Crazy IP traffic PLEASE HELP!

crazy 10.x.x.x traffic and more!

[mrlumpy]

Hello all!

I subscribe to a service called "geobytes" that does a traceroute (i believe) on all my traffic and reports it (along with a geographic location of the IP).

Normally these geobytes reports are standard stuff - http referer, IP address, and location. Easy to understand.

For the last few days, however, I've been getting some (what I believe) HTTP-forwarded traffic that is quite strange:

Feb 02, 23:16:13 - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) USCALANG United States California CA Los Angeles -08:00 North America 68.104.25.246, 10.101.3.110
[search.yahoo.com...] 216.148.246.70

Feb 02, 23:15:43 - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) USNYBRON United States New York NY Bronx -05:00 North America 68.104.25.246, 10.100.3.119
[search.yahoo.com...] 66.119.33.135

Normal, non-forwarded traffic only has one IP per visitor. These have three. I've seen a lot of these "10.x.x.x" forwarded-addresses, which I believe are from "Internet Assigned Numbers Authority" (IANA) - what is that?

Can anyone help at all? Please, this is driving me insane!

[edited by: Woz at 8:51 am (utc) on Feb. 3, 2003]
[edit reason] no specifics please [/edit]

[jmccormac]

The 10.xxx numbers are probably from the telco/website hosting backbone's own internal routing. They may use these private IP range numbers (not meant to be on the internet) to minimise the number of real world IPs that they have to assign. These 10.xxx numbers may show up in the Geobytes routing and Geobytes does not recognise them as real world IPs. Alternatively it could be a load balancer/router playing up.

Regards...jmcc

[mrlumpy]

jmccormac,

Thank you for your reply!

I was hoping it was an answer like that.

There has been some legal fighting with regard to a client's domain name. I was worried these "10.x.x.x" forwarded-IPs were from ICANN checking out the site or preparing the dreaded UDRP...

Thanks again!

[Knowles]

10.x.x.x are often AOL Cable customers. My understanding though is you should not see that IP address since they sign in to a VPN through the AOL Client which gives them a second IP address.