yes it's always connecting to the same address. maybe i have a backdoor that send a request to that address or a running service requesting the same.

i fix it by blocking the the IP from the firewall. but i want to know the root of this connection to kill it.

Since you based in UK maybe the IP belongs to you