homepage Welcome to WebmasterWorld Guest from 54.227.12.4
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Pubcon Platinum Sponsor 2014
Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
Forum Library, Charter, Moderators: Ocean10000 & incrediBILL

Search Engine Spider and User Agent Identification Forum

    
Lots of Traffic from Rochester, NY
IP addresses located in Rochester, NY either through RoadRunner or Frontier
suga




msg:4222033
 5:26 am on Oct 26, 2010 (gmt 0)

I've been trying to block out unnecessary bots/spiders and have noticed a lot of different IP addresses on my site today that are all located in Rochester, NY. The ISP is either Frontier Communications or RoadRunner, sometimes it's a static IP, and the IP type is sometimes "corporate". I can't imagine that all of the sudden, all these people from Rochester are coming to my site and clicking on links. Is there something I should know about Rochester, NY?

TIA.

 

wilderness




msg:4222134
 11:24 am on Oct 26, 2010 (gmt 0)

Most carriers utilize data hubs (aka relay stations) to transfer that data through their networks.

The only real way of seeing how these relays work is when you utilize "tracert".

I seem to recall that there are multiple relays (different carriers) in Rochester.

In addition, some carriers offer open proxies (no idea of the reason and Comcast is the worst), which some hackers have the ability to utilize.

As an aside, rather than generalizing, it's more beneficial to any inquiry (an those answering) if you supply an IP from your logs.
Hiding the Class D range in that IP.
EX: 123.456.789.zzz

suga




msg:4222281
 4:49 pm on Oct 26, 2010 (gmt 0)

Thank you! Here are some of the IPs from yesterday:

74.74.217.#*$!
69.207.102.#*$!
66.66.80.#*$!
74.44.143.#*$!

Do you think these are just data hubs or something more suspicious?

TIA.

wilderness




msg:4222293
 5:26 pm on Oct 26, 2010 (gmt 0)

Do you think these are just data hubs or something more suspicious?


suga,
These determinations (due to the forum restriction of obscuring the Class D numbers) often times are quite difficult to provide accurate references to.

I do realize that you provided the obscured range as I requested, however two things of focus/comparison that you have and I don't?
1) that exact IP with the Class D included.
2) Your own raw visitor logs.

As a result, I may only take a guess on what the Class D number might be.

To add more confusion to these issues?
In recent months ARIN has changed their procedures for public access (i. e., requests on IP ranges) and valid information is near impossible to retrieve (of which it was previously for at least fifteen years), this formerly valid information even included the ability to get a breakdown on assigned subnet ranges.

I'll sticky you a tracert on one of the IP's that I guessed at a Class D, whether it's accurate? I've no way of knowing.

Don

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved