Blocked Traffic
-
I’ve noticed recently that PfBlocker is blocking outgoing home network traffic to 52.109.120.17 per pfB_Asia-v4_auto rule. That’s fine but doing a who.is check on that address shows it to be Microsoft. So what gives? Is this a banned Asia IP address or is it a legit address for Microsoft?
-
It may be a legit Microsoft address located in Hongkong, but if you block outbound connection to Chinese addresses it will be blocked as well, of course.
-
@slimypizza said in Blocked Traffic:
I’ve noticed recently that PfBlocker is blocking outgoing home network traffic to 52.109.120.17 per pfB_Asia-v4_auto rule. That’s fine but doing a who.is check on that address shows it to be Microsoft. So what gives? Is this a banned Asia IP address or is it a legit address for Microsoft?
https://dnslytics.com/ip/52.109.120.17
https://dnslytics.com/domain/who.isgeoiplookup 52.0.178.130 GeoIP Country Edition: US, United States geoiplookup 52.109.120.17 GeoIP Country Edition: HK, Hong Kong
-
I am leaving pfBlocker as is and continue to block Asia. If MS needs to communicate with my system then they can use US addresses. And in fact, looking at the logs, that is just what has happened. Thanks for letting me know about DNSlytics.com. I had not used that tool before.
-
Click on the
!icons in the Alerts Tab. It will show several different Threat Lookup tools.
