Is 204.2.160.249 a legitimate F-Secure 2010 AV update address??

I noticed that F-Secure 2010 AV has recently started updating from 204.2.160.249. It was previously updating from address range 65.200.212.101-65.200.212.108 which resolves to F-Secure. An IP lookup on 204.2.160.249 says the owner is NTT America, Inc. and it does not resolve to a host name. Can someone from F-Secure please confirm that this is a valid update address? It might also be helpful to provide a list of all valid update IP addresses. I also posted this question in the official F-Secure forum and will update this post if I receive a reply there first. Thanks!

Darrell

 

Its Akamai, there should not be any problem. Even McAfee retails used Akamai service some years ago, not sure about now.

 

Akamai transparently mirrors content — sometimes all content including HTML and CSS, and sometimes just media objects such as audio, graphics, animation, and video — from customer servers. Though the domain name (but not subdomain) is the same, the IP address points to an Akamai server rather than the customer's server. The Akamai server is automatically picked depending on the type of content and the user's network location.

http://en.wikipedia.org/wiki/Akamai_Technologies

 

Thanks AMRX. How did you know that this IP belonged to Akamai? I didn't see anything in my WHOIS lookup.

 

http://en.utrace.de/whois/204.2.160.249

 

Cool. Thanks for the site.

 

I don't know what whois server you are looking at but, this was immediately kicked back as Akami:

Odd...

 

I've been using IPNetInfo which returned:

Code:

OrgName:    NTT America, Inc. 
OrgID:      NTTAM-1
Address:    8005 South Chester Street
Address:    Suite 200
City:       Centennial
StateProv:  CO
PostalCode: 80112
Country:    US

ReferralServer: rwhois://rwhois.gin.ntt.net:4321/

NetRange:   204.0.0.0 - 204.3.255.255 
CIDR:       204.0.0.0/14 
NetName:    NTTA-204
NetHandle:  NET-204-0-0-0-1
Parent:     NET-204-0-0-0-0
NetType:    Direct Allocation
NameServer: AUTH21.NS.GIN.NTT.NET
NameServer: AUTH22.NS.GIN.NTT.NET
NameServer: AUTH23.NS.GIN.NTT.NET
NameServer: AUTH24.NS.GIN.NTT.NET
NameServer: AUTH25.NS.GIN.NTT.NET
Comment:    
Comment:    Reassignment information for this block is
Comment:    available at rwhois.gin.ntt.net port 4321
RegDate:    1994-05-04
Updated:    2007-06-14

RTechHandle: VIA4-ORG-ARIN
RTechName:   VIPAR 
RTechPhone:  +1-877-688-6625
RTechEmail:  vipar@us.ntt.net 

OrgAbuseHandle: NAAC-ARIN
OrgAbuseName:   NTT America Abuse Contact 
OrgAbusePhone:  +1-877-688-6625
OrgAbuseEmail:  abuse@ntt.net

OrgNOCHandle: NASC-ARIN
OrgNOCName:   NTT America Support Contact 
OrgNOCPhone:  +1-877-688-6625
OrgNOCEmail:  support@us.ntt.net

OrgTechHandle: VIPAR-ARIN
OrgTechName:   VIPAR 
OrgTechPhone:  +1-877-688-6625
OrgTechEmail:  vipar@us.ntt.net

# ARIN WHOIS database, last updated 2009-09-22 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.