Unknown IP connection from ESET client

[RyanTsai 3]

Hi,

 

One of my customers is reporting that their ESET V5 Endpoint is trying to connect to these IP addresses, even though they've configured clients to update via mirror:

 

91.228.166.148

91.228.166.149

91.228.167.144

 

We're not exactly sure if these are for updates, but I've checked and these ip addresses are not on the IP list provided here:

 

hxxp://support.eset.com/kb332/

 

So can you help to clarify which component uses these IPs, and can it be either turned off or provided by ERA server (like Virus updates/live grid) 

[MartinK 384]

Those IP addresses (at least first two) belongs to hostname ts.eset.com mentioned in referenced KB article.