Thanks for the provided material and info, Jonathan; Unfortunately I can not prevent Firefox entirely from connecting to apparently random web addresses once I open it; not even with the settings (malware, phishing) you have recommended me to try; not even with disabling all addons. Three servers that were contacted while/upon an about:blank invocation:
nslookup 178.255.83.1 1.83.255.178.in-addr.arpa name = ocsp.comodoca.com.
nslookup 194.187.168.99 ** server can't find 99.168.187.194.in-addr.arpa: NXDOMAIN
nslookup 194.187.168.106 ** server can't find 106.168.187.194.in-addr.arpa: NXDOMAIN
Annoying; isn`t it? I`d simply wish a more trustworthy OSS browser. In the meanwhile I have also tried to find about the servers in the 100% CPU load netstat list; however I could not find much useful information except two of the servers being Arch mirrors. I would have believed the phising and malware protection services to be publicly known mirrors, Google services or anything similar. I mean it must not connect to any unknown service randomly.
for i in 5.196.185.225 92.92.207.51 195.154.59.140 178.63.62.19 52.32.86.111 46.4.37.89; do nslookup $i 2>&1; done | grep name 225.185.196.5.in-addr.arpa name = arch.tamcore.eu. (French arch mirror, likely a relict of installing cups related software before using Firefox) 51.207.92.92.in-addr.arpa name = 51.207.92.92.rev.sfr.net. (no direct web search results, except for the term SFR) 140.59.154.195.in-addr.arpa name = ns1.polymorf.fr. (polymorf.fr hosts some web pages about FreeBSD, never visited**) 19.62.63.178.in-addr.arpa name = pseudoform.org. (German arch mirror, likely a relict of installing cups) 111.86.32.52.in-addr.arpa name = ec2-52-32-86-111.us-west-2.compute.amazonaws.com. (Firefox can not access this site*) 89.37.4.46.in-addr.arpa name = web.pluto.js-webcoding.de. (no web searching results on this address)
* similar site: Info ec2-50-18-20-244.us-west-1.compute.amazonaws.com Alexa Rank: 154 Title: ec2-50-18-20-244.us-west-1.compute.amazonaws.com Description: ec2-50-18-20-244.us-west-1.compute.amazonaws.com visitors, seo, traffic and competition. Website located in United States. Hosted in Seattle. With ip 50.18.20.244. World rank is 154. Visits per day: 1,575,330 Daily Ads Revenue: $18,888.6 Creation Date: No info Domain Age: N/A Ip: 50.18.20.244 Last update: 10-02-2013 00:55:59 (2 years ago) ** according to http://urlmetriques.co/www.polymorf.fr SFR (an orphan acronym of Société française du radiotéléphone [4]) is a French telecommunications company that provides voice, video, data, and Internet ... (my internet connection starts at the "3" (drei) provider for Austria) Am 2015-12-04 um 20:10 schrieb Jonathan Roemer:
The only web page I have opened today with this machine is in deed the page of my router (http://192.168.100.1:80) as confirmed by 'visited pages'. Could the remote web addresses which we saw in the netstats belong to anything queried by some Firefox
Note that Firefox makes a good number of network requests whenever it starts, unless you have modified it not to do so. These include:
Heartbeat https://wiki.mozilla.org/Advocacy/heartbeat
Google's safe browsing, malware, and phishing protection https://www.privacytools.io/#about_config
And various Akamai servers to check for add-on updates.
That's all that I can remember off the top of my head, but do not expect Firefox to not make network requests simply because you have not navigated to any websites.