I'm having a look at SSL traffic and requests for domains are being given IPs in the 146.112.255.* and 146.112.250.* networks. Why is this? What is the purpose of these networks? I see a lot of 188.8.131.52 as well. Are these sinkhole IPs?
As an example, why is the destination IP for www.ratesupermarket[.]ca 184.108.40.206?
Please sign in to leave a comment.