OSMC calling russian IP address

One of my OSMC boxes (but not the other) is calling out to a Russian IP ( about 10 times every minute.

The boxes are the same from what I can tell – any ideas what might be causing this?

Have you accidentally port forwarded SSH?

The machine may have been hacked.

Don’t know your system, but there are 3rd party add-ons that has suspicious behavior

The IP appears to belong to a weather information service, so it’s probably a weather add-on.


Thank you so much!