Great product…looking thru logs today noticed this connection and can’t figure it out:
svchost.exe 192.168.1.4:xxxxx to 126.96.36.199:161
A whois on 188.8.131.52 turns up RIPE NCC. Why would there be an SNMP connection to RIPE NCC?
Process explorer indicates the underlying service is spooler or stisvc.
Welcome to the forums b8652537.
I don’t see 184.108.40.206 as RIPE, but Barefruit Ltd [whatismyipaddress.com]. Their website describes itself as…
Barefruit generates highly targeted traffic for ISPs by replacing DNS and HTTP errors with relevant advertising.
So, it seems that it’s one of those error page redirect things.