Teamviewer connections after DHCP lease renewal

Hi everyone,

A few machines on my organization's network have TeamViewer installed. Our Intrusion Detection System has been kicking off alerts that we've had TeamViewer connections on some of those machines. I've asked a couple of the users if they had been using TeamViewer at the time of the connection, and they said the hadn't. In fact, they didn't know what TeamViewer was. I have noticed that these connections tend to happen 1-2 minutes after the computer's DHCP lease renews. My question is if that would explain the connection? Does TeamViewer's software ping TeamViewer's servers after receiving a new IP address? Just want to make sure this is a common occurence that should be happening and not some kind of a security issue. Thanks!