Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Firefox tries to connect to high risk IP

  • 4 replies
  • 1 has this problem
  • 1 view
  • Last reply by Amelia

dovlaze
dovlaze
more options

We realized that our Firefox ESR 91.4.1 (installed on couple of hundreds of PCs) tries to connect to the IP 34.107.221.82 which is marked as high risk. How is it possible? What exactly wants Firefox to do with this IP.

It is strange that connection to this IP goes directly and be blocked on our corporate firewall. Why does it go directly even if proxy is enabled and works. ?

Kind regards Vladimir

We realized that our Firefox ESR 91.4.1 (installed on couple of hundreds of PCs) tries to connect to the IP 34.107.221.82 which is marked as high risk. How is it possible? What exactly wants Firefox to do with this IP. It is strange that connection to this IP goes directly and be blocked on our corporate firewall. Why does it go directly even if proxy is enabled and works. ? Kind regards Vladimir

Chosen solution

Hello,

This is the ip address for detectportal.firefox.com. Firefox uses this service to check if it has access to the internet.

To disable this, you can set a preference for network.captive-portal-service.enabled to be set to false.

Read this answer in context 👍 1

All Replies (4)

Amelia
Amelia
more options

Chosen Solution

Hello,

This is the ip address for detectportal.firefox.com. Firefox uses this service to check if it has access to the internet.

To disable this, you can set a preference for network.captive-portal-service.enabled to be set to false.

Mike Kaply
Mike Kaply
  • Moderator
more options

Can you be more specific as to who marked this high risk?

also there is a policy that controls this as well.

https://github.com/mozilla/policy-templates/blob/master/README.md#captiveportal

dovlaze
dovlaze Question owner
more options

I've first just resolved the IP with "nslookup 34.107.221.82" and received "82.221.107.34.bc.googleusercontent.com". So, it didn't help me further...

High risk I found on: https://www.ipqualityscore.com/free-ip-lookup-proxy-vpn-test/lookup/34.107.221.82 https://www.abuseipdb.com/check/34.107.221.82

but of course you cannot trust to every source on the internet...

Amelia
Amelia
more options

I am assuming that the ip changes from time to time, as it is google's ip. I believe that this is supported by the fact that the reports are for different issues with the ip.

As I said, this is (at least currently) the ip behind detectportal.