Why so many established connection on booting dispVM? Hacked?

See also: Which IPs does Qubes 4.0.4 connect to on boot?