Confused by some entries blocked by Suricata

[hushcoden]

A few days ago I decided to not renew my Kaspersky licence and to use Windows Defender, but since then I see some 'strange' entries in the Suricata log, that is my laptop trying to connect to 205.185.216.10 or 205.185.216.42 and those two IP addresses trying to connect to my laptop (attached an example).

Does anybody has noticed the same, by any chance? It seems being related to Windows Update, I really doubt my laptop is infected...

Tia.

[Lucas P]

never hatte that but is are known for Windows updates

https://answers.microsoft.com/en-us/windows/forum/all/20518521610-and-20518521642-windows-update-or-not/50939772-32d1-427c-9bdd-8f7efe8a8817

[hushcoden]

Thanks... didn't know MS also using Highwinds servers...