Any ideas on this one?

Discussion in 'other firewalls' started by T772, Nov 13, 2005.

Thread Status:
Not open for further replies.
  1. T772

    T772 Guest

    ''port-2-6.gilat.ip.tiscali.net:http''

    When ever im online and visit some websites i always see this address connected using TCPView and i dont really know what to make of it. So i was wondering what people thought of this strange connection, the only info i can find relates to IRC?

    Any ideas would be very helpful

    Thanks,

    T
     
  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Code:
    Canonical name: port-2-6.gilat.ip.tiscali.net
    Addresses:
      213.200.109.6
    Code:
    Trying 213.200.109.6 at ARIN
    Trying 213.200.109 at ARIN
    
    OrgName:    RIPE Network Coordination Centre 
    OrgID:      RIPE
    Address:    P.O. Box 10096
    City:       Amsterdam
    StateProv:  
    PostalCode: 1001EB
    Country:    NL
    
    ReferralServer: whois://whois.ripe.net:43
    
    NetRange:   213.0.0.0 - 213.255.255.255 
    CIDR:       213.0.0.0/8 
    NetName:    RIPE-213
    NetHandle:  NET-213-0-0-0-1
    Parent:     
    NetType:    Allocated to RIPE NCC
    NameServer: NS-PRI.RIPE.NET
    NameServer: NS3.NIC.FR
    NameServer: SUNIC.SUNET.SE
    NameServer: NS-EXT.ISC.ORG
    NameServer: SEC1.APNIC.NET
    NameServer: SEC3.APNIC.NET
    NameServer: TINNIE.ARIN.NET
    Comment:    These addresses have been further assigned to users in
    Comment:    the RIPE NCC region. Contact information can be found in
    Comment:    the RIPE database at http://www.ripe.net/whois
    RegDate:    
    Updated:    2005-07-27
    
    # ARIN WHOIS database, last updated 2005-11-12 19:10
    # Enter ? for additional hints on searching ARIN's WHOIS database.
    Code:
    whois -h whois.ripe.net 213.200.109.6 ...
    % This is the RIPE Whois query server #1.
    % The objects are in RPSL format.
    %
    % Note: the default output of the RIPE Whois server
    % is changed. Your tools may need to be adjusted. See
    % http://www.ripe.net/db/news/abuse-proposal-20050331.html
    % for more details.
    %
    % Rights restricted by copyright.
    % See http://www.ripe.net/db/copyright.html
    
    % Note: This output has been filtered.
    %       To receive output for a database update, use the "-B" flag.
    
    % Information related to '213.200.109.0 - 213.200.109.63'
    
    inetnum:        213.200.109.0 - 213.200.109.63
    netname:        AKAMAI-TINET
    descr:          Akamai Technologies
    country:        US
    admin-c:        JOI-RIPE
    tech-c:         JOI-RIPE
    status:         ASSIGNED PA
    mnt-by:         TISCALI-INT-NET
    source:         RIPE # Filtered
    
    person:       Johannes Magnusson
    address:      Akamai Technologies, Inc.
    address:      8 Cambridge Center
    address:      Cambridge, MA 02142
    address:      USA
    phone:        +1 617 444 2576
    e-mail:       joi@akamai.com
    nic-hdl:      JOI-RIPE
    source:       RIPE # Filtered
    
    % Information related to '213.200.64.0/18AS3257'
    
    route:        213.200.64.0/18
    descr:        Tiscali International Network
    origin:       AS3257
    mnt-by:       TISCALI-INT-ROUTE
    source:       RIPE # Filtered
    Akamai servers are widely used for providing web content.

    What information do you have that associates it with IRC?

    Regards,

    CrazyM
     
  3. T772

    T772 Guest

    Thanks for info Crazy M, i just had alook on samspade and it came up with this, not very helpful as it gives details of tiscali. While searching on google various strange references to IRC ports 2-6 and the gilat network!!

    These Akami servers are driving me up the wall as i always seem to be connecting to them for different things!! CrazyM what program or website did you use to get the info from, cheers for helpin me out with my Akami problems:)

    thanks T

    http://port-2-6.gilat.ip.tiscali.net(offsite)

    This means you connect using normal web http to host port-2-6.gilat.ip.tiscali.net

    The URL is accessible as http://port-2-6.gilat.ip.tiscali.net(offsite) and is hosted by port-2-6.gilat.ip.tiscali.net(refer)

    Enter the URL (eg http://3520569262/wherever.html)


    Server Used: [ whois.ascio.com ]

    port-2-6.gilat.ip.tiscali.net = [ 213.200.109.6 ]
    .
    Registrant:
    Tiscali S.p.A. (TISCALIS457)
    Viale Trento 39
    09123 Cagliari
    IT
    Domain name: tiscali.net
    Technical contact:
    S.p.A. Tiscali (TS1029)
    SS 195 Km 2.300 Loc. Sa Illetta
    Cagliari Cagliari 09100
    IT
    techc@IT.TISCALI.COM

    39.704601400 Fax:
    Administrative contact:
    D'Arpa Sergio (SD450)
    Tiscali S.p.A.
    Viale Trento 39
    Cagliari 09123
    IT
    admin-c@it.tiscali.com

    39.704601400 Fax: 39.704601400
    Record created: 2003-09-27 17: 14: 34
    Record last updated: 2004-03-09 15: 25: 32
    Record expires: 2007-07-26 00: 00: 00
    Domain servers in listed order:
    PNS.TISCALI.NET (PNSTISCA293)
    SNS.TISCALI.NET (SNSTISCA710)
    SNS.TISCALI.IT (SNSTISCA573)
    NS.TISCALINET.IT (NSTISCAL364)
     
    Last edited by a moderator: Nov 13, 2005
  4. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    "port-2-6.gilat.ip.tiscali.net" the port-2-6 is just part of the name for the server, not the actual ports used.

    It is normal to see them serving content for sites and nothing to worry about.

    For the whois lookups I used the Sam Spade for Windows utility.

    Whois lookups can also be done directly at:
    ARIN WHOIS Database Search
    Internic Whois Search
    RIPE Whois Search
    APNIC Whois Search
    LACNIC Whois Search

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.