I noticed that my firewall yesterday blocked outgoing attempts starting at port 61494 and worked its way up to 62381, making a TCP outgoing attempt at each port once. The remote IP address seems random, and changed up every 1-20 times. The remote port is always port80. Here is a small snippet below.
Is this a trojan? How do I begin to troubleshoot this to figure out whats going?