Hi there,
New user here, could someone please explain these connections to me?
I have default WAN to LAN IPS and the default firewall on for now (which allows any connections). I would hope that the IPS blocks malicious connections and keeps ports closed, but I seem to be having a lot of small connections to random IPs that purport to be Twitter, Microsoft etc, though as I search the IPs it appears they may be linked to abuse.
What sort of connections are these? It seems my system has made the connection, and originally I thought it was from web browsing, but I'm not sure now.
What information might they be gaining from my system, if it is malicious? How can I distinguish between connections that come from legitimate sources and malicious ones?
How can I block them from occurring? My solution for now is to turn on my software VPN, while I figure things out.
This thread was automatically locked due to age.