MOVE ALONG NOTHING TO SEE HERE
All new docs are being written in the github msndevs wiki
The old contents are left here for historical reference
Just for fun, I decided to poke around with the layout of the MSN servers. Here's my notes.
Main entry points (all equivalent addresses, AFAIK. some CNAME to each other)
Each region points to one or two IPs (for example, in
22.214.171.124). These IPs actually seem to proxy internally to other servers.
Each server has ports 80, 443 and 1863 open (at the time of this writing, the ones in the
bay region have closed 1863)
Doing an http request to those servers gets you a header like
X-MSNSERVER: BN1MSGR2011001. They all seem to be in the format
<region>MSGR<number>, the number looking a bit like a year followed by three numbers. This header isn't MSNP specific, I think I've seen it in other unrelated requests to microsoft services.
These are hostnames which can be resolved into IPs with
BN1MSGR2011001.gateway.messenger.live.com, and those IPs lead to possibly internal-ish servers (
126.96.36.199 in this case), so it's probably proxying.
Some random checking of the IPs from
188.8.131.52) showed that they are all in
184.108.40.206/24. Even though
220.127.116.11 does not have port 1863 open ATM, some of the IPs it proxies to do have it. 30 of those IPs have 1863 open, and 7 of those have it open but close the connection shortly after sending
VER 1 MSNP18 (log)
- nmap -p 1863,443 -v -A 18.104.22.168/24 (IP range used in
bay, none of the 1863 ports are open,
commonNamefields are interesting)
- nmap -p 1863,443 -v -A 22.214.171.124/24 (IP range used in
bn1, one server with 1863 open,
Aside from 443, most (if not all) of these servers work as HTTP(S) gateways, with http requests to
/gateway/gateway.dll. These work in port 80 unless the parameter
Protocol=mtp is passed (for msnp24), in which case the server returns 400 bad request (log)
This microsoft support KB page includes information about other potentially related servers: Network ports and URLs that are used by Windows Live Messenger