AT&T blocking individual IP addresses

Scott Howard scott at doc.net.au
Wed Dec 9 16:03:01 UTC 2009


On Wed, Dec 9, 2009 at 7:25 AM, Dobbins, Roland <rdobbins at arbor.net> wrote:

> > Traceroute to the neighboring IP addresses don't go anywhere near the
> above path, so it's apparently a blackhole of sorts.
>
> Are they bots or C&C servers, or open DNS recursors?
>

They are (authenticated-required) proxy servers with 10's of thousands of
users behind them, so it's possible that they were seeing some bot-like
traffic from them, although the volume would have been tiny compared to the
volume of legitimate traffic.

  Scott.



More information about the NANOG mailing list