bolevar5 0 Posted March 31, 2017 Posted March 31, 2017 An hour ago ESS stopped connecting to edf.eset.com at 137.135.12.16 and now uses the new address 13.64.235.23. This is normal? I've never seen before that would address 137.135.12.16 when it changed to another.
itman 1,807 Posted March 31, 2017 Posted March 31, 2017 Looks like Eset is using Microsoft Azure servers in the U.S.. IP 13.64.235.23 points to Microsoft as does IP 137.135.12.16
bolevar5 0 Posted March 31, 2017 Author Posted March 31, 2017 (edited) In official list this ip 13.64.235.23 not available. hxxp://support.eset.com/kb332/?locale=en_US Edited March 31, 2017 by bolevar5 xx
itman 1,807 Posted March 31, 2017 Posted March 31, 2017 Suspect that if primary network server is down, it auto connects to an alternate. This is the problem with monitoring IP addresses and why URL is always the preferred method for monitoring.
bolevar5 0 Posted April 1, 2017 Author Posted April 1, 2017 First, all connections for ESS are blocked, except for one update server. Therefore ESS can not know what the server is down. Secondly, ESS periodically tries to connect to one, then after a while to another ip address. As I said for all the time that I monitor the network connections ip address from edf.eset.com ALWAYS was the only "137.135.12.16". Before that time, I had never seen him change. Thirdly, I always wondered why the products of a private company with the headquarters of Slovakia dozens of times a day establish connections with servers in USA. I have been using ESET products for a long time and any deviation in their work causes suspicion. Especially considering the fact that antivirus products stand in second place after the OS to steal user personal data.
itman 1,807 Posted April 1, 2017 Posted April 1, 2017 This issue seems to reappear every few months in the Eset forums. I will say this. If you don't trust your AV vendor, you should not be using their products. As far as connections to servers distributed throughout the world, its an established practice by all vendors including Microsoft. It is called "load balancing" with the purpose of speeding up Internet traffic. For what it is worth, the server farm associated with IP address 137.135.12.16 is also located in the U.S..
bolevar5 0 Posted April 1, 2017 Author Posted April 1, 2017 (edited) No more honest antivirus solutions. But you can not be without protection either. With all the evil one has to choose the lesser and block unnecessary connections with the Internet. </a> </a> Everybody Lies Dr. Gregory House Edited April 1, 2017 by bolevar5 xx
Recommended Posts