Great product…looking thru logs today noticed this connection and can’t figure it out:
svchost.exe 192.168.1.4:xxxxx to 92.242.144.50:161
A whois on 92.242.144.50 turns up RIPE NCC. Why would there be an SNMP connection to RIPE NCC?
Process explorer indicates the underlying service is spooler or stisvc.
Welcome to the forums b8652537.
I don’t see 92.242.144.50 as RIPE, but Barefruit Ltd [whatismyipaddress.com]. Their website describes itself as…
Barefruit generates highly targeted traffic for ISPs by replacing DNS and HTTP errors with relevant advertising.[url=http://www.barefruit.co.uk]source[/url] [barefruit.co.uk]
So, it seems that it’s one of those error page redirect things.