I'm having a look at SSL traffic and requests for domains are being given IPs in the 146.112.255.* and 146.112.250.* networks. Why is this? What is the purpose of these networks? I see a lot of 22.214.171.124 as well. Are these sinkhole IPs?
As an example, why is the destination IP for www.ratesupermarket[.]ca 126.96.36.199?
Please sign in to leave a comment.