I caught Mozilla connecting to 140.211.166.210:443

This ip resolves to '.' but all its neighbors 140.211.166.{209,211} etc resolve to mozilla hosts. The ip range is owned by the Oregon (USA) Education System (cf. ARIN Whois).

Can anyone confirm that their Firefox connects to an address in this range without being asked to at least once a day. The connection causes a certain amount of disk activity. I will try to look at what changed.

I have software updates turned off. I will search the firefox binary and all files for this IP in many forms and I will booby trap my dns to log any activity in this range.

Please share information on this.

Questions:

1. If it's a RSS feed update or such public information, then why does it use 443 (https)
2. If it is not public information, then WHAT is it ?
3. Why has this IP no human-readable DNS name when all its neighbors have one.

Peter

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to