What's at 199.93.42.126?

[greenfingers]

Quick question - what's BA accessing IP address 199.93.42.126 for?

[osknows]

It's probably your ISP

http://en.wikipedia.org/wiki/Level_3_Communications

[GaryRussell]

It's not an address that BA is explicitly programmed to access so if you are absolutely sure BA is accessing this address then it must be a proxy server. BA automatically uses the proxy server configured in your Internet Explorer proxy settings.

Check your proxy server settings in Internet Explorer. See http://windows.microsoft.com/en-us/wind ... t-Explorer

If it's pointing to this ip then disable it. If you know that you didn't change this setting then it could well be a virus that changed your proxy so it could spy on your browsing!

[GaryRussell]

It's probably your ISP

Unless the proxy is your ISP of course!

In any case, it's undesirable to go through a proxy if it's unecessary and it can definitely be a cause of slow connection problems.

[greenfingers]

It's probably your ISP

Unless the proxy is your ISP of course!

In any case, it's undesirable to go through a proxy if it's unecessary and it can definitely be a cause of slow connection problems.

\

Thanks for your replies guys. ISP=I hope so, I think!

Proxy/ISP proxy=Thanks for the info Gary, I followed the instructions and looked in Internet Options>Connections>LAN settings and there is no proxy server set up, the info is blank. So now I feel a little quesy!

The connection is not constant. I timed the last occurance and it came 5 minutes after the last one and stayed for 1 minute.

I'll e-mail you a screenshot Gary as this stuff is all a bit of mystery to me and maybe I've got it wrong, I don't want to waste your time but would really appreciate your help.

[GaryRussell]

I am investigating. There has to be an innocent explanation. There is no dodgy code in our program. We do not spy on our customers.

[greenfingers]

Of course not, I hope you don't think I was implying that. I expected there either to be a simple explanation or alternatively I was also concerned, like you said, that my pc may have a virus. As you know, I'm experiencing intermittent problems with my internet connection. I'm getting a new router from my ISP next week and will get a line check done if the problem persists. Meanwhile I'm having a root around my pc to see if I can find anything slowing it down. I have about 70 processes running from startup and little clue what many of them are so I'm just going through whatever I can.

My motive is to fix this connection problem as it has cost me over £100 each time on a few occasions in the past week or so, and perhaps longer. I've been putting it down to my error in the past, it was only when I started looking at the transaction log very closely that I thought there may be something wrong with my system - or betfair sluggish responses, which was my first thought when I posted yesterday.

I really appreciate your help on this Gary, I just hope I'm not wasting your time with regards to this spurious IP address. I'll try uninstalling some other programs and see if this item still comes up in the resource overview.

[greenfingers]

A different IP address has shown up this time. 207.123.61.126
This also refers back to Level 3 Communications that osknows mentioned. Does that shed any light on what it could be?

[osknows]

This thread may help http://www.computing.net/answers/networ ... 25374.html

then again it may not

I'm totally clutching at straws here but would Betfair perhaps be hosting parts of their site/api using Level 3?

[greenfingers]

Cheers osknows Yeah one of my first guesses was the jockey silks were maybe hosted elsewhere.

The link you gave mentioned a windows logon application. I have fingerprint logon on my pc which automatically pops-up for all my logon screens, including BA. Could this be the cause? I don't know why it would need to contact the internet though.

I use AVG free version anti-virus software. If this is monitoring my internet traffic, would that show up as a BA connection if it monitors that traffic every 5 minutes?? As you, clutching at straws!

[GaryRussell]

I ran Wireshark (a packet sniffer) and noticed it using ip 209.84.7.126 (also Level 3 Communications) to retrieve the jockey's silks. It appears it is using various addresses to fetch the jockeys silks. If you ping the address content-cache.betfair.com it resolves a different ip address depending on when you ping it. This is what confused me as when I looked earlier to see what addresses BA is accessing it didn't show the IP you gave.

I've just pinged it now and it's finally given the address you originally gave which is total confirmation it's when it accesses content-cache.betfair.com to get the jockey's silks. The jockey's silks are downloaded every 5 minutes which explains why you saw it every 5 minutes. It does this in case Betfair change them. All totally innocent.

Pinging content-cache.betfair.com.c.footprint.net [199.93.42.126] with 32 bytes
of data:
Request timed out.

I've spent ages on this

[GaryRussell]

This thread may help http://www.computing.net/answers/networ ... 25374.html

then again it may not

I'm totally clutching at straws here but would Betfair perhaps be hosting parts of their site/api using Level 3?

You hit the nail on the head.

[greenfingers]

Thanks so much Gary. I certainly am glad that it's not a virus after all, that got me quite worried. And I started off saying "quick question"! Oh well, win some, lose some (as I've been doing since having this internet problem........)

[GaryRussell]

It will be a quick question if someone asks again