MTN, Dimension Data and Telkom weird incoming connection

[dontcryforme]

I have a weird question about MTN. Whenever a user signs up on my website and click on the confirmation email link using an MTN connection, there is a duplication of the incoming connection from Dimension Data and Telkom. Its only with people using MTN and I cannot see any session hijacking taking place. It's also only when the user clicks the email's user verification link.

Any ideas why this is happening?

Some more info. Users are using various email providers like Gmail or private domain emails. It's specific to MTN only and only happens after the MTN user clicked on the encrypted verification link.

 

[dontcryforme]

More specifically, the Telkom and Dimension Data duplicate connections happens about 4 seconds after the original connection from MTN.

 

[bixt]

Routing has gone to $hit after the subsea cable breaks, various local routing tables were hastily altered to use alternate links of other ISPs and probably all the mess has not been cleaned up / they will only clean once the cables are repaired.

I am in cyber and while everything "just works" for the user right now, behind the scenes there's a ton of anomalous behavior across networks detected.

 

[dontcryforme]

Routing has gone to $hit after the subsea cable breaks, various local routing tables were hastily altered to use alternate links of other ISPs and probably all the mess has not been cleaned up / they will only clean once the cables are repaired.

I am in cyber and while everything "just works" for the user right now, behind the scenes there's a ton of anomalous behavior across networks detected.

Thanks, was worried that something was not secure enough. We try to monitor every action 24/7 to detect security threats manually on top of our automated stuff