iPhone Source Addresses

By Daniel Miessler on February 13th, 2008: Tagged as Apple | Information Security | iPhone

Anyone know of a good list of potential iPhone source networks?

So, if I were to want to allow anyone with an iPhone access to a resource on my home network, what ranges should I allow?

Here’s the list I’ve compiled based on 20 minutes of web research:

66.102.x.x

32.163.x.x

166.195.x.x

166.214.x.x

66.209.x.x

208.62.x.x

So if you guys know of any other way of getting solid network ranges for AT&T mobile (most resolve to mycingular.net) let me know. Also, if you have an iPhone and want to submit a source address (first 2 octets is fine) in the comments, that would be stellar.

Thanks.

Comments

Dave

Hi Daniel,

AT&T Wireless is AS 20057

You can see all of their announced prefixes here:

http://www.robtex.com/bgp/as20057.html

At least one of the prefixes you list above is Google.

AS | IP | AS Name
15169 | 66.102.1.1 | GOOGLE - Google Inc.

Depending on what you're using to build your access table, you may be able to just allow from the AT&T AS. Not sure if netfilter/iptables can work with Autonomous System Numbers or not.

Cheers,
-Dave

Daniel Miessler

You rock, Dave. Nice resource.

Arik

Well.

It's not really selective access if you give it to so many ranges. Specifically to a highly hackable platform, that can run generic software. Either open your service to everyone or to no one.

Or tunnel the services through something, say SSH. Or use some port knocking thing.