svchost suspicious connection

[simo1337]

As of this morning, I checked my systems' connections and noticed that svchost was establishing a connection on port 1173 with a remote IP (80.157.150.56:80).

I would have guessed it would be an ordinary system update, except that when I looked up the IP, it was a RIPE NCC IP and got me worried. Why would svchost need to connect to an IP within the RIPE NCC range, it's not like Windows Update servers are located there ? or are they ?

[pegr]

The RIPE database lists this address as an Akamai server, which is not in itself suspicious.

You can read about Akamai here: http://en.wikipedia.org/wiki/Akamai_Technologies