2

Today I found a suspicious connection from svchost.exe to 180.97.239.5.

In the Windows Task Manager I found that the connection is made from RpcSs.

According to Wikipedia, RPC is remote procedure call when a computer program causes a procedure (subroutine) to execute in another address space (commonly on another computer on a shared network), which is coded as if it were a normal (local) procedure call, without the programmer explicitly coding the details for the remote interaction.

IP address 180.97.239.5 is an IPv4 address owned by Chinanet-js and located in Nanjing, China.

I am not in China and I did not order remote computing.

What could this possibly mean and should I be alarmed?

and his dog
  • 629

1 Answers1

0

Am i correct in saying your in QLD? If this is the case you have nothing to worry about this is APNIC they provide number resource allocation and registration services that support the global operation of the Internet. If RpcSs is causing you issues you can delete it and nothing will happen if you have nothing to do with APNIC.

HelloWorld
  • 47