NTP - poor reach after 20 hours

farmerjohn · Apr 16, 2021, 1:56 PM

@cool_corona
I'll try going back to multiple pool servers (.us.pool.ntp.org) - hopefully that will improve my current situation (status after 19 hours):

[2.5.1-RELEASE][admin@pfsense.home]/var/log: ntpq -pcrv
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 0.pfsense.pool. .POOL.          16 p    -   64    0    0.000   +0.000   0.000
+tock.sol.net    206.55.64.77     3 u  41m  512   20   37.120   +1.937   1.621
-4.53.160.75 (ns 75.76.123.222    3 u 1722  512   70   26.891   +3.313   1.226
*frigg.fancube.c 107.46.198.112   2 u 1581  512   44   43.347   +3.275   2.363

associd=0 status=0618 leap_none, sync_ntp, 1 event, no_sys_peer,
version="ntpd 4.2.8p15@1.3728-o Fri Feb  5 22:07:56 UTC 2021 (1)",
processor="amd64", system="FreeBSD/12.2-STABLE", leap=00, stratum=3,
precision=-21, rootdelay=49.680, rootdisp=77.172, refid=154.16.245.246,
reftime=e4240ee1.afd0e2c4  Fri, Apr 16 2021  9:25:53.686,
clock=e424150e.f3e02c84  Fri, Apr 16 2021  9:52:14.952, peer=60404, tc=9,
mintc=3, offset=+1.958787, frequency=+37.805, sys_jitter=1.230244,
clk_jitter=3.129, clk_wander=0.225

johnpoz · Apr 16, 2021, 2:24 PM

Make sure your logging your ntp, in the ntp settings.

And look for if ntp is seeing a spike and or resetting for other reasons. Your reaches should be 377, or maybe 1 packet missed now and then, or even a couple..

Those are horrible reach values.. And to be honest, the numbers don't even seem right.. Unless ntp is restarting or you missing a lot of packets..

You shouldn't see numbers like that, unless ntp has reset/restarted and is just starting... Or your loosing a lot of packets in a row..

20 for example, means that you have just restarted and you got 1 packet out of the last 5

10000 = 20 octal

So you have missed the last 4 packets after you got one, and before that you didn't have any.. Or 3 before that was missed 00010000

You really should never see a 20 as it starts up, because it wouldn't count up like that if your getting responses..

Your counts should be
1 = 1
11 = 3
111 = 7
1111 = 17
11111 = 37
111111 = 77
1111111 = 177
11111111 = 377

Your reach values are pointing to a lot of unanswered queries..

your 44 value for example would be this for the last 8 packets..

00100100

So your only getting 1 out of every 3 queries?

70 = 00111000

So you got 3 in a row, and then last 3 nothing..

farmerjohn · Apr 16, 2021, 4:23 PM

@johnpoz
I enabled the two logging options. here are the last 15 - not sure if 'unreachable' lines are a concern or normal.

[2.5.1-RELEASE][admin@pfsense.home]/var/log: cat ntpd.log | tail -15
Apr 16 11:45:37 pfsense ntpd[76193]: Soliciting pool server 142.147.92.5
Apr 16 11:45:41 pfsense ntpd[76193]: 69.89.207.99 101a 8a sys_peer
Apr 16 11:45:41 pfsense ntpd[76193]: 45.79.51.42 0014 84 reachable
Apr 16 11:46:44 pfsense ntpd[76193]: Soliciting pool server 209.50.63.74
Apr 16 11:47:52 pfsense ntpd[76193]: Soliciting pool server 142.147.92.5
Apr 16 11:49:02 pfsense ntpd[76193]: Soliciting pool server 75.76.123.222
Apr 16 11:49:02 pfsense ntpd[76193]: 75.76.123.222 0011 81 mobilize assoc 33714
Apr 16 11:49:03 pfsense ntpd[76193]: Soliciting pool server 184.105.182.7
Apr 16 11:49:03 pfsense ntpd[76193]: 75.76.123.222 0014 84 reachable
Apr 16 11:50:12 pfsense ntpd[76193]: Soliciting pool server 172.86.181.78
Apr 16 11:51:18 pfsense ntpd[76193]: Soliciting pool server 72.14.181.128
Apr 16 11:52:25 pfsense ntpd[76193]: Soliciting pool server 213.32.40.221
Apr 16 11:52:38 pfsense ntpd[76193]: 216.177.181.129 0014 84 reachable
Apr 16 11:54:29 pfsense ntpd[76193]: 69.89.207.99 0613 83 unreachable
Apr 16 11:55:52 pfsense ntpd[76193]: 45.79.51.42 0013 83 unreachable

johnpoz · Apr 16, 2021, 4:40 PM

your prob going to want to look at more than the last 15 entries..

But unreachable isn't good no..

You can tell from your reach numbers your having a real hard time getting responses from the ntp your trying to talk too..

Those numbers your showing for reach values are not indicative of good connectivity.. Take your numbers and convert the octal number to a 8 digit binary and you can see response or no response for the last 8 you have sent.. To that specific IP.. When you are seeing the numbers you are seeing.. You have hard time talking to those ntp servers.. Be it they are not getting your query, or they are not just answering.. But those reach numbers are not good for keeping good time..

edit:
Maybe vs using pool, try some specific one that are in your geographic area
https://support.ntp.org/bin/view/Servers/StratumOneTimeServers
https://support.ntp.org/bin/view/Servers/StratumTwoTimeServers

There are plenty of ntp you can specific point to on the net.. You normally want something close as possible to you, to min the delay. But you for sure need something you can reliably talk too..

Add say time.cloudflare.com

They have like 180+ locations via anycast.. You should be able to hopefully talk to something reliable via that..
https://developers.cloudflare.com/time-services/ntp/usage

farmerjohn · Apr 16, 2021, 5:33 PM

@johnpoz
Changed to 5 individual servers closest to me. Here is status after 20 minutes:

[2.5.1-RELEASE][admin@pfsense.home]/var/log: ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 time.cloudflare .INIT.          16 u    -  512    0    0.000   +0.000   0.000
 rolex.netservic .INIT.          16 u    -  512    0    0.000   +0.000   0.000
 rb.steadfastdns 208.100.0.253    2 u  176   64   74   18.244   +0.095   1.642
 time.skylineser .INIT.          16 u    -  512    0    0.000   +0.000   0.000
*ntp.your.org    204.9.51.33      2 u  701   64    0   20.320   +0.466   0.460

johnpoz · Apr 16, 2021, 6:36 PM

Those are not working ;)

Your isp blocking ntp?

The only one your talking to at all with a reach of 74?

so 00111100..

farmerjohn · Apr 16, 2021, 7:58 PM

@johnpoz
how can i determine if isp is blocking ntp? There is some 123 traffic on WAN interface getting blocked - not sure if due to isp.

I tried to upload image to make things easier for you to troubleshoot, but received notification "something went wrong while parsing server response netgate"

farmerjohn · Apr 16, 2021, 8:03 PM

@johnpoz
upload works on diffeerent browser (firefox-yes, brave no-go)

johnpoz · Apr 16, 2021, 8:10 PM

@farmerjohn said in NTP - poor reach after 20 hours:

There is some 123 traffic on WAN interface getting blocked - not sure if due to isp.

Yeah doesn't sound good.. If that was your return answer from your ntp query..

As to tell if its an isp/internet issue - would sniff on your wan, you would see your ntp queries go out - but never get a response in your sniff. As to that being your isp blocking, or just getting lost in the internet, or the place your trying to talk not answering you - that is the question..

Do you have a vps or something you can fire up, and run ntp server on it - and see if you can talk to that?

If you get a glitch trying to post an image, try again in a few minutes. In the past I have had issues posting images, but try again in few minutes and normally works.

Are you noticing any other issues with your internet connection. Are your states resetting? If your states reset, then yeah return of a ntp query would be blocked because there is no state to allow the traffic back in. Yeah udp is not stateful ;) But pf keeps track of it via a state entry..

edit: Are any of those IPs of NTP servers your trying to talk too?

Doesn't look like it because the source port is not 123.. Looks like they are asking you for ntp.. Do you have your IP listed in the ntp pool or something?

bingo600 · Apr 16, 2021, 8:14 PM

@johnpoz

Just looked up the 123.170.x.x's
I doubt they are NTP ansvers

Seems like CN "probes"

/Bingo

johnpoz · Apr 16, 2021, 8:16 PM

Yeah if it was him asking the source port would be different... That seems to be quite a few probes ;) Maybe that is causing him some grief in trying to get ntp working?

johnpoz · Apr 16, 2021, 8:45 PM

@farmerjohn I think @bingo600 is going to reach out to you via PM with a ntp server you can point too.

I could also have you point directly to my IP, my local ntp server is part of the pool.. This way if know your IP can sniff to see if the queries are even getting to me, etc.

farmerjohn · Apr 16, 2021, 9:35 PM

@johnpoz

Do you have a vps or something you can fire up, and run ntp server on it - and see if you can talk to that?

unfortunately no - only on my LAN, but that probably doesn't count.

Do you have your IP listed in the ntp pool or something?

no, just china and some other unknowns hitting me via 123

Are you noticing any other issues with your internet connection.

One thing I've done recently is enable fq_codel and under general settings / advanced / Firewall & NAT, lowered "TCP Established" to 86400 and "Firewall Optimization" from conservative to normal.

Also setup openvpn on OPT1 and getting a lot of blocked 853 traffic in log, but have not noticed any connectivity issues browsing on openvpn clients.

AKEGEC · Apr 16, 2021, 9:42 PM

@farmerjohn smart move to use Quad9 DNS, it blocks a lot malicious sites.

johnpoz · Apr 16, 2021, 9:45 PM

Those are all out of state blocks.. see the R and Fs those are RST and FIN packets.. Those are what close a session. If the session has already been closed then those would be blocked. etc..

But why are you seeing them on opt1? And your hiding what I assume is your public IP that ends in .37 there? Why would that traffic be inbound to opt1? Is that .37 IP your hiding a rfc1918 address on your internal network?

farmerjohn · Apr 16, 2021, 10:06 PM

@johnpoz

ip that ends in .37 is my public IP.

Why would that traffic be inbound to opt1?

i wish i could answer that.

here is a short sample of tcpdump, I'm terrible at interpreting this, but posted here in case something obvious.

17:45:02.408011 IP (tos 0x0, ttl 255, id 43242, offset 0, flags [none], proto UDP (17), length 76)
    my.public.ip.037.res.spectrum.com.62388 > time-a-b.nist.gov.ntp: [udp sum ok] NTPv4, length 48
	Client, Leap indicator:  (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
	Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
	  Reference Timestamp:  0.000000000
	  Originator Timestamp: 0.000000000
	  Receive Timestamp:    0.000000000
	  Transmit Timestamp:   0.000000000
	    Originator - Receive Timestamp:  0.000000000
	    Originator - Transmit Timestamp: 0.000000000
17:45:02.449490 IP (tos 0x0, ttl 48, id 27186, offset 0, flags [none], proto UDP (17), length 76)
    time-a-b.nist.gov.ntp > my.public.ip.037.res.spectrum.com.62388: [udp sum ok] NTPv3, length 48
	Server, Leap indicator:  (0), Stratum 1 (primary reference), poll 13 (8192s), precision -29
	Root Delay: 0.000244, Root dispersion: 0.000488, Reference-ID: NIST
	  Reference Timestamp:  3827598208.000000000 (2021/04/16 17:43:28)
	  Originator Timestamp: 0.000000000
	  Receive Timestamp:    3827598302.430281727 (2021/04/16 17:45:02)
	  Transmit Timestamp:   3827598302.430282955 (2021/04/16 17:45:02)
	    Originator - Receive Timestamp:  3827598302.430281727 (2021/04/16 17:45:02)
	    Originator - Transmit Timestamp: 3827598302.430282955 (2021/04/16 17:45:02)

johnpoz · Apr 16, 2021, 10:24 PM

@farmerjohn said in NTP - poor reach after 20 hours:

i wish i could answer that.

OPT1 is what interface? And why would the source of the traffic "into" opt1 be your public IP? That makes ZERO sense..

How would you be seeing inbound traffic into a lan side interface with your public IP On it???

I don't even see how that would be possible???

AKEGEC · Apr 16, 2021, 10:58 PM

@farmerjohn Things are not always what they seem. It doesn't mean that China hits on you, it could be some bad actors who work at your local bank or organization and use China's network. Johnpoz is right, it's very strange inbound connections on OPT1.

Just a suggestion, you could make a new outbound floating rules with selected all interfaces and blocks China networks. In your case, make two aliases, one for ChinaNet and the other ChinaUnicorn. After that see firewall log, which interfaces are blocked.

ChinaNet:

1.180.0.0/14 
1.192.0.0/13 
1.204.0.0/14 
1.48.0.0/15 
1.50.0.0/16 
1.68.0.0/14 
1.80.0.0/13 
1.92.0.0/20 
101.248.0.0/15 
101.248.0.0/16 
103.8.32.0/24 
106.0.4.0/22 
106.108.0.0/15 
106.110.0.0/15 
106.112.0.0/14 
106.112.0.0/16 
106.113.0.0/16 
106.114.0.0/16 
106.115.0.0/16 
106.116.0.0/15 
106.116.0.0/16 
106.117.0.0/16 
106.118.0.0/16 
106.119.0.0/16 
106.122.0.0/16 
106.123.0.0/16 
106.124.0.0/16 
106.125.0.0/16 
106.126.0.0/16 
106.127.0.0/16 
106.16.0.0/15 
106.18.0.0/15 
106.224.0.0/14 
106.228.0.0/16 
106.229.0.0/16 
106.230.0.0/16 
106.32.0.0/16 
106.33.0.0/16 
106.34.0.0/16 
106.35.0.0/16 
106.36.0.0/16 
106.4.0.0/15 
106.40.0.0/16 
106.41.0.0/16 
106.42.0.0/16 
106.43.0.0/16 
106.44.0.0/16 
106.45.0.0/16 
106.46.0.0/16 
106.56.0.0/15 
106.58.0.0/15 
106.6.0.0/16 
106.60.0.0/15 
106.62.0.0/16 
106.7.0.0/16 
106.8.0.0/16 
106.80.0.0/15 
106.82.0.0/15 
106.84.0.0/15 
106.86.0.0/15 
106.88.0.0/15 
106.9.0.0/16 
106.90.0.0/15 
106.92.0.0/16 
110.152.0.0/14 
110.156.0.0/15 
110.166.0.0/15 
110.176.0.0/13 
110.184.0.0/13 
110.190.90.0/24 
110.190.91.0/24 
110.190.92.0/24 
110.190.94.0/24 
110.80.0.0/13 
110.88.0.0/14 
111.112.0.0/15 
111.120.0.0/14 
111.124.0.0/16 
111.126.0.0/15 
111.170.0.0/16 
111.172.0.0/14 
111.176.0.0/13 
111.224.0.0/14 
111.72.0.0/13 
112.100.0.0/14 
112.112.0.0/14 
112.112.162.0/24 
112.116.0.0/15 
112.66.0.0/15 
112.98.0.0/15 
113.112.0.0/13 
113.12.0.0/14 
113.120.0.0/13 
113.128.0.0/15 
113.132.0.0/14 
113.136.0.0/13 
113.16.0.0/15 
113.214.0.0/15 
113.218.0.0/15 
113.220.0.0/14 
113.24.0.0/14 
113.240.0.0/13 
113.248.0.0/14 
113.59.224.0/22 
113.62.0.0/15 
113.64.0.0/11 
113.96.0.0/12 
114.104.0.0/14 
114.113.250.0/24 
114.114.112.0/21 
114.135.0.0/16 
114.138.0.0/15 
114.216.0.0/13 
114.224.0.0/12 
114.96.0.0/13 
115.148.0.0/14 
115.152.0.0/15 
115.168.0.0/14 
115.168.0.0/17 
115.168.0.0/18 
115.168.32.0/19 
115.168.56.0/24 
115.168.64.0/19 
115.169.0.0/16 
115.170.0.0/16 
115.192.0.0/11 
115.224.0.0/12 
116.1.0.0/16 
116.16.0.0/12 
116.207.0.0/16 
116.208.0.0/14 
116.248.0.0/15 
116.252.0.0/15 
116.4.0.0/14 
116.52.0.0/14 
116.69.0.0/16 
116.8.0.0/14 
117.21.0.0/16 
117.22.0.0/15 
117.24.0.0/13 
117.32.0.0/13 
117.40.0.0/14 
117.44.0.0/15 
117.57.0.0/16 
117.60.0.0/14 
117.64.0.0/13 
117.79.80.0/20 
117.80.0.0/12 
117.80.0.0/13 
118.103.244.0/22 
118.112.0.0/13 
118.120.0.0/14 
118.124.0.0/15 
118.180.0.0/14 
118.184.152.0/21 
118.186.0.0/15 
118.192.0.0/16 
118.213.0.0/16 
118.215.192.0/19 
118.239.0.0/16 
118.248.0.0/13 
118.84.0.0/15 
118.85.205.0/24 
118.85.215.0/24 
119.0.0.0/15 
119.120.0.0/13 
119.128.0.0/12 
119.144.0.0/14 
119.20.0.0/15 
119.37.192.0/21 
119.41.0.0/16 
119.60.0.0/16 
119.84.0.0/14 
119.96.0.0/13 
120.31.128.0/20 
120.31.66.0/23 
120.31.68.0/22 
120.32.0.0/13 
120.40.0.0/14 
120.68.0.0/14 
121.201.0.0/17 
121.204.0.0/14 
121.224.0.0/12 
121.32.0.0/14 
121.56.0.0/15 
121.58.0.0/17 
121.59.0.0/23 
121.60.0.0/14 
121.8.0.0/13 
122.10.0.0/17 
122.102.94.0/23 
122.224.0.0/12 
122.229.8.0/22 
122.240.0.0/13 
122.4.0.0/14 
123.101.0.0/16 
123.137.0.0/16 
123.149.0.0/16 
123.160.0.0/14 
123.164.0.0/14 
123.168.0.0/14 
123.172.0.0/15 
123.174.0.0/15 
123.177.0.0/16 
123.178.0.0/15 
123.180.0.0/14 
123.184.0.0/14 
123.197.0.0/17 
123.244.0.0/14 
123.52.0.0/14 
123.96.0.0/15 
124.112.0.0/15 
124.114.0.0/15 
124.115.0.0/16 
124.116.0.0/16 
124.117.0.0/16 
124.118.0.0/15 
124.172.0.0/15 
124.224.0.0/16 
124.225.0.0/16 
124.226.0.0/15 
124.227.128.0/17 
124.228.0.0/14 
124.232.0.0/15 
124.234.0.0/15 
124.236.0.0/14 
124.29.0.0/17 
124.31.0.0/16 
124.72.0.0/16 
124.73.0.0/16 
124.74.0.0/15 
124.76.0.0/14 
125.104.0.0/13 
125.112.0.0/12 
125.171.0.0/16 
125.210.0.0/16 
125.64.0.0/13 
125.72.0.0/16 
125.73.0.0/16 
125.74.0.0/15 
125.76.0.0/17 
125.76.128.0/17 
125.77.0.0/16 
125.78.0.0/15 
125.80.0.0/13 
125.88.0.0/13 
139.189.0.0/16 
139.200.0.0/16 
139.201.0.0/16 
139.202.0.0/16 
139.203.0.0/16 
139.204.0.0/15 
139.206.0.0/16 
139.207.0.0/16 
14.104.0.0/13 
14.112.0.0/12 
14.134.0.0/15 
14.144.0.0/12 
14.16.0.0/12 
14.208.0.0/12 
140.224.0.0/16 
140.237.0.0/16 
140.240.0.0/16 
140.243.0.0/16 
140.249.0.0/16 
140.250.0.0/16 
140.255.0.0/16 
140.75.0.0/16 
144.0.0.0/16 
144.12.0.0/16 
144.123.0.0/16 
144.123.32.0/19 
144.255.0.0/16 
144.52.0.0/16 
144.7.0.0/17 
146.222.79.0/24 
146.222.81.0/24 
146.222.94.0/24 
147.78.134.0/23 
150.138.0.0/15 
153.118.0.0/15 
154.72.44.0/24 
157.119.72.0/24 
171.10.0.0/15 
171.10.0.0/16 
171.104.0.0/14 
171.104.0.0/16 
171.108.0.0/16 
171.109.0.0/16 
171.11.0.0/16 
171.110.0.0/16 
171.111.0.0/16 
171.112.0.0/15 
171.114.0.0/15 
171.12.0.0/16 
171.13.0.0/16 
171.14.0.0/16 
171.15.0.0/16 
171.208.0.0/12 
171.40.0.0/15 
171.42.0.0/16 
171.43.0.0/16 
171.44.0.0/16 
171.8.0.0/15 
171.80.0.0/14 
171.88.0.0/13 
175.0.0.0/12 
175.30.0.0/15 
180.136.0.0/13 
180.96.0.0/11 
182.128.0.0/12 
182.144.0.0/13 
182.145.192.0/23 
182.145.194.0/24 
182.200.0.0/13 
182.240.0.0/13 
182.32.0.0/12 
182.84.0.0/14 
182.96.0.0/12 
183.0.0.0/10 
183.128.0.0/11 
183.160.0.0/13 
183.64.0.0/13 
183.78.180.0/22 
183.91.40.0/21 
183.91.44.0/24 
183.91.56.0/24 
202.100.0.0/18 
202.100.128.0/19 
202.100.160.0/19 
202.100.192.0/18 
202.100.64.0/19 
202.100.96.0/19 
202.101.0.0/18 
202.101.128.0/19 
202.101.160.0/19 
202.101.192.0/18 
202.101.64.0/19 
202.101.96.0/19 
202.102.0.0/17 
202.102.192.0/19 
202.103.0.0/18 
202.103.128.0/18 
202.103.192.0/18 
202.103.64.0/18 
202.104.0.0/15 
202.105.0.0/16 
202.107.128.0/18 
202.107.192.0/18 
202.109.0.0/17 
202.109.128.0/18 
202.109.192.0/18 
202.110.128.0/18 
202.111.0.0/17 
202.111.192.0/18 
202.111.192.0/19 
202.125.176.0/20 
202.130.248.0/21 
202.141.160.0/20 
202.173.224.0/19 
202.180.128.0/19 
202.59.214.0/24 
202.60.132.0/22 
202.62.112.0/22 
202.73.128.0/22 
202.75.216.0/22 
202.75.220.0/22 
202.80.192.0/22 
202.91.240.0/21 
202.91.248.0/22 
202.96.112.0/20 
202.96.128.0/18 
202.96.96.0/20 
202.97.0.0/19 
202.97.11.0/24 
202.97.3.0/24 
202.97.32.0/19 
202.97.62.0/24 
202.97.80.0/20 
202.97.96.0/19 
202.98.128.0/19 
202.98.160.0/19 
202.98.192.0/19 
202.98.224.0/19 
202.98.32.0/19 
202.98.64.0/19 
202.98.96.0/19 
203.0.104.0/21 
203.110.208.0/20 
203.110.232.0/23 
203.119.114.0/23 
203.148.86.0/23 
203.161.192.0/19 
203.170.58.0/23 
203.175.192.0/18 
203.191.144.0/21 
203.191.25.0/24 
203.2.64.0/21 
203.207.200.0/22 
203.215.232.0/24 
203.215.233.0/24 
203.215.235.0/24 
203.215.236.0/24 
203.25.208.0/20 
203.34.106.0/24 
203.34.113.0/24 
203.34.147.0/24 
203.34.150.0/24 
203.34.161.0/24 
203.34.162.0/24 
203.34.187.0/24 
203.34.21.0/24 
203.34.232.0/24 
203.34.240.0/24 
203.34.242.0/24 
203.34.245.0/24 
203.34.251.0/24 
203.34.27.0/24 
203.34.39.0/24 
203.34.4.0/24 
203.34.54.0/24 
203.34.67.0/24 
203.34.69.0/24 
203.34.76.0/24 
203.62.131.0/24 
203.62.139.0/24 
203.62.2.0/24 
203.86.0.0/19 
203.88.192.0/19 
210.185.192.0/18 
210.25.0.0/17 
210.73.128.0/19 
210.73.192.0/19 
210.74.224.0/19 
210.75.0.0/18 
210.75.0.0/19 
210.75.32.0/19 
210.76.64.0/19 
210.77.160.0/20 
211.102.80.0/20 
211.144.160.0/20 
211.147.224.0/19 
211.148.128.0/19 
211.152.160.0/19 
211.152.64.0/19 
211.155.16.0/20 
211.155.224.0/21 
211.156.112.0/20 
211.156.176.0/20 
211.156.240.0/20 
211.159.64.0/20 
211.167.0.0/20 
211.167.16.0/22 
211.88.0.0/16 
218.0.0.0/16 
218.108.0.0/15 
218.13.0.0/16 
218.14.0.0/15 
218.16.0.0/14 
218.2.0.0/16 
218.20.0.0/16 
218.21.0.0/19 
218.21.32.0/20 
218.21.48.0/20 
218.21.64.0/18 
218.22.0.0/15 
218.240.0.0/18 
218.3.0.0/16 
218.30.0.0/15 
218.30.0.0/20 
218.30.128.0/19 
218.30.130.0/23 
218.30.139.0/24 
218.30.146.0/23 
218.30.158.0/24 
218.30.16.0/22 
218.30.160.0/19 
218.30.167.0/24 
218.30.168.0/24 
218.30.20.0/22 
218.30.224.0/19 
218.30.30.0/23 
218.30.33.0/24 
218.30.34.0/24 
218.30.36.0/24 
218.30.53.0/24 
218.30.56.0/24 
218.30.58.0/24 
218.30.60.0/24 
218.30.61.0/24 
218.30.66.0/23 
218.30.80.0/22 
218.30.84.0/23 
218.31.0.0/16 
218.4.0.0/16 
218.5.0.0/16 
218.6.0.0/17 
218.6.128.0/17 
218.62.128.0/17 
218.62.128.0/19 
218.62.160.0/19 
218.62.192.0/19 
218.62.224.0/19 
218.63.0.0/16 
218.64.0.0/16 
218.65.0.0/17 
218.65.128.0/17 
218.65.144.0/20 
218.66.0.0/16 
218.67.0.0/17 
218.70.0.0/16 
218.71.0.0/16 
218.72.0.0/15 
218.74.0.0/16 
218.74.17.0/24 
218.75.0.0/17 
218.75.128.0/17 
218.76.0.0/16 
218.77.0.0/17 
218.77.126.0/23 
218.77.128.0/17 
218.84.0.0/16 
218.85.0.0/16 
218.86.0.0/17 
218.86.128.0/17 
218.87.0.0/16 
218.88.0.0/16 
218.89.0.0/16 
218.90.0.0/16 
218.91.0.0/16 
218.92.0.0/16 
218.93.0.0/16 
218.94.0.0/16 
218.95.0.0/17 
218.95.128.0/18 
218.95.192.0/19 
218.95.224.0/19 
218.97.0.0/23 
219.128.0.0/13 
219.136.0.0/15 
219.138.0.0/15 
219.140.0.0/16 
219.141.0.0/17 
219.144.0.0/15 
219.144.0.0/16 
219.145.0.0/16 
219.146.0.0/16 
219.146.24.0/22 
219.147.0.0/17 
219.147.128.0/17 
219.147.32.0/20 
219.148.0.0/17 
219.148.128.0/19 
219.148.160.0/19 
219.148.192.0/18 
219.148.215.0/24 
219.149.0.0/17 
219.149.128.0/18 
219.149.192.0/18 
219.150.0.0/19 
219.150.112.0/20 
219.150.128.0/17 
219.151.0.0/18 
219.151.0.0/19 
219.151.128.0/17 
219.151.32.0/19 
219.152.0.0/15 
219.159.128.0/17 
219.159.64.0/18 
219.82.0.0/16 
220.160.0.0/15 
220.162.0.0/16 
220.163.0.0/16 
220.164.0.0/15 
220.166.0.0/16 
220.167.0.0/17 
220.167.128.0/17 
220.168.0.0/15 
220.170.0.0/16 
220.171.0.0/17 
220.171.128.0/18 
220.171.192.0/18 
220.172.0.0/16 
220.173.0.0/16 
220.174.0.0/16 
220.175.0.0/16 
220.176.0.0/15 
220.178.0.0/15 
220.180.0.0/16 
220.181.0.0/16 
220.182.0.0/18 
220.184.0.0/13 
220.231.128.0/17 
221.136.0.0/16 
221.224.0.0/13 
221.231.151.0/24 
221.232.0.0/14 
221.236.0.0/16 
221.237.0.0/16 
222.168.0.0/15 
222.170.0.0/15 
222.172.0.0/17 
222.172.128.0/17 
222.173.0.0/16 
222.174.0.0/15 
222.176.0.0/13 
222.184.0.0/13 
222.208.0.0/13 
222.216.0.0/15 
222.218.0.0/16 
222.219.0.0/16 
222.220.0.0/15 
222.222.0.0/15 
222.240.0.0/13 
222.74.0.0/16 
222.75.0.0/16 
222.76.0.0/14 
222.80.0.0/15 
222.82.0.0/16 
222.83.0.0/17 
222.83.128.0/17 
222.84.0.0/16 
222.85.0.0/17 
222.85.128.0/17 
222.86.0.0/15 
222.88.0.0/15 
222.90.0.0/15 
222.91.0.0/16 
222.92.0.0/14 
223.144.0.0/12 
223.198.0.0/15 
223.214.0.0/15 
223.220.0.0/15 
223.240.0.0/13 
223.8.0.0/13 
27.128.0.0/15 
27.148.0.0/14 
27.152.0.0/13 
27.16.0.0/12 
27.184.0.0/13 
27.224.0.0/14 
27.54.224.0/19 
36.1.0.0/16 
36.100.0.0/16 
36.101.0.0/16 
36.102.0.0/16 
36.103.0.0/16 
36.104.0.0/16 
36.105.0.0/16 
36.106.0.0/16 
36.107.0.0/16 
36.108.0.0/16 
36.109.0.0/16 
36.111.0.0/16 
36.111.72.0/21 
36.112.13.0/24 
36.16.0.0/12 
36.4.0.0/14 
36.40.0.0/14 
36.44.0.0/15 
36.46.0.0/16 
36.47.0.0/16 
36.48.0.0/16 
36.49.0.0/16 
36.56.0.0/14 
36.60.0.0/15 
36.62.0.0/15 
36.96.0.0/16 
36.97.0.0/16 
36.98.0.0/16 
36.99.0.0/16 
42.100.0.0/15 
42.102.0.0/16 
42.103.0.0/16 
42.184.0.0/16 
42.185.0.0/16 
42.202.0.0/15 
42.242.0.0/15 
42.248.0.0/15 
42.88.0.0/15 
42.90.0.0/15 
42.92.0.0/15 
42.94.0.0/16 
42.95.0.0/16 
42.97.0.0/16 
42.99.0.0/18 
49.112.0.0/13 
49.64.0.0/11 
49.90.0.0/15 
5.154.144.0/22 
58.100.0.0/15 
58.208.0.0/12 
58.210.230.0/23 
58.215.13.0/24 
58.32.0.0/13 
58.40.0.0/15 
58.42.0.0/16 
58.43.0.0/16 
58.44.0.0/14 
58.48.0.0/13 
58.56.0.0/15 
58.58.0.0/16 
58.59.0.0/17 
58.59.128.0/17 
58.60.0.0/14 
58.66.0.0/15 
58.99.128.0/17 
59.107.0.0/17 
59.172.0.0/14 
59.32.0.0/13 
59.40.0.0/15 
59.42.0.0/16 
59.44.0.0/14 
59.48.0.0/16 
59.49.0.0/17 
59.49.128.0/17 
59.50.0.0/16 
59.51.0.0/17 
59.51.128.0/17 
59.52.0.0/14 
59.56.0.0/14 
59.60.0.0/15 
59.62.0.0/15 
59.82.64.0/18 
59.83.128.0/18 
60.160.0.0/15 
60.162.0.0/15 
60.164.0.0/15 
60.166.0.0/15 
60.168.0.0/13 
60.176.0.0/12 
60.235.0.0/16 
60.55.0.0/16 
61.128.0.0/17 
61.128.128.0/17 
61.130.0.0/16 
61.131.0.0/17 
61.131.128.0/17 
61.132.0.0/17 
61.132.128.0/17 
61.133.128.0/18 
61.133.192.0/19 
61.133.224.0/19 
61.134.0.0/18 
61.134.64.0/19 
61.136.128.0/17 
61.137.0.0/17 
61.137.0.0/19 
61.137.126.0/24 
61.137.32.0/20 
61.137.48.0/21 
61.137.56.0/22 
61.138.192.0/19 
61.138.224.0/19 
61.139.0.0/17 
61.139.192.0/18 
61.139.192.0/20 
61.140.0.0/14 
61.144.0.0/15 
61.146.0.0/16 
61.147.0.0/16 
61.150.0.0/17 
61.150.128.0/17 
61.153.0.0/16 
61.154.0.0/16 
61.154.148.0/22 
61.154.152.0/21 
61.154.160.0/21 
61.154.176.0/21 
61.155.0.0/16 
61.157.0.0/16 
61.159.112.0/21 
61.159.120.0/21 
61.159.128.0/18 
61.159.192.0/18 
61.159.216.0/23 
61.159.220.0/22 
61.159.64.0/18 
61.159.64.0/20 
61.159.80.0/21 
61.159.88.0/21 
61.159.96.0/20 
61.160.0.0/16 
61.161.64.0/18 
61.164.0.0/16 
61.166.0.0/16 
61.166.192.0/20 
61.166.208.0/22 
61.166.212.0/23 
61.166.216.0/22 
61.166.220.0/23 
61.166.222.0/24 
61.170.0.0/16 
61.174.0.0/15 
61.177.0.0/16 
61.178.0.0/16 
61.178.5.0/24 
61.180.0.0/17 
61.183.0.0/16 
61.184.0.0/16 
61.185.0.0/16 
61.186.0.0/17 
61.186.0.0/18 
61.186.128.0/17 
61.186.64.0/18 
61.187.0.0/16 
61.188.0.0/16 
61.189.128.0/17 
61.190.0.0/15 
63.140.0.0/24 
66.102.240.0/21 
66.102.245.0/24 
66.102.248.0/22 
66.102.255.0/24 
69.163.104.0/24 
81.173.16.0/24 
81.173.17.0/24 
81.173.18.0/24 
81.173.19.0/24 
81.173.20.0/24 
81.173.21.0/24 
81.173.22.0/24 
81.173.23.0/24

AKEGEC · Apr 16, 2021, 10:58 PM

ChinaUnicorn:

1.188.0.0/14
1.24.0.0/13
1.56.0.0/13
101.125.0.0/23
101.125.2.0/23
101.125.250.0/23
101.125.4.0/23
101.16.0.0/12
101.198.196.0/22
101.199.196.0/22
101.199.48.0/20
101.204.0.0/14
101.251.144.0/20
101.251.144.0/21
101.251.160.0/21
101.64.0.0/13
101.72.0.0/14
103.107.188.0/22
103.110.132.0/22
103.110.156.0/22
103.114.100.0/22
103.120.224.0/22
103.135.80.0/23
103.14.132.0/23
103.143.16.0/22
103.151.142.0/23
103.152.76.0/23
103.18.224.0/22
103.192.4.0/23
103.193.188.0/22
103.198.64.0/22
103.204.72.0/22
103.205.192.0/22
103.205.252.0/22
103.207.228.0/22
103.21.116.0/22
103.211.220.0/22
103.211.96.0/22
103.213.96.0/22
103.214.48.0/22
103.219.28.0/22
103.219.32.0/21
103.22.188.0/22
103.220.124.0/22
103.221.140.0/22
103.224.228.0/23
103.227.120.0/23
103.227.136.0/22
103.227.228.0/22
103.229.148.0/22
103.229.212.0/22
103.231.144.0/24
103.231.145.0/24
103.231.146.0/24
103.232.144.0/22
103.233.4.0/22
103.234.56.0/22
103.236.120.0/22
103.236.240.0/22
103.238.160.0/23
103.239.244.0/22
103.239.68.0/22
103.24.228.0/22
103.240.124.0/22
103.240.36.0/22
103.240.84.0/22
103.244.164.0/22
103.246.152.0/22
103.246.8.0/22
103.248.102.0/23
103.248.152.0/23
103.248.154.0/23
103.250.216.0/22
103.250.248.0/22
103.250.32.0/22
103.251.124.0/22
103.251.160.0/22
103.251.240.0/22
103.251.96.0/22
103.252.204.0/22
103.252.232.0/22
103.252.248.0/22
103.253.224.0/22
103.253.60.0/22
103.255.200.0/22
103.255.88.0/22
103.255.92.0/22
103.27.240.0/22
103.27.4.0/22
103.28.204.0/22
103.3.112.0/22
103.3.124.0/22
103.3.136.0/22
103.3.140.0/22
103.3.152.0/22
103.3.96.0/22
103.31.200.0/22
103.35.220.0/23
103.36.208.0/22
103.36.28.0/22
103.38.40.0/22
103.39.88.0/22
103.40.12.0/22
103.40.192.0/22
103.40.232.0/22
103.41.164.0/22
103.44.80.0/22
103.45.160.0/22
103.45.72.0/22
103.45.76.0/22
103.46.128.0/21
103.46.136.0/22
103.5.168.0/22
103.52.172.0/22
103.52.176.0/22
103.53.204.0/22
103.56.32.0/22
103.56.60.0/22
103.59.124.0/22
103.7.212.0/22
103.78.64.0/23
103.78.66.0/23
103.8.34.0/23
103.81.48.0/22
103.83.72.0/22
103.85.84.0/23
103.85.86.0/23
103.9.248.0/22
103.90.92.0/22
103.91.208.0/22
103.92.132.0/22
103.95.220.0/23
103.95.222.0/24
103.98.168.0/22
103.98.44.0/23
106.3.208.0/21
110.16.0.0/14
110.228.0.0/14
110.240.0.0/12
110.44.12.0/22
110.52.0.0/15
110.6.0.0/15
110.72.0.0/15
111.160.0.0/13
111.160.61.0/24
111.202.242.0/24
111.202.244.0/24
111.202.246.0/24
111.203.27.0/24
111.205.242.0/24
111.205.38.0/24
111.223.12.0/22
111.85.0.0/16
112.109.128.0/17
112.111.0.0/16
112.122.0.0/15
112.132.0.0/16
112.192.0.0/14
112.224.0.0/11
112.80.0.0/13
113.0.0.0/13
113.194.0.0/15
113.200.0.0/15
113.204.0.0/14
113.213.0.0/18
113.213.64.0/19
113.213.96.0/20
113.224.0.0/12
113.31.128.0/21
113.31.136.0/22
113.31.16.0/20
113.31.32.0/20
113.31.80.0/21
113.31.88.0/22
113.31.92.0/23
113.56.0.0/15
113.58.0.0/16
113.59.0.0/17
113.8.0.0/15
113.9.3.0/24
113.9.6.0/24
114.112.144.0/20
114.247.44.0/24
114.255.106.0/24
114.28.248.0/21
114.60.0.0/14
115.173.0.0/19
115.31.64.0/22
115.46.0.0/16
115.48.0.0/12
115.85.192.0/18
116.112.0.0/14
116.116.0.0/15
116.128.224.0/19
116.129.0.0/17
116.129.128.0/18
116.129.192.0/19
116.129.224.0/20
116.129.240.0/22
116.129.244.0/22
116.129.248.0/21
116.130.0.0/16
116.131.0.0/16
116.132.0.0/15
116.135.0.0/18
116.135.128.0/17
116.135.64.0/18
116.136.0.0/15
116.138.0.0/15
116.140.0.0/17
116.140.128.0/18
116.141.0.0/16
116.147.0.0/16
116.148.0.0/16
116.149.0.0/16
116.149.0.0/17
116.149.128.0/17
116.153.0.0/16
116.154.0.0/15
116.162.0.0/16
116.163.0.0/18
116.167.0.0/16
116.168.0.0/16
116.169.0.0/16
116.171.0.0/16
116.172.128.0/17
116.172.64.0/18
116.174.0.0/15
116.176.0.0/16
116.177.0.0/16
116.178.0.0/16
116.179.0.0/16
116.2.0.0/15
116.255.128.0/17
116.78.0.0/16
116.95.0.0/16
117.121.128.0/22
117.121.132.0/22
117.121.136.0/22
117.121.140.0/22
117.48.144.0/20
117.72.255.0/24
117.74.64.0/20
117.8.0.0/13
118.126.128.0/17
118.132.0.0/14
118.184.168.0/21
118.184.176.0/21
118.184.184.0/21
118.184.192.0/19
118.187.0.0/16
118.187.0.0/18
118.187.64.0/18
118.191.12.0/24
118.191.4.0/23
118.191.6.0/23
118.191.8.0/22
118.212.0.0/16
118.26.116.0/22
118.72.0.0/13
118.80.0.0/15
118.88.128.0/17
118.88.32.0/19
118.88.32.0/20
118.88.64.0/18
119.108.0.0/15
119.112.0.0/13
119.162.0.0/15
119.164.0.0/14
119.176.0.0/12
119.233.128.0/17
119.248.0.0/14
119.253.128.0/17
119.255.0.0/18
119.27.64.0/18
119.36.0.0/16
119.38.0.0/21
119.39.0.0/16
119.4.0.0/14
119.40.0.0/19
119.48.0.0/13
119.57.0.0/18
119.62.0.0/16
119.88.128.0/18
119.88.192.0/18
120.0.0.0/12
120.128.0.0/21
120.132.0.0/19
120.132.96.0/20
120.65.0.0/16
120.92.240.0/20
121.16.0.0/13
121.24.0.0/14
121.28.0.0/15
121.30.0.0/16
121.31.0.0/16
121.46.192.0/22
121.46.196.0/22
121.46.200.0/22
121.52.224.0/19
121.76.0.0/15
122.102.64.0/20
122.114.0.0/16
122.136.0.0/13
122.136.96.0/19
122.156.0.0/14
122.188.0.0/14
122.192.0.0/14
122.96.0.0/15
122.97.172.0/22
122.97.176.0/22
122.97.64.0/18
123.117.141.0/24
123.128.0.0/13
123.138.0.0/15
123.144.0.0/14
123.148.0.0/16
123.152.0.0/13
123.188.0.0/14
123.196.0.0/16
123.232.0.0/14
123.234.0.0/18
123.4.0.0/14
123.58.128.0/19
123.8.0.0/13
124.128.0.0/13
124.152.0.0/16
124.160.0.0/16
124.161.0.0/16
124.162.0.0/16
124.163.0.0/16
124.164.0.0/14
124.240.128.0/18
124.249.0.0/17
124.6.64.0/18
124.66.0.0/17
124.67.0.0/16
124.68.128.0/18
124.88.0.0/16
124.89.0.0/17
124.89.128.0/17
124.90.0.0/15
124.92.0.0/14
124.93.0.0/16
124.93.212.0/22
125.211.0.0/16
125.32.0.0/16
125.34.240.0/24
125.34.243.0/24
125.34.244.0/24
125.34.251.0/24
125.34.252.0/24
125.34.253.0/24
125.34.254.0/24
125.35.128.0/17
125.35.128.0/20
125.36.0.0/14
125.40.0.0/13
139.159.112.0/23
139.170.0.0/16
139.208.0.0/13
14.204.0.0/15
144.48.64.0/22
146.196.68.0/22
150.129.136.0/22
150.129.252.0/22
150.242.232.0/22
150.255.0.0/16
153.0.0.0/16
153.101.0.0/16
153.3.0.0/16
153.34.0.0/15
153.36.0.0/15
153.99.0.0/16
157.0.0.0/16
160.202.60.0/22
163.53.168.0/22
171.116.0.0/14
171.120.0.0/13
171.34.0.0/15
171.36.0.0/14
175.106.128.0/17
175.146.0.0/15
175.148.0.0/14
175.152.0.0/14
175.16.0.0/13
175.160.0.0/12
175.184.128.0/18
175.42.0.0/15
175.44.0.0/16
180.129.128.0/17
180.130.0.0/16
180.178.252.0/22
180.95.128.0/17
182.112.0.0/12
182.18.80.0/21
182.18.88.0/21
182.236.160.0/19
182.54.0.0/17
182.88.0.0/14
183.184.0.0/13
183.92.0.0/14
202.102.128.0/18
202.102.224.0/19
202.106.133.0/24
202.106.143.0/24
202.107.0.0/17
202.108.146.0/24
202.108.147.0/24
202.110.0.0/18
202.110.192.0/18
202.110.210.0/24
202.110.224.0/24
202.110.49.0/24
202.110.64.0/18
202.111.128.0/19
202.111.160.0/19
202.122.128.0/24
202.127.112.0/20
202.127.209.0/24
202.38.164.0/23
202.38.166.0/23
202.63.160.0/20
202.75.208.0/21
202.75.208.0/22
202.75.212.0/22
202.90.20.0/22
202.91.224.0/21
202.91.232.0/21
202.96.64.0/19
202.97.128.0/19
202.97.160.0/19
202.97.192.0/18
202.98.0.0/19
202.99.128.0/18
202.99.192.0/19
202.99.21.0/24
202.99.224.0/19
202.99.56.0/24
202.99.64.0/18
203.80.144.0/20
203.93.0.0/24
203.93.144.0/20
203.93.160.0/20
210.12.50.0/24
210.22.48.0/20
210.5.128.0/20
210.51.212.0/22
210.76.160.0/19
210.76.32.0/19
210.76.48.0/20
211.102.128.0/18
211.154.64.0/19
211.155.120.0/21
211.155.232.0/22
211.158.0.0/16
211.162.200.0/22
211.167.96.0/19
211.90.0.0/18
211.90.216.0/21
211.90.224.0/19
211.90.64.0/21
211.90.72.0/21
211.90.80.0/21
211.90.88.0/21
211.90.96.0/19
211.91.0.0/18
211.91.120.0/21
211.91.128.0/19
211.91.160.0/20
211.91.176.0/21
211.91.216.0/21
211.91.224.0/20
211.91.240.0/20
211.91.64.0/20
211.91.80.0/20
211.91.96.0/20
211.92.0.0/17
211.92.128.0/21
211.92.136.0/21
211.92.144.0/20
211.92.160.0/20
211.92.176.0/20
211.92.192.0/19
211.92.224.0/20
211.92.244.0/22
211.93.0.0/21
211.93.128.0/20
211.93.144.0/21
211.93.152.0/21
211.93.16.0/21
211.93.160.0/21
211.93.164.0/22
211.93.168.0/21
211.93.176.0/20
211.93.192.0/21
211.93.204.0/22
211.93.224.0/19
211.93.24.0/21
211.93.32.0/19
211.93.64.0/18
211.93.8.0/21
211.94.192.0/18
211.97.104.0/21
211.97.112.0/20
211.97.128.0/19
211.97.160.0/21
211.97.192.0/18
211.97.64.0/19
211.97.96.0/21
218.10.0.0/16
218.104.128.0/20
218.104.144.0/20
218.104.224.0/19
218.104.64.0/20
218.104.96.0/20
218.106.112.0/20
218.106.144.0/20
218.106.80.0/20
218.106.96.0/22
218.107.192.0/19
218.107.211.0/24
218.11.0.0/16
218.12.0.0/16
218.21.128.0/17
218.21.224.0/20
218.21.240.0/20
218.24.0.0/16
218.24.160.0/20
218.242.0.0/16
218.25.0.0/16
218.26.0.0/16
218.27.0.0/16
218.28.0.0/15
218.56.0.0/15
218.56.32.0/24
218.57.131.0/24
218.57.136.0/24
218.57.139.0/24
218.58.0.0/15
218.60.0.0/16
218.61.0.0/16
218.61.146.0/24
218.62.0.0/17
218.62.33.0/24
218.67.128.0/17
218.67.240.0/24
218.67.241.0/24
218.67.242.0/24
218.68.0.0/15
218.69.250.0/24
218.69.89.0/24
218.69.93.0/24
218.69.95.0/24
218.69.96.0/24
218.7.0.0/16
218.8.0.0/15
218.98.0.0/21
218.98.16.0/21
218.98.24.0/21
218.98.32.0/21
218.98.40.0/21
218.98.48.0/21
218.98.56.0/21
218.98.8.0/21
219.154.0.0/15
219.156.0.0/15
219.158.0.0/20
219.158.0.0/24
219.158.16.0/20
219.158.26.0/24
219.158.32.0/20
219.158.59.0/24
219.158.60.0/24
219.158.61.0/24
219.158.62.0/24
219.158.63.0/24
219.158.96.0/19
219.159.0.0/18
219.233.0.0/16
220.114.250.0/23
220.192.0.0/18
220.192.128.0/19
220.192.160.0/20
220.192.176.0/21
220.192.184.0/22
220.192.192.0/20
220.192.208.0/21
220.192.216.0/21
220.192.224.0/19
220.192.64.0/21
220.192.80.0/20
220.192.96.0/19
220.193.0.0/17
220.194.128.0/18
220.194.192.0/18
220.194.64.0/18
220.195.0.0/19
220.195.128.0/19
220.195.160.0/19
220.195.192.0/18
220.195.32.0/19
220.195.64.0/18
220.197.0.0/17
220.197.160.0/20
220.197.176.0/20
220.197.192.0/19
220.197.224.0/21
220.197.232.0/21
220.197.240.0/20
220.200.0.0/18
220.200.112.0/20
220.200.128.0/20
220.200.148.0/22
220.200.152.0/21
220.200.160.0/19
220.200.192.0/18
220.200.64.0/19
220.200.96.0/20
220.201.0.0/17
220.201.128.0/18
220.201.192.0/18
220.202.0.0/18
220.202.128.0/19
220.202.160.0/19
220.202.192.0/18
220.202.64.0/19
220.202.96.0/19
220.203.32.0/19
220.205.0.0/16
220.207.184.0/22
220.231.0.0/18
220.234.0.0/16
220.248.128.0/19
220.248.160.0/19
220.248.192.0/18
220.248.192.0/19
220.248.224.0/19
220.249.128.0/18
220.249.64.0/18
220.250.0.0/19
220.250.32.0/19
220.250.64.0/18
221.0.0.0/15
221.10.0.0/16
221.10.25.0/24
221.11.0.0/17
221.11.128.0/18
221.11.192.0/19
221.11.224.0/19
221.12.0.0/17
221.12.128.0/18
221.13.0.0/18
221.13.128.0/17
221.13.64.0/19
221.13.96.0/19
221.133.240.0/20
221.137.0.0/16
221.14.0.0/15
221.192.0.0/15
221.192.166.0/23
221.194.0.0/16
221.195.0.0/16
221.196.0.0/15
221.198.0.0/16
221.199.0.0/17
221.199.0.0/19
221.199.128.0/18
221.199.192.0/20
221.199.224.0/19
221.199.32.0/20
221.2.0.0/16
221.200.0.0/14
221.203.244.0/22
221.203.248.0/21
221.204.0.0/15
221.206.0.0/16
221.207.0.0/18
221.207.128.0/17
221.207.64.0/18
221.208.0.0/14
221.208.150.0/24
221.208.160.0/22
221.212.0.0/16
221.212.126.0/24
221.213.0.0/16
221.214.0.0/15
221.3.0.0/17
221.3.128.0/17
221.5.128.0/17
221.6.0.0/16
221.7.0.0/19
221.7.128.0/17
221.7.32.0/19
221.7.64.0/19
221.7.96.0/19
221.8.0.0/15
221.8.12.0/24
222.132.0.0/14
222.135.176.0/22
222.135.184.0/21
222.136.0.0/13
222.160.0.0/15
222.161.0.0/22
222.161.2.0/23
222.161.4.0/22
222.162.0.0/16
222.163.0.0/16
27.0.128.0/24
27.0.130.0/23
27.112.0.0/21
27.192.0.0/11
27.50.128.0/17
27.54.192.0/19
27.8.0.0/13
27.98.224.0/19
36.248.0.0/14
36.32.0.0/14
39.64.0.0/11
42.157.0.0/21
42.157.8.0/22
42.176.0.0/13
42.224.0.0/12
42.4.0.0/14
42.48.0.0/15
42.51.0.0/17
42.51.128.0/17
42.52.0.0/14
42.56.0.0/14
42.63.0.0/16
42.84.0.0/14
43.224.12.0/22
43.224.208.0/22
43.224.24.0/22
43.224.52.0/23
43.224.56.0/22
43.224.80.0/22
43.225.180.0/22
43.226.116.0/23
43.226.118.0/23
43.226.120.0/22
43.226.160.0/22
43.226.164.0/22
43.227.104.0/22
43.227.196.0/22
43.227.216.0/21
43.228.0.0/21
43.228.64.0/21
43.231.144.0/20
43.231.32.0/20
43.239.120.0/22
43.240.0.0/22
43.240.156.0/22
43.240.204.0/22
43.240.56.0/22
43.240.72.0/22
43.241.16.0/22
43.241.180.0/22
43.241.50.0/23
43.242.152.0/22
43.242.156.0/22
43.242.164.0/22
43.242.180.0/22
43.242.64.0/22
43.243.156.0/22
43.243.16.0/22
43.243.228.0/22
43.243.4.0/22
43.246.228.0/23
43.247.4.0/24
43.247.88.0/22
43.248.184.0/21
43.248.192.0/20
43.248.20.0/24
43.248.200.0/22
43.248.21.0/24
43.248.22.0/23
43.248.244.0/22
43.249.136.0/22
43.249.144.0/22
43.249.192.0/22
43.249.236.0/22
43.250.112.0/22
43.250.168.0/22
43.250.200.0/22
43.250.244.0/22
43.250.32.0/22
43.250.4.0/22
43.251.36.0/22
43.254.136.0/22
43.254.168.0/22
43.254.52.0/22
43.254.8.0/22
43.255.84.0/22
43.255.96.0/22
45.113.20.0/22
45.113.24.0/22
45.113.240.0/23
45.113.252.0/22
45.115.164.0/22
45.119.68.0/22
45.120.100.0/22
45.124.80.0/22
45.125.44.0/22
45.250.32.0/22
45.250.36.0/23
45.250.38.0/24
45.250.39.0/24
45.250.40.0/22
45.252.104.0/22
45.254.48.0/23
49.4.104.0/22
49.4.108.0/23
49.4.110.0/24
49.4.112.0/20
49.4.96.0/21
58.144.0.0/16
58.16.0.0/16
58.17.0.0/17
58.17.128.0/17
58.18.0.0/16
58.19.0.0/16
58.20.0.0/16
58.21.0.0/16
58.22.0.0/15
58.24.0.0/15
58.240.0.0/15
58.240.60.0/23
58.242.0.0/15
58.244.0.0/15
58.83.17.0/24
59.81.100.0/23
59.81.102.0/23
59.81.104.0/23
59.81.12.0/23
59.81.16.0/23
59.81.20.0/23
59.81.24.0/23
59.81.36.0/23
59.81.40.0/23
59.81.46.0/24
59.81.68.0/23
59.81.72.0/23
59.81.76.0/23
59.81.78.0/23
59.81.8.0/23
59.81.80.0/23
59.81.82.0/23
59.81.86.0/23
59.81.88.0/23
59.81.92.0/23
59.81.94.0/23
59.81.98.0/23
59.83.192.0/19
59.83.224.0/21
59.83.232.0/22
60.0.0.0/13
60.10.0.0/16
60.11.0.0/16
60.12.0.0/16
60.12.7.0/24
60.13.0.0/18
60.13.128.0/17
60.13.64.0/18
60.14.0.0/15
60.16.0.0/13
60.208.0.0/13
60.216.0.0/15
60.217.0.0/20
60.218.0.0/15
60.220.0.0/14
60.23.240.0/20
60.24.0.0/14
60.255.0.0/16
60.28.0.0/15
60.28.3.0/24
60.28.4.0/22
60.28.64.0/21
60.28.72.0/23
60.28.8.0/24
60.28.80.0/20
60.28.96.0/23
60.30.0.0/16
60.30.0.0/24
60.30.1.0/24
60.30.2.0/24
60.30.32.0/21
60.30.40.0/23
60.31.0.0/16
60.63.0.0/16
60.8.0.0/15
61.133.0.0/17
61.134.128.0/18
61.134.192.0/18
61.134.96.0/19
61.136.0.0/18
61.136.64.0/18
61.137.128.0/17
61.138.0.0/18
61.138.128.0/18
61.138.64.0/18
61.139.128.0/18
61.156.0.0/16
61.158.0.0/17
61.158.128.0/17
61.159.0.0/18
61.161.0.0/18
61.161.128.0/17
61.162.0.0/16
61.163.0.0/16
61.167.0.0/16
61.168.0.0/16
61.176.0.0/16
61.179.0.0/16
61.180.128.0/17
61.181.0.0/16
61.181.244.0/24
61.181.26.0/24
61.182.0.0/16
61.189.0.0/17
61.240.0.0/19
61.240.128.0/19
61.240.160.0/19
61.240.192.0/19
61.240.224.0/21
61.240.232.0/21
61.240.240.0/21
61.240.32.0/19
61.240.64.0/18
61.241.128.0/19
61.241.160.0/19
61.241.192.0/19
61.241.64.0/18
61.242.128.0/19
61.242.160.0/19
61.242.192.0/18
61.243.0.0/19
61.243.112.0/21
61.243.124.0/22
61.243.128.0/18
61.243.192.0/19
61.243.32.0/20
61.243.48.0/20
61.243.96.0/20
61.49.86.0/24
61.52.0.0/15
61.54.0.0/16
61.55.0.0/16

johnpoz · Apr 16, 2021, 11:30 PM

Zero reason to block those - they are already blocked by the default block rule on the wan. The only reason you would block is to not log them.

Or if you had port forwards, and you didn't want specific IPs to hit your port forwards.

I think there is something really odd with your setup... I just don't see how some opt1 interface, or any interface at all really would ever see your own IP as inbound traffic for a block.. Makes zero sense..

Even if you had 2 wan interfaces, and opt1 was another wan interface.. Why would wan 1 send traffic to wan2 with destination other than your wan2 IP, etc..

How about you draw up how you have everything connected. And exactly what is this opt1 interface? What IP do you have on it? Just at a complete loss to how you would see such traffic..

Normally you have say this

internet -- wan (pfsense) lan/optX -- your networks(s)

How could you ever see traffic from your wan IP, hitting your lan side interfaces, or really any other interface even a wan?? If if you had your wan and lan on the same L2 network.. Why would your wan be sending traffic to your opt1 mac address? Just at a loss to how you are seeing such traffic..

edit?

Also setup openvpn on OPT1

Huh?? Still at a loss to how you would see source traffic of your external IP? Opt1 is setup as vpn client interface? Lets take a look at the details of exactly how your setup.. And if you have some vpn client setup... Turn all that off! Atleast while trying to figure out why your ntp is show sporadic in getting responses. We can always walk through how to correctly setup some vpn client after you fix your original ntp issue.