Forum Discussion

tristiano's avatar
tristiano
Tuning in
5 months ago

Why does my browser talk to cpc25-finc13-2-0-cust34.4-2.cable.virginm.net and other [removed] IPs

Hi,

I've noticed that my web browser connects to various Virgin Media hosts on the [removed] address range on port 80 and I have no idea why. Even if I start in private mode without any tabs open or sites visited I see connections to these addresses. I am using Firefox

Has anybody else noticed this or can shed any light on what could be hosted there ?

Thanks,

[MOD EDIT: Personal and private information has been removed from this post. Please do not post personal or private information in your public posts. Please review the Forum Guidelines]

Tristiano

  • cje85's avatar
    cje85
    5 months ago

    Virgin Media don't pay much attention to hostnames and often repurpose IPs without updating the hostname. It may be that your browser is checking for updates upon launch, by pinging an CDN server. VM have caches of major CDNs within their network and the hostnames for these can be completely outdated. I've even seen some relating to NTL Dial Up modem connections.

  • Adduxi's avatar
    Adduxi
    Very Insightful Person
    5 months ago

    How are you finding out this information? Can you show some screenshots etc?

  • tristiano's avatar
    tristiano
    Tuning in
    5 months ago

    Hi,

    Thanks for your interest! I am running Linux (boot not VM) and noticed the activity on an lsof -i

    The snippet above was with several windows open but as mentioned I have seen this activityu with no windows open straight after a browser start. I have disabled extensions and since then I have done tcpdumps and seen the same activity.

    Thanks,

     

  • cje85's avatar
    cje85
    Trouble shooter
    5 months ago

    Virgin Media don't pay much attention to hostnames and often repurpose IPs without updating the hostname. It may be that your browser is checking for updates upon launch, by pinging an CDN server. VM have caches of major CDNs within their network and the hostnames for these can be completely outdated. I've even seen some relating to NTL Dial Up modem connections.

  • tristiano's avatar
    tristiano
    Tuning in
    5 months ago

    Ok some kind of CDN could make sense and ease my paranoia! I was concerned when I saw what looked like a connection to another cable customer ..

    Thanks

    • Akua_A's avatar
      Akua_A
      Forum Team
      5 months ago

      Hi tristiano 

      Welcome back to our community forums and sorry to hear you were worried about your web browser behaviour. We can understand your concern. We are however glad to see that the community was able to help bring some clarity to the issue. Please do not hesitate to contact us if you need any further help.

      Thanks,