openSUSE Xorg process opening network protocols and using language I do not like

English Network/Internet
1

Xorg process is doing something strange with network protocols. I searched the web and found out that similar command is normal and harmless, but it still sounds incredibly suspicious . My screen also inexplicably froze and crashed and I had to do a hard restart. Everything works now. Malware would also hide anyway. Here is picture:

Screenshot_20230219_010534
Screenshot_20230219_0105341920×1080 373 KB

inxi -Fazy:
System:
Kernel: 6.1.12-1-default arch: x86_64 bits: 64 compiler: gcc v: 12.2.1
parameters: BOOT_IMAGE=/boot/vmlinuz-6.1.12-1-default
root=UUID=08ef971c-169f-4f6f-908b-7183bd1a26ee splash=silent
resume=/dev/disk/by-uuid/5fd2b7e6-e363-4fb9-921b-adfe19b622b5
mitigations=auto quiet security=apparmor nosimplefb=1
Desktop: KDE Plasma v: 5.27.0 tk: Qt v: 5.15.8 wm: kwin_x11 vt: 7 dm: SDDM
Distro: openSUSE Tumbleweed 20230217
Machine:
Type: Desktop System: HP product: HP Pavilion Gaming Desktop TG01-0xxx v: N/A
serial: Chassis: type: 3 serial:
Mobo: HP model: 8643 v: SMVB serial: UEFI: AMI v: F.23
date: 07/07/2020
CPU:
Info: model: AMD Ryzen 7 3700X bits: 64 type: MT MCP arch: Zen 2 gen: 3
level: v3 note: check built: 2020-22 process: TSMC n7 (7nm) family: 0x17 (23)
model-id: 0x71 (113) stepping: 0 microcode: 0x8701021
Topology: cpus: 1x cores: 8 tpc: 2 threads: 16 smt: enabled cache:
L1: 512 KiB desc: d-8x32 KiB; i-8x32 KiB L2: 4 MiB desc: 8x512 KiB L3: 32 MiB
desc: 2x16 MiB
Speed (MHz): avg: 2456 high: 3620 min/max: 2200/4426 boost: enabled
scaling: driver: acpi-cpufreq governor: schedutil cores: 1: 2200 2: 2075
3: 2200 4: 3593 5: 2200 6: 2230 7: 2195 8: 2200 9: 3600 10: 2200 11: 2200
12: 3620 13: 2196 14: 2200 15: 2200 16: 2200 bogomips: 114986
Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 svm
Vulnerabilities:
Type: itlb_multihit status: Not affected
Type: l1tf status: Not affected
Type: mds status: Not affected
Type: meltdown status: Not affected
Type: mmio_stale_data status: Not affected
Type: retbleed mitigation: untrained return thunk; SMT enabled with STIBP
protection
Type: spec_store_bypass mitigation: Speculative Store Bypass disabled via
prctl
Type: spectre_v1 mitigation: usercopy/swapgs barriers and __user pointer
sanitization
Type: spectre_v2 mitigation: Retpolines, IBPB: conditional, STIBP:
always-on, RSB filling, PBRSB-eIBRS: Not affected
Type: srbds status: Not affected
Type: tsx_async_abort status: Not affected
Graphics:
Device-1: NVIDIA TU106 [GeForce RTX 2060 Rev. A] vendor: Hewlett-Packard
driver: nvidia v: 525.89.02 alternate: nouveau,nvidia_drm non-free: 520.xx+
status: current (as of 2022-10) arch: Turing code: TUxxx process: TSMC 12nm
built: 2018-22 pcie: gen: 3 speed: 8 GT/s lanes: 16 ports: active: none
off: HDMI-A-1 empty: DP-1,DVI-D-1 bus-ID: 07:00.0 chip-ID: 10de:1f08
class-ID: 0300
Display: x11 server: X.Org v: 21.1.7 with: Xwayland v: 22.1.8
compositor: kwin_x11 driver: X: loaded: nvidia gpu: nvidia,nvidia-nvswitch
display-ID: :0 screens: 1
Screen-1: 0 s-res: 1920x1080 s-dpi: 92 s-size: 530x301mm (20.87x11.85")
s-diag: 610mm (24")
Monitor-1: HDMI-A-1 mapped: HDMI-0 note: disabled model: HP X24ih
serial: built: 2021 res: 1920x1080 dpi: 93 gamma: 1.2
size: 527x297mm (20.75x11.69") diag: 605mm (23.8") ratio: 16:9 modes:
max: 1920x1080 min: 640x480
API: OpenGL v: 4.6.0 NVIDIA 525.89.02 renderer: NVIDIA GeForce RTX
2060/PCIe/SSE2 direct render: Yes
Audio:
Device-1: NVIDIA TU106 High Definition Audio vendor: Hewlett-Packard
driver: snd_hda_intel v: kernel bus-ID: 1-3:2 chip-ID: 0d8c:013c pcie:
class-ID: 0300 gen: 3 speed: 8 GT/s lanes: 16 bus-ID: 07:00.1
chip-ID: 10de:10f9 class-ID: 0403
Device-2: AMD Starship/Matisse HD Audio vendor: Hewlett-Packard
driver: snd_hda_intel v: kernel pcie: gen: 4 speed: 16 GT/s lanes: 16
bus-ID: 09:00.4 chip-ID: 1022:1487 class-ID: 0403
Device-3: C-Media CM108 Audio Controller type: USB
driver: hid-generic,snd-usb-audio,usbhid
Sound API: ALSA v: k6.1.12-1-default running: yes
Sound Server-1: PulseAudio v: 16.1 running: no
Sound Server-2: PipeWire v: 0.3.65 running: yes
Network:
Device-1: Realtek RTL8821CE 802.11ac PCIe Wireless Network Adapter
vendor: Hewlett-Packard driver: N/A modules: rtw88_8821ce pcie: gen: 1
speed: 2.5 GT/s lanes: 1 port: e000 bus-ID: 05:00.0 chip-ID: 10ec:c821
class-ID: 0280
Device-2: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet
vendor: Hewlett-Packard driver: r8169 v: kernel pcie: gen: 1 speed: 2.5 GT/s
lanes: 1 port: d000 bus-ID: 06:00.0 chip-ID: 10ec:8168 class-ID: 0200
IF: enp6s0 state: down mac:
Device-3: TP-Link Archer T4U ver.3 type: USB driver: rtl88x2bu
bus-ID: 1-11:3 chip-ID: 2357:0115 class-ID: 0000 serial:
IF: wlp2s0f0u11 state: up mac:
Bluetooth:
Device-1: Realtek Bluetooth 4.2 Adapter type: USB driver: btusb v: 0.8
bus-ID: 1-12:4 chip-ID: 0bda:b00a class-ID: e001 serial:
Report: rfkill ID: hci0 rfk-id: 1 state: down bt-service: enabled,running
rfk-block: hardware: no software: yes address: see --recommends
Drives:
Local Storage: total: 953.87 GiB used: 307.55 GiB (32.2%)
SMART Message: Unable to run smartctl. Root privileges required.
ID-1: /dev/nvme0n1 maj-min: 259:0 vendor: Intel model: SSDPEKNW010T8H
size: 953.87 GiB block-size: physical: 512 B logical: 512 B speed: 31.6 Gb/s
lanes: 4 type: SSD serial: rev: HPS0 temp: 37.9 C scheme: GPT
Partition:
ID-1: / raw-size: 936.41 GiB size: 936.41 GiB (100.00%)
used: 307.55 GiB (32.8%) fs: btrfs dev: /dev/nvme0n1p2 maj-min: 259:2
ID-2: /boot/efi raw-size: 300 MiB size: 299.4 MiB (99.80%)
used: 3.5 MiB (1.2%) fs: vfat dev: /dev/nvme0n1p1 maj-min: 259:1
ID-3: /home raw-size: 936.41 GiB size: 936.41 GiB (100.00%)
used: 307.55 GiB (32.8%) fs: btrfs dev: /dev/nvme0n1p2 maj-min: 259:2
ID-4: /opt raw-size: 936.41 GiB size: 936.41 GiB (100.00%)
used: 307.55 GiB (32.8%) fs: btrfs dev: /dev/nvme0n1p2 maj-min: 259:2
ID-5: /var raw-size: 936.41 GiB size: 936.41 GiB (100.00%)
used: 307.55 GiB (32.8%) fs: btrfs dev: /dev/nvme0n1p2 maj-min: 259:2
Swap:
Kernel: swappiness: 60 (default) cache-pressure: 100 (default)
ID-1: swap-1 type: partition size: 17.16 GiB used: 0 KiB (0.0%)
priority: -2 dev: /dev/nvme0n1p3 maj-min: 259:3
Sensors:
System Temperatures: cpu: 51.2 C mobo: N/A gpu: nvidia temp: 33 C
Fan Speeds (RPM): N/A gpu: nvidia fan: 45%
Info:
Processes: 366 Uptime: 0h 28m wakeups: 0 Memory: 15.53 GiB
used: 3.11 GiB (20.0%) Init: systemd v: 252 default: graphical
tool: systemctl Compilers: gcc: 12.2.1 alt: 12 Packages: pm: rpm pkgs: N/A
note: see --rpm tools: yast,zypper pm: flatpak pkgs: 8 Shell: Bash v: 5.2.15
running-in: konsole inxi: 3.3.23

2

journalctl -p 3 -xb

úno 19 00:59:44 cudla100-hp-pc kernel: 
úno 19 00:59:45 cudla100-hp-pc kernel: nvidia-gpu 0000:07:00.3: i2c timeout error e0000000
úno 19 00:59:45 cudla100-hp-pc kernel: ucsi_ccg 3-0008: i2c_transfer failed -110
úno 19 00:59:45 cudla100-hp-pc kernel: ucsi_ccg 3-0008: ucsi_ccg_init failed - -110
úno 19 01:00:00 cudla100-hp-pc bluetoothd[2213]: src/plugin.c:plugin_init() Failed to init vcp plugin
úno 19 01:00:00 cudla100-hp-pc bluetoothd[2213]: src/plugin.c:plugin_init() Failed to init mcp plugin
úno 19 01:00:00 cudla100-hp-pc bluetoothd[2213]: src/plugin.c:plugin_init() Failed to init bap plugin
úno 19 01:00:06 cudla100-hp-pc systemd[2029]: Failed to start Powerdevil.
░░ Subject: A start job for unit UNIT has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░ 
░░ A start job for unit UNIT has finished with a failure.
░░ 
░░ The job identifier is 106 and the job result is failed.
úno 19 01:00:12 cudla100-hp-pc systemd[2029]: Failed to start Powerdevil.
░░ Subject: A start job for unit UNIT has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░ 
░░ A start job for unit UNIT has finished with a failure.
░░ 
░░ The job identifier is 265 and the job result is failed.
úno 19 01:00:15 cudla100-hp-pc kmail[2446]: No text-to-speech plug-ins were found.
úno 19 01:00:16 cudla100-hp-pc bluetoothd[2213]: Failed to set mode: Failed (0x03)
úno 19 01:00:26 cudla100-hp-pc konsole[3295]: kf.xmlgui: Shortcut for action  "" "Zobrazit rychlé příkazy" set with QAction::setShortcut()! Use KActionCollection::setDefaultShortcut(s) instead.
úno 19 01:00:26 cudla100-hp-pc konsole[3295]: kf.xmlgui: Shortcut for action  "" "Zobrazit správce SSH" set with QAction::setShortcut()! Use KActionCollection::setDefaultShortcut(s) instead.
úno 19 01:39:34 cudla100-hp-pc sudo[10584]: cudla100 : 3 incorrect password attempts ; TTY=pts/1 ; PWD=/home/cudla100 ; USER=root ; COMMAND=/usr/bin/journalctl -p 3 -xb1
úno 19 01:42:47 cudla100-hp-pc konsole[10765]: kf.xmlgui: Shortcut for action  "" "Zobrazit rychlé příkazy" set with QAction::setShortcut()! Use KActionCollection::setDefaultShortcut(s) instead.
úno 19 01:42:47 cudla100-hp-pc konsole[10765]: kf.xmlgui: Shortcut for action  "" "Zobrazit správce SSH" set with QAction::setShortcut()! Use KActionCollection::setDefaultShortcut(s) instead.
úno 19 01:48:19 cudla100-hp-pc konsole[11111]: kf.xmlgui: Shortcut for action  "" "Zobrazit rychlé příkazy" set with QAction::setShortcut()! Use KActionCollection::setDefaultShortcut(s) instead.
úno 19 01:48:19 cudla100-hp-pc konsole[11111]: kf.xmlgui: Shortcut for action  "" "Zobrazit správce SSH" set with QAction::setShortcut()! Use KActionCollection::setDefaultShortcut(s) instead.

I also checked systemctl (with sudo systemctl status) and there are no failed units.

3

Some basics…
https://www.google.com/search?q=xorg+nolisten+tcp+auth

4

Thank you. I would close this thread, but it seems I can’t for some reason do that. I carefully googled and tried to change the tags, but it seems I cannot do that either.