My firewall logs an outbound connection to 80.64.58.95 on port 9997. My searching only tells me that port 9997 is palace-6 but I have no clue what that is. Is this a protocol? Virus? some weird webservice? Am I unknowingly sharing files or something?