I'm having a look at SSL traffic and requests for domains are being given IPs in the 146.112.255.* and 146.112.250.* networks. Why is this? What is the purpose of these networks? I see a lot of 126.96.36.199 as well. Are these sinkhole IPs?
As an example, why is the destination IP for www.ratesupermarket[.]ca 188.8.131.52?
Please sign in to leave a comment.