Two new endpoint connections located in China

[MaToVis]

Hi,

On 3/22/2022 I saw two new endpoint connections located in China, screenshots attached, on Little Snitch Network Monitor. This caused some concern so I contacted Little Snitch and they said that it looks like a temporary DNS problem with my internet provider.
The two endpoint connection persist even to today.

Should I be concerned?

There is activity every day but it is commerce --> apple.com and xp.apple. com which is one of the endpoint connection was last connected 3/22/2022.

Also the other activity is trust --> apple.com and the ocsp.apple.com which is the other endpoint connection was last connected 3/22/2022.

 

[NoBoMac]

Can point to different DNS servers vs what the ISP wants you looking at. Go to Settings > Network, select the network type (wifi, ethernet), Advanced, DNS. Then add in some other servers. Possible values:

• 1.1.1.1 - Cloudflare
• 9.9.9.9 - IBM
• 8.8.8.8 - Google

And then there is the nuclear option, clearing the DNS cache. From a Terminal:

sudo dscacheutil -flushcache
sudo killall -HUP mDNSResponder

 

[MaToVis]

Can point to different DNS servers vs what the ISP wants you looking at. Go to Settings > Network, select the network type (wifi, ethernet), Advanced, DNS. Then add in some other servers. Possible values:

• 1.1.1.1 - Cloudflare
• 9.9.9.9 - IBM
• 8.8.8.8 - Google

And then there is the nuclear option, clearing the DNS cache. From a Terminal:

sudo dscacheutil -flushcache
sudo killall -HUP mDNSResponder

Thanks ... do I restart my computer to see if these two endpoints disappear?

 

[NoBoMac]

I'd restart, just to cover all the bases.

 

[MaToVis]

I'd restart, just to cover all the bases.

Thanks again.

 

[MaToVis]

I just checked the two end connections that show up in Little Snitch Network Monitor, located in China and they are still there.

I suppose it is no threat.

Just for your interest I used both of the suggestions you posted.

Thanks again for your help.