217.41.223.x Range

Discussion in 'Broadband' started by Simon Dean, Apr 16, 2010.

  1. Simon Dean

    Simon Dean Guest

    We are seeing a lot of connections to the range 217.41.223.x

    Connections are over TCP ports 80, 8080, 21, and 1935. It seems to
    coincide with access to LimeLight Networks on range 95.140.226.x

    We cannot configure what 217.41.223.x actually is. It appears to be some
    kind of broadband connection on the 21CN, there's no contact details for
    this address range other than an abuse contact, but I can't help but
    thinking its some kind of Content Delivery Service like LimeLight
    provided by BT.

    Anybody got any information on this range?

    Regards,
    Simon Dean
     
    Simon Dean, Apr 16, 2010
    #1
    1. Advertisements

  2. It's just another BT customer range full of shit infected windross.
     
    Vicktor Whieste, Apr 16, 2010
    #2
    1. Advertisements

  3. Simon Dean

    Simon Dean Guest

    But it seems to be our networks contacting them on ports 80, 8080, 21
    and 1935.... Not the other way around.
     
    Simon Dean, Apr 16, 2010
    #3
  4. TCPDump it and look at what it's doing.
     
    Vicktor Whieste, Apr 16, 2010
    #4
  5. whois 217.41.223.0
    % This is the RIPE Database query service.
    % The objects are in RPSL format.
    %
    % The RIPE Database is subject to Terms and Conditions.
    % See http://www.ripe.net/db/support/db-terms-conditions.pdf

    % Note: This output has been filtered.
    % To receive output for a database update, use the "-B" flag.

    % Information related to '217.41.222.0 - 217.41.223.255'

    inetnum: 217.41.222.0 - 217.41.223.255
    netname: BT-21CN-TMAN
    descr: infrastructure
    country: GB
    admin-c: KJH5-RIPE
    tech-c: KJH5-RIPE
    status: ASSIGNED PA
    remarks: Please send abuse notification to
    mnt-by: BTNET-MNT
    mnt-lower: BTNET-MNT
    mnt-routes: BTNET-MNT
    source: RIPE # Filtered

    person: Ken Hayes
    remarks: *TECHNICAL CONTACT ONLY*
    remarks: *DO NOT CONTACT IN CASES OF ABUSE*
    remarks: *Please e-mail abuse notification to
    remarks: *
    address: Broadband Platform Team
    address: UK
    phone: +44 1922 706028
    nic-hdl: KJH5-RIPE
    mnt-by: BTNET-MNT
    source: RIPE # Filtered

    % Information related to '217.32.0.0/12AS2856'

    route: 217.32.0.0/12
    descr: BT Public Internet Service
    origin: AS2856
    mnt-by: BTNET-MNT
    source: RIPE # Filtered


    My guess is its a proxy service or something.
     
    The Natural Philosopher, Apr 16, 2010
    #5
  6. Port 1935 is the default for the Flash Communications Server. Is someone
    running Adobe Acrobat Connect Pro (was Macromedia Breeze) etc.?

    Tony
     
    Anthony R. Gold, Apr 18, 2010
    #6
  7. Simon Dean

    Simon Dean Guest

    Access to this address range seems to occur whenever the we access ITV
    Player, 4oD, Five Player. I think my initial suspicions were right, but
    again it's another one of those things that doesn't seem to be
    advertised, it has just happened.
     
    Simon Dean, Apr 23, 2010
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.