First off - I usually target my questions to StackOverflow since they're programming related, and I usually login with my work account - so this will be my first post from this account, as well as my first post to this site - so I apologize if this question belongs elsewhere.
I have Eset installed on my Windows 7 machine, and only recently decided to tighten security. So I set Eset to inform me anytime there is attempted inbound and outbound traffic. I've been getting this message:
**Inbound Traffic A remote computer is attempting to communicate with an application running on this computer. Do you wish to allow this communication? Application: Host Process for Windows Services (svchost.exe) Publisher: Microsoft Windows Remote Computer: nuq04s19-in-f5.1e100.net (126.96.36.199) Local Port: 64820**
When I swung around to my Debian machine, I plugged the IP into a whois query, and discovered that this is within an IP block owned by google. So, my question is this - why? I mean, I have Chrome installed, and thereby I also have related Google processes running. So - first question is: if Google wanted to update, or otherwise connect with some of my running Google programs for whatever reason, why aren't they just knocking on those doors instead of svchost.exe? Second question: if anything at all, shouldn't svchost be what is attempting to contact Google instead of the other way around?