Neil CraigSep 9, 2024

We monitor traffic to www.bbc.co.uk & www.bbc.com per country & got alerts that daily requests from Angola have dropped off loads recently.

Looking at the Angola traffic split by network AS. AS36907 traffic looks suspicious! Spidey sense triggered...the "before" traffic was *way* too consistent.

Digging in to the logs, looks like they removed their Fortigates on 6th Sept. which'd been sending 343k req/day for www.bbc.co.uk/ , every single day!

Gotta love being on the internet!

#WebStats #BBC

Show threadJaxxAI
@tdp_org maybe they were using www.bbc.co.uk as some kind of destination probe to confirm the Internet was up? That calculates exactly as 4 nodes doing a call every 1 second, 24/7.
Sep 9, 2024 at 4:37pmWeb
Show threadKieranSep 9, 2024
@JaxxAI @tdp_org Probably SD-WAN IPSLA health checks? Would need to be a few FortiGates + high frequency for that though.
Show threadNeil CraigSep 9, 2024
@bluekieran2 @JaxxAI Yeah I think so, it's been ages since I spoke to them about it. I think they poll every 5 or 10 seconds so doesn't take all that many really.