I'm a newbie Mikrotik user and I just realized, I have few local IP in Firewall->Connections list which is not in DHCP->Leases and not in ARP table as well.
Where these IPs come from? All of them has multiple connections to public servers, so I'm a littlebit confused.
One of these connections shows the client from this strange IP connecting to AVAST server somewhere in Finland. Is that possible, the virus scanners using fake interface to connect to internet?
Thanks for any help!