<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Using Shodan, we can find other nodes belonging to the same CDN
by searching for "FP6.1.1866.55", which is conveniently present in
the "Server" HTTP header.</p>
<p>Skimming through the results, it would appear most of the nodes
are on the Level 3 network. Picking one non-Level3 node at random
(192.67.191.173) and doing an rDNS lookup reveals the following:</p>
<p>173.191.67.192.in-addr.arpa. 3600 IN PTR
LEVEL3-CDN-192-67-191-173.de.kpn-eurorings.net.<br>
</p>
<p>There's your answer. "Level 3 CDN".</p>
<p>Kind Regards,<br>
Filip Hruska<br>
</p>
<div class="moz-cite-prefix">On 6/17/20 6:09 PM, Justin Oeder wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CABafn_xPBeJ7Tx-UPzNio__tkNuJYHbSxYU=L7VqudkWnX6t6A@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="auto">Former Level3 operates a CDN. Might be
worth looking into.</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, Jun 17, 2020, 11:43 AM
Stephen Satchell <<a href="mailto:list@satchell.net"
target="_blank" rel="noreferrer" moz-do-not-send="true">list@satchell.net</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">On 6/17/20
8:29 AM, Clinton Work wrote:<br>
> I'm struggling to determine which CDN owns the servers in
CenturyLink prefix <a href="http://8.240.0.0/12"
rel="noreferrer noreferrer noreferrer" target="_blank"
moz-do-not-send="true">8.240.0.0/12</a>. During the Call
of Duty Season 4 update on June 11th from 06:00 UTC until
08:30 UTC, we had 240 Gbps of traffic steaming into our
network from CenturyLink prefix <a href="http://8.240.0.0/12"
rel="noreferrer noreferrer noreferrer" target="_blank"
moz-do-not-send="true">8.240.0.0/12</a>. We originally
thought it was Akamai, but they swear up and down that the
servers don't belong to them.<br>
> <br>
> Here are some of the HTTP/HTTPS servers in <a
href="http://8.240.0.0/12" rel="noreferrer noreferrer
noreferrer" target="_blank" moz-do-not-send="true">8.240.0.0/12</a>:<br>
> 8.253.151.248<br>
> 8.251.135.126<br>
> 8.240.167.126<br>
> 8.240.228.126<br>
> 8.240.168.126<br>
> 8.240.126.254<br>
> 8.240.191.254<br>
<br>
You might ask Level3.</blockquote>
</div>
</blockquote>
</body>
</html>