Observing the network activity with Port Explorer, I was surprised to find a connection from a system process i.e. no PID to Malawi (sorry IP address not at hand). On further investigation with Who Is? revealed a RIPE server. I'm suspicious that such a geographically out of the way server should be providing the service particularly as it has appeared on more than one occassion. What connections might be observed on establishing a normal Internet connection?