nanog mailing list archives

Re: AT&T blocking individual IP addresses


From: Scott Howard <scott () doc net au>
Date: Wed, 9 Dec 2009 08:03:01 -0800

On Wed, Dec 9, 2009 at 7:25 AM, Dobbins, Roland <rdobbins () arbor net> wrote:

Traceroute to the neighboring IP addresses don't go anywhere near the
above path, so it's apparently a blackhole of sorts.

Are they bots or C&C servers, or open DNS recursors?


They are (authenticated-required) proxy servers with 10's of thousands of
users behind them, so it's possible that they were seeing some bot-like
traffic from them, although the volume would have been tiny compared to the
volume of legitimate traffic.

  Scott.


Current thread: