Get your own customer support community
 

SPF: Suspicous network activity - SNMP traffic to private IP not on my network

My home network is on private IP (192.168.1.*) which is NAT'd through my network firewall. On SPF, I am seeing connections from spoolsv.exe to another Private IP network (172.16.10.*) on port 49152. I have now denied an outbound connection to the Internet for spoolsv.exe, and it is showing up regularly in the log (4-5 per sec). I can't figure out how my network is routing to a 172.16.10.* address, but i was able to do a trace to the host. How is that possible? I am not running any VPN software that I am aware of. I do have Cisco VPN installed, but not running.

Thanks for any help you can provide.

JGK
 
sad I’m anxious
Inappropriate?
1 person has this question

User_default_medium