I tried downgrading to the previous V4 release but this was still happening. I've now upgraded to V4.30.055 build 201111 from the European site and this is fixed.
For sure, there was no doubt it's a Hikvision server, but the NVR is communicating literally every single second. It wasn't doing that on earlier firmwares and it's not doing it on the very latest, so I conclude that it wasn't correct.if you had did a whois of that domain name you would find that its connected to hikvison
maybe its your logging in to your nvr system or even more likely its your hik-coonect updating its info
but who really knows what it is