I'm having a look at SSL traffic and requests for domains are being given IPs in the 146.112.255.* and 146.112.250.* networks. Why is this? What is the purpose of these networks? I see a lot of 184.108.40.206 as well. Are these sinkhole IPs?
As an example, why is the destination IP for www.ratesupermarket[.]ca 220.127.116.11?
Please sign in to leave a comment.