Internet Assigned Numbers Authority

Site Visitors!

[merlin23]

I have had quite a bit of activity on my site with IP addresses that are ¨reserved¨

When I do a search to try and identify the visitors - the IP address comes up as reserved...refering me to the Internet Assigned Numbers Authority ...

Can I find out who these visitors to my website are?

Any info - much appreciated.....

[gregbo]

Try doing some traceroutes and see which ISPs they use.

[caine]

try DNSstuff - loads of tools for checking anything IP related.

some surfers hide their details behind large ISP's adminitstrative contact such as AOL, BT, etc.

[merlin23]

Thanks both! Will try your suggestions....

[cgrantski]

Do the IPs start with 10., 192., or 172.?

[merlin23]

They start with: 2.0.5.xx

Could be innocent enough, but its sure unusual...

You know the feeling when you get a lot of unusual hits on your site - you at least want to know where they came from!

Thanks...

[SeanW]

Very unusual... Those addresses aren't routed on the Internet.

#################### route-server.ip.att.net ####################

route-server>show ip bgp 2.0.5.1
% Network not in table

It would probably have to be someone local to your site or ISP, or someone injecting bogon space into the Internet (again).

Sean

[gregbo]

Are the bogus addresses still showing up? If you have tcpdump or ethereal or some other packet sniffer, see if you can gather additional packet-level information.