Thanks,

But added a router rule to drop outbound traffic to that ip address - I have had it running for a week or so like this and see nothing in the router logs to suggest it was happening anyway - I'm going to leave it for a while.