Windows 10: Multiple connections for svchost.exe netsvcs

we have an incident on Siem tools saying that 'Failed Connections' alerts were detected by XDR Analytics on 9 hosts involving user nt authority\systemcmd: C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc Can anyone advise what these failed connections arefailed remote ip: 10.20.0.3,10.40.0.6,10.1.0.8,192.168.106.8,192.168.50.11,10.144.40.15,192.168.2.15,10.10.10.19,10.5.36.19,192.168.128.21,192.168.0.26,10.144.40.27,10.5.38.28,192.168.86.30,10.144.40.32,192.168.86.35,192.168.16.36,192.168.2.37,10.219.134.40,192.168.0.43,192.168.0.44,10.67.136.49,192.168.16.50,192.168.22.50,192.168.1

:)

 

RAM Died: svchost error

svchost is part of the OS, it just interacts with other aspects.

 

svchost(netsvcs) utilizing 25% of CPU def_update looping 1.237.1259.0

Hi team,
I am running windows 10, version 1067.
For past 1h my cpu is running high, and i have narrowed down issue to proces:
svchost(netsvcs) pid 576 to be utilizing cpu.



I've noticed that on windows update page, windows is trying to download
"Definition Update for Windows Defender - KB2267602 (Definition 1.237.1259.0)." and it is stuck in a loop there, trying to download and failing.



I tried rebooting notebook, but as soon as it boots up cpu usage is high again.
Windows defender seem to be updated with definitions mentioned above 1.237.1259.0




dump files for svchost.exe are ~200MB so can't really upload them here, but if anyone would find it helpful i will put them on dropbox.

Thanks

 

RAM Died: svchost error

Isnt svchost a service related to programs tho, and not the OS itself?
Like for example, there are multiple svchosts at any one time for multiple programs.

Though i suppose that still suggests the OS is buggered at the core.