SPF: Suspicous network activity - SNMP traffic to private IP not on my network
My home network is on private IP (192.168.1.*) which is NAT'd through my network firewall. On SPF, I am seeing connections from spoolsv.exe to another Private IP network (172.16.10.*) on port 49152. I have now denied an outbound connection to the Internet for spoolsv.exe, and it is showing up regularly in the log (4-5 per sec). I can't figure out how my network is routing to a 172.16.10.* address, but i was able to do a trace to the host. How is that possible? I am not running any VPN software that I am aware of. I do have Cisco VPN installed, but not running.
Thanks for any help you can provide.
JGK
Thanks for any help you can provide.
JGK
1
person has this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
Create a customer community for your own organization
Plans starting at $19/month
Loading Profile...


