svchost.exe outbound udp to Centregate Research

[Guest]

[cavehomme]

I noticed this morning that svchost.exe is connecting outbound UDP to IP address 156.154.70.22 and it does it every few minutes.

When I lookup this IP address it is assigned to -

156.154.70.22 - Geo Information
IP Address    156.154.70.22
Host    156.154.70.22
Location    US US, United States
City    Sterling, VA 20166
Organization    NEUSTAR
ISP    NEUSTAR
AS Number    AS12008 Centergate Research, LLC.

Can anyone throw any light as to what this connection is all about please, before I get too worried 

[cavehomme]

I think  that I may have answered my own question. According to Wireshark this IP is connecting to downloads.comodo.com

It is a pity that extra tools are needed to investigate these kinds of things and that IP lookups and further details are not available within CIS.

[EricJH]

The IP address is one of the two addresses of Secure DNS:
156.154.70.22
156.154.71.22

[cavehomme]

OK that makes sense, thanks

[Tags:]