What is it?
This finding means the target resolved to an IP address that the network guard refuses to probe. Blocked ranges include private, loopback, link-local, multicast, reserved, and documentation networks.
Why does it matter?
Network guard protection prevents the service from being used to connect to internal infrastructure, metadata endpoints, local services, or other unsafe targets. This is an SSRF protection, not a normal availability failure.
How to fix it?
Use a public DNS target for external audits and remove private or internal A/AAAA records from public DNS.
www.example.com. 3600 IN A 203.0.113.10Do not point public audit targets at ranges such as 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.0/8, or link-local addresses. If the service is internal-only, run the audit from an internal deployment with an appropriate policy.