Is 204.2.160.249 a legitimate F-Secure 2010 AV update address??

Discussion in 'other anti-virus software' started by 0strodamus, Sep 20, 2009.

Thread Status:
Not open for further replies.
  1. 0strodamus

    0strodamus Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    1,047
    Location:
    United Surveillance States
    I noticed that F-Secure 2010 AV has recently started updating from 204.2.160.249. It was previously updating from address range 65.200.212.101-65.200.212.108 which resolves to F-Secure. An IP lookup on 204.2.160.249 says the owner is NTT America, Inc. and it does not resolve to a host name. Can someone from F-Secure please confirm that this is a valid update address? It might also be helpful to provide a list of all valid update IP addresses. I also posted this question in the official F-Secure forum and will update this post if I receive a reply there first. Thanks!

    Darrell
     
  2. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
    Its Akamai, there should not be any problem. Even McAfee retails used Akamai service some years ago, not sure about now.
     
  3. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
    Akamai transparently mirrors content — sometimes all content including HTML and CSS, and sometimes just media objects such as audio, graphics, animation, and video — from customer servers. Though the domain name (but not subdomain) is the same, the IP address points to an Akamai server rather than the customer's server. The Akamai server is automatically picked depending on the type of content and the user's network location.

    http://en.wikipedia.org/wiki/Akamai_Technologies
     
  4. 0strodamus

    0strodamus Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    1,047
    Location:
    United Surveillance States
    Thanks AMRX. How did you know that this IP belonged to Akamai? I didn't see anything in my WHOIS lookup.
     
  5. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
  6. 0strodamus

    0strodamus Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    1,047
    Location:
    United Surveillance States
    Cool. Thanks for the site.
     
  7. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    Stamford, CT
    I don't know what whois server you are looking at but, this was immediately kicked back as Akami:

    Odd...
     
  8. 0strodamus

    0strodamus Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    1,047
    Location:
    United Surveillance States
    I've been using IPNetInfo which returned:

    Code:
    OrgName:    NTT America, Inc. 
    OrgID:      NTTAM-1
    Address:    8005 South Chester Street
    Address:    Suite 200
    City:       Centennial
    StateProv:  CO
    PostalCode: 80112
    Country:    US
    
    ReferralServer: rwhois://rwhois.gin.ntt.net:4321/
    
    NetRange:   204.0.0.0 - 204.3.255.255 
    CIDR:       204.0.0.0/14 
    NetName:    NTTA-204
    NetHandle:  NET-204-0-0-0-1
    Parent:     NET-204-0-0-0-0
    NetType:    Direct Allocation
    NameServer: AUTH21.NS.GIN.NTT.NET
    NameServer: AUTH22.NS.GIN.NTT.NET
    NameServer: AUTH23.NS.GIN.NTT.NET
    NameServer: AUTH24.NS.GIN.NTT.NET
    NameServer: AUTH25.NS.GIN.NTT.NET
    Comment:    
    Comment:    Reassignment information for this block is
    Comment:    available at rwhois.gin.ntt.net port 4321
    RegDate:    1994-05-04
    Updated:    2007-06-14
    
    RTechHandle: VIA4-ORG-ARIN
    RTechName:   VIPAR 
    RTechPhone:  +1-877-688-6625
    RTechEmail:  vipar@us.ntt.net 
    
    OrgAbuseHandle: NAAC-ARIN
    OrgAbuseName:   NTT America Abuse Contact 
    OrgAbusePhone:  +1-877-688-6625
    OrgAbuseEmail:  abuse@ntt.net
    
    OrgNOCHandle: NASC-ARIN
    OrgNOCName:   NTT America Support Contact 
    OrgNOCPhone:  +1-877-688-6625
    OrgNOCEmail:  support@us.ntt.net
    
    OrgTechHandle: VIPAR-ARIN
    OrgTechName:   VIPAR 
    OrgTechPhone:  +1-877-688-6625
    OrgTechEmail:  vipar@us.ntt.net
    
    # ARIN WHOIS database, last updated 2009-09-22 20:00
    # Enter ? for additional hints on searching ARIN's WHOIS database.
     
Loading...
Thread Status:
Not open for further replies.