I'm not very knowledgeable when it comes to how OSX handles network activity, but this stinks: Every time I open Finder (quitting and relaunching does it too) LittleSnitch is giving me a popup titled 'Finder via smbclient' stating that Finder is trying to connect to some external IP (25.96.233.133, somewhere in England??). I've researched about smbclient and I don't think this is normal. Someone told me to try "nmblookup -M -- -" in Terminal to check for any Windows computers in my network. That command gives this:
querying __MSBROWSE__ on 192.168.1.255
192.168.1.14 __MSBROWSE__<01>
25.96.233.133 __MSBROWSE__<01>
The first IP is indeed assigned to a Windows computer in my network, but I have no freaking idea about that second, external IP. Pinged it, it returns nothing, 100% packet loss. Did nslookup, whois, traceroute, still can't figure out what it is. Could it be some kind of malware??
EDIT: Forgot to mention, running on 10.6.8
querying __MSBROWSE__ on 192.168.1.255
192.168.1.14 __MSBROWSE__<01>
25.96.233.133 __MSBROWSE__<01>
The first IP is indeed assigned to a Windows computer in my network, but I have no freaking idea about that second, external IP. Pinged it, it returns nothing, 100% packet loss. Did nslookup, whois, traceroute, still can't figure out what it is. Could it be some kind of malware??
EDIT: Forgot to mention, running on 10.6.8
Last edited: