ESS changed the ip address when connecting to edf.eset.com.

[bolevar5 0]

An hour ago ESS stopped connecting to edf.eset.com at 137.135.12.16 and now uses the new address 13.64.235.23. This is normal? I've never seen before that would address 137.135.12.16 when it changed to another.

[itman 1,659]

Looks like Eset  is using Microsoft Azure servers in the U.S.. IP 13.64.235.23 points to Microsoft as does IP 137.135.12.16

[bolevar5 0]

 

In official list this ip 13.64.235.23 not available.

hxxp://support.eset.com/kb332/?locale=en_US

 

 

 

 

 

Edited March 31, 2017 by bolevar5
xx

[itman 1,659]

Suspect that if primary network server is down, it auto connects to an alternate. This is the problem with monitoring IP addresses and why URL is always the preferred method for monitoring.

 

[bolevar5 0]

First, all connections for ESS are blocked, except for one update server. Therefore ESS can not know what the server is down.

Secondly, ESS periodically tries to connect to one, then after a while to another ip address. As I said for all the time that I monitor the network connections ip address from edf.eset.com ALWAYS was the only "137.135.12.16". Before that time, I had never seen him change.

Thirdly, I always wondered why the products of a private company with the headquarters of Slovakia dozens of times a day establish connections with servers in USA. I have been using ESET products for a long time and any deviation in their work causes suspicion. Especially considering the fact that antivirus products stand in second place after the OS to steal user personal data.

 

 

[itman 1,659]

This issue seems to reappear every few months in the Eset forums. I will say this. If you don't trust your AV vendor, you should not be using their products.

As far as connections to servers distributed throughout the world, its an established practice by all vendors including Microsoft. It is called "load balancing" with the purpose of speeding up Internet traffic.

For what it is worth, the server farm associated with IP address 137.135.12.16 is also located in the U.S..

[bolevar5 0]

No more honest antivirus solutions. But you can not be without protection either. With all the evil one has to choose the lesser and block unnecessary connections with the Internet.

</a>

</a>

Everybody Lies 

Dr. Gregory House

Edited April 1, 2017 by bolevar5
xx