WinSCP calls few IPs like 87.106.181.*, 92.122.51.* and 23.37.37.* on TCP port 80.
WinSCP version is 5.9.4.
After two days of investigation I wasn't able to find out what's causing WinSCP to call port 80 on those IPs. Updates, check for beta versions and anonymous usage statistics were disabled from Preferences. Do you have an answer for this behavior?
I do not see any evidence for WinSCP being the culprit on your screenshot.
WinSCP should not connect anywhere, if you disable check for updates.
Anyway, the 126.96.36.199 is indeed an IP address of our (this) server. The other IP addresses are for Akamai CDN network.
Thank you Martin.