strange behavior

there is a user when i make a torch at him i found that he have strange connections
check the attachment
I want to know if the Dst IP/ports are normal or he trying to attack some ips on the network ?
untitled.JPG