On Wed, Dec 9, 2009 at 7:25 AM, Dobbins, Roland <rdobb...@arbor.net> wrote:
> > Traceroute to the neighboring IP addresses don't go anywhere near the > above path, so it's apparently a blackhole of sorts. > > Are they bots or C&C servers, or open DNS recursors? > They are (authenticated-required) proxy servers with 10's of thousands of users behind them, so it's possible that they were seeing some bot-like traffic from them, although the volume would have been tiny compared to the volume of legitimate traffic. Scott.
