9 Dec
2009
9 Dec
'09
11:03 a.m.
On Wed, Dec 9, 2009 at 7:25 AM, Dobbins, Roland <rdobbins@arbor.net> wrote:
Traceroute to the neighboring IP addresses don't go anywhere near the above path, so it's apparently a blackhole of sorts.
Are they bots or C&C servers, or open DNS recursors?
They are (authenticated-required) proxy servers with 10's of thousands of users behind them, so it's possible that they were seeing some bot-like traffic from them, although the volume would have been tiny compared to the volume of legitimate traffic. Scott.