OptimumOnline → [help] What is this hicks116-41.optonline.net?

Why am I seeing this in my connection logs? hicks116-42.optonline.net
hicks116-26.optonline.net

Not sure what you're asking. I believe their headquarters is in Hicksville LI, NY.

I know that, I'm asking why that is loading when I goto Reddit.com or Twitch.tv or Twitter.com. I wanna know WHY is it getting accessed and what it is sending and receiving.

Your personal info and data

Anybody know what this is and why I am seeing it?

without seeing the actual payload nobody here are mindreaders.
Every browser has developer tools that allow you see page load traces and what each request does.

My DNS won't resolve it, does yours?

My guess is a server supporting the websites you referenced hosted on the OOL network.

Did you call tech support to see if they could help you? Or you could contact them via the registrant information:

Administrative Contact :
Ciruolo, Pina
CVDOMAIN@CABLEVISION.COM
1111 Stewart Avenue
Bethpage, NY 11714-3533
Phone: 516.803.9687
Fax: 516-396-8738

Technical Contact :
Security, Internet
abuse@cv.net
1111 Stewart Avenue
Bethpage, NY 11714
Phone: 516-803-2400

I'm gonna try that tomorrow, thanks

What is the page load tracer in Firefox 17esr?

»developer.mozilla.org/en ··· _Console

It almost is acting like a cache for websites, I went to a website that used the Springboard video player and the video was being buffered from one of the hicks116 connections. It seems to me to be like OOL is caching parts of popular sites on its own network

Of course they are. All ISPs do that.

They do it only on sites that agreed to do it.
Any ISP that does it w/o site owner's permission should be publicly shamed, flogged and sued.

It is possible that, as with Netflix, OOL has allowed a CDN to set up within its network or even on the edge to reduce their bandwidth use outside the OOL network. If it assigned the IP to the CDN the reverse DNS might give an OOL name. You can check the server type with IDserve

»www.grc.com/id/idserve.htm

I would do it but I am off the OOL network and the name does not resolve for me so I would need the IP and even then it might not respond since I am off network.

No need to get upset, I just wanted to know what it was.

{moving on}

n/m

PLEASE stop playing goober-with-firewall (GWF), for everyone's sake.

You fail to state what KIND of traffic you're seeing in WHAT type of appliance, but said logs only logging hosts with rDNS name (in-addr.arpa PTR records) rather than the actual IPs itself makes them completely unusable. Imagine how many people have set their rDNS to "whitehouse.gov" for fun!

Given that CV has a lot of infrastructure in 167.206.0.0/16, and rDNS names like that are generated based on the IPs, it was trivial to find the actual range:

...
167.206.116.40 hicks116-40.optonline.net
167.206.116.41 hicks116-41.optonline.net
167.206.116.42 hicks116-42.optonline.net
167.206.116.43 hicks116-43.optonline.net
167.206.116.44 hicks116-44.optonline.net
167.206.116.45 hicks116-45.optonline.net
...

$ telnet 167.206.116.42 80
Trying 167.206.116.42...
Connected to hicks116-42.optonline.net.
Escape character is '^]'.
GET / HTTP/1.0

HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 193
Expires: Wed, 03 Apr 2013 16:52:19 GMT
Date: Wed, 03 Apr 2013 16:52:19 GMT
Connection: close

Invalid URL

Invalid URL
The requested URL "/", is invalid.

Reference #9.2674cea7.1365007939.51fe378

Connection closed by foreign host.

Yup, it's an Akamai CDN range, co-located on CV's network - you'll find similar setups at virtually every other ISP providing enduser access to more than 500,000 customers.

OP: Stop being paranoid - you clearly have no idea how that magical Internet of things works nowadays, especially if you're goober-reporting port 80 (http) activity somewhere on your equipment. I think my house generates 1000's of HTTP connects every day, and I wouldn't know what site/traffic/application they belong to, probably 50% of the time. How much such "noise" does an open, but idle (at least as it concerns you) Google or Facebook page make, you say?

Calling tech support about it? Gotta keep the poor schlobs working at the call center laughing, you know. Or crying in desperation and confusion.

Let's play nice here everyone, please.