«

»

Jan 18

What is 1e100.net?

What is 1e100.net?

Perhaps many of you have come across the domain 1e100.net. As I was working with custom search I noticed my firewall was blocking traffic so the results were not coming up. A little bit of digging revealed the following:
Denied Connection
Log type: Web Proxy (Forward)
Status: 12227 The name on the SSL server certificate supplied by a destination server does not match the name of the host requested.
Rule:
Source: Internal (x.x.x.x.:50656)
Destination: External (oa-in-f95.1e100.net 173.194.64.95:443)
Request: 173.194.64.95:443
Filter information: Req ID: 0a7926d5; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: https-inspect
User: anonymous

As you can observe from the error message above the connection was blocked because the certificate supplied did not match the name of the host. I wasn’t sure why 1e100.net was being used and I was worried it might compromise my security. However further research showed it is a Google owned domain and it is legit. Below is the answer I found on the Google website about it:

Answer obtained from Google:

1e100.net is a Google-owned domain name used to identify the servers in our network.

Following standard industry practice, we make sure each IP address has a corresponding hostname. In October 2009, we started using a single domain name to identify our servers across all Google products, rather than use different product domains such as youtube.com, blogger.com, and google.com. We did this for two reasons: first, to keep things simpler, and second, to proactively improve security by protecting against potential threats such as cross-site scripting attacks.

Most typical Internet users will never see 1e100.net, but we picked a Googley name for it just in case (1e100 is scientific notation for 1 googol).

Further research

If you do some further research, you will see that in fact the IP addresses that the domain 1e100.net are owned by Google. Below is an example from the IP referred to above:

Registry WHOIS Server : whois.arin.net

# # Query terms are ambiguous. The query is assumed to be: # “n 173.194.64.95” # # Use “?” to get help. #
# # The following results may also be obtained via: # http://whois.arin.net/rest/nets;q=173.194.64.95?showDetails=true&showARIN=false&ext=netref2 #
NetRange: 173.194.0.0 – 173.194.255.255 CIDR: 173.194.0.0/16 OriginAS: AS15169 NetName: GOOGLE NetHandle: NET-173-194-0-0-1 Parent: NET-173-0-0-0-0 NetType: Direct Allocation RegDate: 2009-08-17 Updated: 2012-02-24 Ref: http://whois.arin.net/rest/net/NET-173-194-0-0-1
OrgName: Google Inc. OrgId: GOGL Address: 1600 Amphitheatre Parkway City: Mountain View StateProv: CA PostalCode: 94043 Country: US RegDate: 2000-03-30 Updated: 2011-09-24 Ref: http://whois.arin.net/rest/org/GOGL
OrgAbuseHandle: ZG39-ARIN OrgAbuseName: Google Inc OrgAbusePhone: +1-650-253-0000 OrgAbuseEmail: arin-contact (at) google.com OrgAbuseRef: http://whois.arin.net/rest/poc/ZG39-ARIN
OrgTechHandle: ZG39-ARIN OrgTechName: Google Inc OrgTechPhone: +1-650-253-0000 OrgTechEmail: arin-contact (at) google.com  OrgTechRef: http://whois.arin.net/rest/poc/ZG39-ARIN

# # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html #

 

Enhanced by Zemanta

Leave a Reply

%d bloggers like this: