What do you guys think?
-----------------------------------------------------------
Hello,
This is in response to the suspicious activity you reported seen on
your computer.
If you use the Internet for anything – to download music or to update
software, check the headlines, book a flight – you've probably used
Akamai's services. We play a critical role in getting content from
providers to consumers. Akamai customers range from media properties
to financial Web sites to global enterprises. A selected list of
Akamai's customers can be found at http://www.akamai.com/html/customers/customer_list.html
Akamai's technology – at its core, applied mathematics and algorithms
- has transformed the chaos of the Internet into a predictable,
scalable, and secure platform for business and entertainment.
Akamai's network consists of 30,000+ servers in over 2000 networks
across 69 countries. Our patented "intelligent" algorithms
dynamically map a user request to the closest (network-wise) available
Akamai server.
When you connect to a web-site your browser first contacts the content
provider (i.e. www.yahoo.com or www.microsoft.com) and downloads an
html file. This file contains embedded URLs that tell your browser
where to find all the
objects necessary to finish displaying the page. In the case of an
"Akamaized" site, these URLs point to the Akamai Network. Next, your
browser makes connections to the URLs to obtain the images or
streaming content. Again, for an "Akamaized" site, your browser will
contact an Akamai server to obtain the requested items.
Many programs make HTTP connections that you may not be aware of.
These programs include, email clients, anti-virus software, stock
quote streamers, free ISP ad displays, and the Microsoft Active
Desktop. Our servers will not send any traffic to you without being
contacted first.
If you would like me to confirm the traffic you're seeing could you
please mail me your firewall logs (in a text file, if possible)
containing at least the source port, destination IP and port, TCP,
flags, and timestamp.
I'd suggest you take a look at our FAQ ( http://www.akamai.com/html/support/faq.html
) and see if that explains the traffic you are seeing.
If you'd like to learn more about Akamai and our service offerings,
please visit our web-site at www.akamai.com. If you have any other
questions or concerns, please feel free to contact me.
Thanks and Regards,
Victor
Akamai Technologies
--------------------------------------------------------------------------------
From: removedbyposter
Sent: Wednesday, October 14, 2009 7:29 PM
To: ab...@akamai.com
Subject: {HC110172}Investigation request
Hi,
We've looked at your FAQ regarding firewall logs but cannot find any
matching for our situation.
Our logs shows UPD connection from a subnet (209.222.128.0/19) with
destination port UDP 33440 to 33450.
You will find attached the logs from the Firewall, all time stamps are
GMT-05:00.
Thank you,
>Our logs shows UPD connection from a subnet (209.222.128.0/19) with
>destination port UDP 33440 to 33450.
Looks like someone did a traceroute to you. Why did you contact
Akami?
--
Steve Baker
GWF
Seth
I'm paid to be a goober.
Not my fault these dumb idiots can't tell me who sends me traffic from
their network.
When you read their FAQ, it says any traffic coming from this subnet
is triggered from your own network (like Windows update, iTune).
Since the firewall on witch I found the logs should not be sending
traffic to such application or service, I wanted to know why I got the
traffic in the first place.
Alex
>Not my fault these dumb idiots can't tell me who sends me traffic from
>their network.
>When you read their FAQ, it says any traffic coming from this subnet
>is triggered from your own network (like Windows update, iTune).
>
>Since the firewall on witch I found the logs should not be sending
>traffic to such application or service, I wanted to know why I got the
>traffic in the first place.
Does it do DNS? Check the nameservers for all the domains it got DNS
for and see how many were served by Akamai.
Seth
>On Oct 17, 6:27�pm, se...@panix.com (Seth) wrote:
How did you figure out that 209.222.128.0/19 belongs to Akamai?
--
Steve Baker