EIS ekrn.exe opens a lot of connections to 93.184.220.29 and clog the internet connection.

[Box 0]

Hello.

Today I started the computer normally and i've visited some webpages, and I noticed that the internet connection was slow, so I verified the connections that the system was making.

On the list of active connections, ekrn.exe had A LOT of open connections to 93.184.220.29, so, I did disconnect the internet connection. Later, after some searchs, I discovered that the IP 93.184.220.29 is related to a legit certificate service, but I don't know why EIS open SO MANY connections to obtain updated certificates.

This is a normal behaviour?.

[Marcos 5,257]

According to https://support.eset.com/en/kb332-ports-and-addresses-required-to-use-your-eset-product-with-a-third-party-firewall, ESET connects to the IP address to check for certificate revocations.

Probably you've recently established several SSL connections and the product connected to the server to check the revocation status of SSL certificates.

[Box 0]

6 minutes ago, Marcos said:

According to https://support.eset.com/en/kb332-ports-and-addresses-required-to-use-your-eset-product-with-a-third-party-firewall, ESET connects to the IP address to check for certificate revocations.

Probably you've recently established several SSL connections and the product connected to the server to check the revocation status of SSL certificates.

Hello, many thanks for the information and the link, I found it useful for future reference. By other hand, I apologize for the double post.

Regards and many thanks for your time.