I am doing some egress monitoring on my computer. Once in every few days, I would find some strange connections being logged, which I believe is initiated by the web browser through a related but not established HTTP(S) connection.
IN= OUT=eth0 SRC=192.168.1.2 DST=220.127.116.11 PROTO=TCP SPT=33001 DPT=843 SYN URGP=0 IN= OUT=eth0 SRC=192.168.1.2 DST=18.104.22.168 PROTO=TCP SPT=57002 DPT=4000 SYN URGP=0
Should there be any cause for concern, security wise, about these sporadic connections being made on non-standard ports (i.e. not 80,443)?