
udp 0 0 0.0.0.0:52558 0.0.0.0:* 2087/firefox
udp 0 0 127.0.0.53:domain 0.0.0.0:* 666/systemd-resolve
udp 0 0 pcnotebook:bootpc _gateway:bootps ESTABLISHED 790/NetworkManager
udp 0 0 pcnotebook:ntp 0.0.0.0:* 933/ntpd
udp 0 0 pcnotebook:ntp 0.0.0.0:* 933/ntpd
udp 0 0 localhost:ntp 0.0.0.0:* 933/ntpd
udp 0 0 0.0.0.0:ntp 0.0.0.0:* 933/ntpd
udp 0 0 0.0.0.0:631 0.0.0.0:* 16769/cups-browsed
udp 0 0 0.0.0.0:37612 0.0.0.0:* 2087/firefox
udp 0 0 0.0.0.0:33547 0.0.0.0:* 2087/firefox
udp 0 0 0.0.0.0:33646 0.0.0.0:* 14936/openvpn
udp 0 0 0.0.0.0:mdns 0.0.0.0:* 721/avahi-daemon: r
udp 0 0 0.0.0.0:59556 0.0.0.0:* 721/avahi-daemon: r
udp6 0 0 [::]:ntp [::]:* 933/ntpd
udp6 0 0 [::]:mdns [::]:* 721/avahi-daemon: r
udp6 0 0 [::]:54842 [::]:* 721/avahi-daemon: r
Active UNIX domain sockets (servers and established)
I was hacked a month ago and trying to make sure this mint reinstall is ok.