clean what up?
you replied to me only and not the group, please include the group always in replies.
The first highlighted TCP entry is the IP address to the site from
where I was hacked.
> */tcp 0 0 beaglebone.home:43017
> senator.holtmann.net:http CLOSE_WAIT
unlikely, it is registered to Marcel Holtmann in Germany and he is one of the project maintainers of connman, the connection manager that angstrom uses:
having a possible rootkit on your PC does not mean your beaglebone was infected.