iPhone Source Addresses

By Daniel Miessler on February 13th, 2008: Tagged as Apple | Information Security | iPhone

Anyone know of a good list of potential iPhone source networks?

So, if I were to want to allow anyone with an iPhone access to a resource on my home network, what ranges should I allow?

Here’s the list I’ve compiled based on 20 minutes of web research:

66.102.x.x

32.163.x.x

166.195.x.x

166.214.x.x

66.209.x.x

208.62.x.x

So if you guys know of any other way of getting solid network ranges for AT&T mobile (most resolve to mycingular.net) let me know. Also, if you have an iPhone and want to submit a source address (first 2 octets is fine) in the comments, that would be stellar.

Thanks.

  • http://www.team-cymru.org/ Dave

    Hi Daniel,

    AT&T Wireless is AS 20057

    You can see all of their announced prefixes here:

    http://www.robtex.com/bgp/as20057.html

    At least one of the prefixes you list above is Google.

    AS | IP | AS Name 15169 | 66.102.1.1 | GOOGLE – Google Inc.

    Depending on what you’re using to build your access table, you may be able to just allow from the AT&T AS. Not sure if netfilter/iptables can work with Autonomous System Numbers or not.

    Cheers, -Dave

  • http://www.team-cymru.org/ Dave

    Hi Daniel,

    AT&T Wireless is AS 20057

    You can see all of their announced prefixes here:

    http://www.robtex.com/bgp/as20057.html

    At least one of the prefixes you list above is Google.

    AS | IP | AS Name 15169 | 66.102.1.1 | GOOGLE – Google Inc.

    Depending on what you’re using to build your access table, you may be able to just allow from the AT&T AS. Not sure if netfilter/iptables can work with Autonomous System Numbers or not.

    Cheers, -Dave

  • http://dmiessler.com/ Daniel Miessler

    You rock, Dave. Nice resource.

  • http://dmiessler.com Daniel Miessler

    You rock, Dave. Nice resource.

  • http://arik.baratz.org/ Arik

    Well.

    It’s not really selective access if you give it to so many ranges. Specifically to a highly hackable platform, that can run generic software. Either open your service to everyone or to no one.

    Or tunnel the services through something, say SSH. Or use some port knocking thing.

  • http://arik.baratz.org Arik

    Well.

    It’s not really selective access if you give it to so many ranges. Specifically to a highly hackable platform, that can run generic software. Either open your service to everyone or to no one.

    Or tunnel the services through something, say SSH. Or use some port knocking thing.

  • biruhiko

    32.141.*

  • biruhiko

    32.141.*

  • Nate

    Mine is 32.156.x.x.

  • Nate

    Mine is 32.156.x.x.


Top

Popular

Information Security / Technology

Politics

Philosophy & Religion

Technology & Science

Culture & Society

Miscellaneous

Arguments

Projects

Collections

Twitter

What I'm Reading

Favorite Books and Essays

Top Blog Categories

Inputs