Strange IP adress in Skynet

[j1mb0]

Hello Guys,

I'veseen a strange IP address on the network today and wonder if this might not be a bug in Skynet? My IP settings has been configured correctly.
EDIT: Please have a look at the second last IP address.

 

[dave14305]

It suggests that many of your devices are trying to access banned external IPs. If it's accurate, it would suggest a lot of malware in your network, or an improper manual ban of an IP, or something else.

But it doesn't seem right that the Top 20 Blocked Devices (Outbound) is so much higher than the Top 20 Blocks (Outbound) above it in the screenshot.

Probably best to ask in the SkyNet thread for further help.

 

[j1mb0]

Please have a look at the second last IP address!

I have a lot of hits, because I imported the Windowsspyblockerlist.

 

[Butterfly Bones]

Please have a look at the second last IP address!

I have a lot of hits, because I imported the Windowsspyblockerlist.

Click the OTX link in the section above and read it. It is not considered malicious. There is one CDN address for a guest network, one for T-Mobile. That should help you find what is calling home.

(edit - Guh! waiting moderator approval, for hours.)

 

[QuikSilver]

Kinda blurry but I think it reads.....203.0.113.1?

Looking up that IP shows it belongs to

Spoiler

% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '203.0.113.0 - 203.0.113.255'

% Abuse contact for '203.0.113.0 - 203.0.113.255' is 'abuse@apnic.net'

inetnum: 203.0.113.0 - 203.0.113.255
netname: TEST-NET-3
descr: IANA
descr: RFC5737 Documentation Address Block
country: AU
org: ORG-ARAD1-AP
admin-c: HM20-AP
tech-c: HM20-AP
mnt-by: APNIC-HM
mnt-routes: APNIC-HM
mnt-irt: IRT-APNICRANDNET-AU
status: ASSIGNED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This block is reserved for use in documentation and
remarks: should not be used in any real networks.
remarks: Please see more details at
remarks: http://www.iana.org/go/rfc5737
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
last-modified: 2019-02-06T06:01:59Z
source: APNIC

irt: IRT-APNICRANDNET-AU
address: PO Box 3646
address: South Brisbane, QLD 4101
address: Australia
e-mail: abuse@apnic.net
abuse-mailbox: abuse@apnic.net
admin-c: AR302-AP
tech-c: AR302-AP
auth: # Filtered
mnt-by: MAINT-AU-APNIC-GM85-AP
last-modified: 2011-09-22T03:53:02Z
source: APNIC

organisation: ORG-ARAD1-AP
org-name: APNIC Research and Development
country: AU
address: 6 Cordelia St
phone: +61-7-38583100
fax-no: +61-7-38583199
e-mail: helpdesk@apnic.net
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-10-11T01:28:39Z
source: APNIC

role: APNIC Hostmaster
address: 6 Cordelia Street
address: South Brisbane
address: QLD 4101
country: AU
phone: +61 7 3858 3100
fax-no: +61 7 3858 3199
e-mail: helpdesk@apnic.net
admin-c: AMS11-AP
tech-c: AH256-AP
nic-hdl: HM20-AP
remarks: Administrator for APNIC
notify: hostmaster@apnic.net
mnt-by: MAINT-APNIC-AP
last-modified: 2013-10-23T04:06:51Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US3)