cn1.redswoosh.akadns.net What is it?

[AstroTurf]

Several of the pc's here try to communicate with this site.

I have blocked it on the proxy but would love to know what it is, not finding anything definitive on the net.

Any idea?

https://cn1.redswoosh.akadns.net/

 

[The_Assimilator]

Google is your friend.

 

[AstroTurf]

Wonder what program installed it, anyway will leave it blocked.

 

[Tinuva]

That seems like Akamai servers. So how did I get to this conclusion?

Following dns, the above is a CNAME record to cn1.client.akadns.net, which in turn is a A record to a bunch of servers in the same IP range. However the Authority section reports hostmaster.akmai.com

CORP\davidb@wadavid:~> dig cn1.client.akadns.net NS

; <<>> DiG 9.6.1-P3 <<>> cn1.client.akadns.net NS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16514
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;cn1.client.akadns.net.		IN	NS

;; AUTHORITY SECTION:
akadns.net.		171	IN	SOA	internal.akadns.net. hostmaster.akamai.com. 1278492308 90000 90000 90000 180

Thus it looks like a lot of South Africa's, or at least the SAIX network's non-cached Akamai content is going via SAFE, via Hong Kong. Whilst latency for this is high, about 450ms here from the office, its only web content, seeing Seacom is down at the moment this makes sense.

 

[AstroTurf]

Just irritates me as it tries to communicate with that server around 6 times a second 24 hours a day per pc that is affected.

 

[Franna]

Akamai NetSessions Removal:

The simplest and preferred method of removing NetSession interface is to use the Add or Remove Programs application.
1. In the Windows Control Panel, run Add or Remove Programs.
2. Select Akamai NetSession Interface
3. Click Change/Remove, then click Yes to confirm your choice.

Clients using Firefox:
Make sure they don't have the add-on FoxTorrent, which uses the RedSwoosh P2P client.

Remove the RedSwoosh EDN Client manually:
http://www.bleepingcomputer.com/startups/RSEDNClient.exe-4430.html
http://www.spywaredb.com/remove-red-swoosh/

 

[AstroTurf]

It was not in the add-remove list but I found an uninstall for it in progra!1\common files when searching the registry for akamai, so far no more looking for the site.

 

[AstroTurf]

thanks for the above, will keep it in mind if things change.

Still wish I knew what installed it but am guessing its adobe acrobat reader.