What is 205.185.216.42 and 205.185.216.10 [RESOLVED]
We have created this post as we have seen the IP addresses 205.185.216.42 and 205.185.216.10 been reported as potentially malicious. We have seen ICMP traffic from Windows machines going to these two addresses.
At the time of publication both addresses resolve to the hostname – map2.hwcdn.net
We have found that they belong to High Windows Network Group, owned by StachPath, part of the High Winds Content Delivery Network.
They deliver content for Valve, Facebook LiveRail, BlipTV, Hudl, and other services, like advertising content. They have servers all across the world.
This Microsoft document indicates that they use the hostname hwcdn.net for Windows updates.
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.