Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My question is about CDNs (Content Delivery Networks) and their simultaneous use for legal and questionnable stuff. One specific example is the following.

I'm noticing taffic from our network to the following IP address: . I see from that this IP address belongs to a CDN provider (Level 3 Communications) and that the IP seems to be used a lot for porn stuff, via sub-domains among others (see

Thinking that I had infected machines in our network (one of the source was a Windows server, and our sysadmins are not addicted to porn!), I fired up Wireshark to find out the contents of the packets. The packets contained what seem to be valid Windows Update requests:

    HEAD /v9/windowsupdate/redir/ HTTP/1.1\r\n
    GET /v9/windowsupdate/a/selfupdate/WSUS3/x86/Other/
    GET /msdownload/update/v3/static/trustedr/en/ HTTP/1.1\r\n

I know that these can be good-looking requests that are in fact "bad stuff hidden", but I'm wondering: could this be valid traffic and it's just Microsoft using this CDN for its updates? I find it weird that Microsoft would use a CDN that is also used to serve porn stuff. But then again, we've seen stranger things :-)

Thank you.

share|improve this question
Keep in mind that Microsoft allows anyone willing to pay to use it's CDN services. – Billy ONeal Apr 18 '12 at 17:46
You're right Billy. I was actually talking about the opposite: Microsoft using another CDN (Level 3 Communications) for the distribution of its Windows Updates, with this CDN also being used to deliver porn stuff :-) – pat Apr 19 '12 at 12:35

According to this interesting technical paper Microsoft do indeed use Level 3 as one of their CDN partners.

As to why Microsoft use someone who also serves porn, they probably don't have a lot of choice. There aren't very many CDNs operating at that kind of level, and most of the customers for that sort of service are porn sites. According to this even more interesting report, YouPorn alone takes up 2% of the Internet's traffic. To Level 3 Microsoft are, relatively speaking, small fry.

share|improve this answer
This is hilarious :D (and I can't imagine how complex it must be to manage the infrastructure of a website that encompasses 2% of the whole internet). – Camilo Martin Sep 18 '14 at 8:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.