Skynet Skynet removes 30 banned ranges this morning - should I be worried?

[dickensr4lf]

All,
I've been following this forum for a few years and have been running AsusWRT-Merlin on an RT-AC86U for about 6 months now, but first time posting. I am looking at the logs to Skynet and I saw below this morning (7:25AM EST), where Skynet is reporting 30 fewer Ranges banned. I'm used to seeing that number go up over time, and would expect a correction to remove a error from time to time, but not 30 at one time. Is this legit?

Thanks

 

[Mutzli]

It looks like there was a manual change made to your banned ranges. Your time stamp shows an out of schedule change at 07:25:52, every other entry is on schedule at the top of the hour. Maybe it was a router reboot that triggered a manual update, or a whitelist change was made in option 4.

 

[cptnoblivious]

The number varies significantly as updates are applied for blacklists.

 

[Butterfly Bones]

It looks like there was a manual change made to your banned ranges. Your time stamp shows an out of schedule change at 07:25:52, every other entry is on schedule at the top of the hour. Maybe it was a router reboot that triggered a manual update, or a whitelist change was made in option 4.

Skynet cron always runs the #banmalware event at 25 minutes after some random hour. The #save event are run on the hour, as you state.

25 7 * * * sh /jffs/scripts/firewall banmalware #Skynet_banmalware#
3 1 * * Mon sh /jffs/scripts/firewall update #Skynet_autoupdate#
0 * * * * sh /jffs/scripts/firewall save #Skynet_save#

 

[JaimeZX]

As @cptnoblivious said - the blacklists are constantly updated so you should expect to see day to day variation.

 

[dickensr4lf]

As @cptnoblivious said - the blacklists are constantly updated so you should expect to see day to day variation.

Ok thanks, nothing else looks abnormal. I'll continue to keep an eye on it.