See Every Connection
Your Mac Is Making.

A Typical Mac Has 20–50 Active Connections

At any given moment, a normally-used Mac has dozens of active TCP connections — many of which you'd never expect. CleanMachine's Network Monitor parses lsof -i -n -P -sTCP:ESTABLISHED every 5 seconds and shows every external connection with:

• Process name — which app is making the connection
• Remote IP address — the server being connected to
• Country flag — which country the server is in
• Country name — spelled out for clarity
• Organization name — "Google LLC", "Cloudflare, Inc.", "Amazon.com"
• Port — 443 (HTTPS), 80 (HTTP), etc.

Private/LAN connections (local network traffic) are shown in a separate collapsed section so they don't clutter the external connection list.

Network Security Audit: 8 Automated Checks

Beyond watching live connections, CleanMachine runs 8 automated security checks and gives you a security score from 0–100:

• Application Firewall — is the macOS app firewall enabled?
• Stealth Mode — does your Mac respond to ping requests from the internet?
• Open Ports — are any unexpected ports listening on your network interface?
• Wi-Fi Security — are you on a WPA2/WPA3 network (not open or WEP)?
• VPN — is a VPN tunnel active?
• File Sharing — is macOS File Sharing exposed?
• Screen Sharing — is Screen Sharing accessible?
• Remote Login (SSH) — is SSH listening on port 22?

Bandwidth Monitor

CleanMachine also shows bandwidth statistics: bytes in/out per network interface (Wi-Fi/Ethernet) since boot, plus the first active VPN tunnel if present. Useful for spotting unusual data usage — an app sending unexpectedly large amounts of data can indicate malware or misconfiguration.