[SOLVED] Netstat questions

[L0to]

I ran "netstat -ano" and looked up some random established connections running on ports 80 and 443. Most came back as Microsoft or Cloudflare but some show up as ips from European countries with not much info other than the isp NTT. Wondering if this is normal or rat like activity. If anyone could clear this up thanks.

 

[Ralston18]

Google using "who is xxx.xxx.xxx.xxx where the x's represent the suspect IP addresses.

Determine if you have any relationship to any given IP address via some application, a game, a utility, storage, etc..

Just work through the list to determine who they are and why they show up via "netstat".

 

[mdd1963]

If you run a Freefixer scan, it will 'greenlist' known/expected ports, and show plain English sources of established opened/listening ports/connections and list which applications are responsible for them...

www.freefixer.com