|Lots of Traffic from Rochester, NY|
IP addresses located in Rochester, NY either through RoadRunner or Frontier
| 5:26 am on Oct 26, 2010 (gmt 0)|
I've been trying to block out unnecessary bots/spiders and have noticed a lot of different IP addresses on my site today that are all located in Rochester, NY. The ISP is either Frontier Communications or RoadRunner, sometimes it's a static IP, and the IP type is sometimes "corporate". I can't imagine that all of the sudden, all these people from Rochester are coming to my site and clicking on links. Is there something I should know about Rochester, NY?
| 11:24 am on Oct 26, 2010 (gmt 0)|
Most carriers utilize data hubs (aka relay stations) to transfer that data through their networks.
The only real way of seeing how these relays work is when you utilize "tracert".
I seem to recall that there are multiple relays (different carriers) in Rochester.
In addition, some carriers offer open proxies (no idea of the reason and Comcast is the worst), which some hackers have the ability to utilize.
As an aside, rather than generalizing, it's more beneficial to any inquiry (an those answering) if you supply an IP from your logs.
Hiding the Class D range in that IP.
| 4:49 pm on Oct 26, 2010 (gmt 0)|
Thank you! Here are some of the IPs from yesterday:
Do you think these are just data hubs or something more suspicious?
| 5:26 pm on Oct 26, 2010 (gmt 0)|
|Do you think these are just data hubs or something more suspicious? |
These determinations (due to the forum restriction of obscuring the Class D numbers) often times are quite difficult to provide accurate references to.
I do realize that you provided the obscured range as I requested, however two things of focus/comparison that you have and I don't?
1) that exact IP with the Class D included.
2) Your own raw visitor logs.
As a result, I may only take a guess on what the Class D number might be.
To add more confusion to these issues?
In recent months ARIN has changed their procedures for public access (i. e., requests on IP ranges) and valid information is near impossible to retrieve (of which it was previously for at least fifteen years), this formerly valid information even included the ability to get a breakdown on assigned subnet ranges.
I'll sticky you a tracert on one of the IP's that I guessed at a Class D, whether it's accurate? I've no way of knowing.