Strange ip address in use by nod32

[bubu83]

i can see that ekrn.exe try to connect to this ip address:

dslb-088-064-162-074.pools.arcor-ip.net : 555

resolved to

88.64.162.74 : 555

what is that ip address? is it legit by nod32 ?

thanks

[WayneP]

Hello bubu83,

When web access protection is enabled, ekrn.exe scans traffic as it comes and goes. This process makes it look like ekrn is trying to access random IP addresses when in reality it is another application trying and ekrn actually making the request. If you were to disable web access protection, you could see what program is trying to access this IP.

[ThunderZ]

Probably your ISP.

IP look-up from Whois (http://tools.whois.net/index.php?fuseaction=whois.whoisbyipresults).