Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Blocked Traffic

    Scheduled Pinned Locked Moved pfBlockerNG
    5 Posts 3 Posters 859 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      slimypizza
      last edited by

      I’ve noticed recently that PfBlocker is blocking outgoing home network traffic to 52.109.120.17 per pfB_Asia-v4_auto rule. That’s fine but doing a who.is check on that address shows it to be Microsoft. So what gives? Is this a banned Asia IP address or is it a legit address for Microsoft?

      BBcan177B 1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        It may be a legit Microsoft address located in Hongkong, but if you block outbound connection to Chinese addresses it will be blocked as well, of course.

        1 Reply Last reply Reply Quote 0
        • BBcan177B
          BBcan177 Moderator @slimypizza
          last edited by

          @slimypizza said in Blocked Traffic:

          I’ve noticed recently that PfBlocker is blocking outgoing home network traffic to 52.109.120.17 per pfB_Asia-v4_auto rule. That’s fine but doing a who.is check on that address shows it to be Microsoft. So what gives? Is this a banned Asia IP address or is it a legit address for Microsoft?

          https://dnslytics.com/ip/52.109.120.17
          https://dnslytics.com/domain/who.is

          geoiplookup 52.0.178.130
          GeoIP Country Edition: US, United States
          
          geoiplookup 52.109.120.17
          GeoIP Country Edition: HK, Hong Kong
          

          "Experience is something you don't get until just after you need it."

          Website: http://pfBlockerNG.com
          Twitter: @BBcan177  #pfBlockerNG
          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

          1 Reply Last reply Reply Quote 0
          • S
            slimypizza
            last edited by

            I am leaving pfBlocker as is and continue to block Asia. If MS needs to communicate with my system then they can use US addresses. And in fact, looking at the logs, that is just what has happened. Thanks for letting me know about DNSlytics.com. I had not used that tool before.

            BBcan177B 1 Reply Last reply Reply Quote 0
            • BBcan177B
              BBcan177 Moderator @slimypizza
              last edited by

              @slimypizza

              Click on the ! icons in the Alerts Tab. It will show several different Threat Lookup tools.

              "Experience is something you don't get until just after you need it."

              Website: http://pfBlockerNG.com
              Twitter: @BBcan177  #pfBlockerNG
              Reddit: https://www.reddit.com/r/pfBlockerNG/new/

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.