Outgoing TCP attempts to these ports could be trying to contact netrek metaservers. See also port 3521.
