HI_CLIENT_BARE_BYTE (119:4:1) Unknown Source IP

[tsparling]

We have a couple of IP addresses listed in the logs as Source IPs that we do not own and we are trying to figure out if theres some sort of reporting issue or deeper dive we can do. Attached is a copy of one of those events. 

[argrullo]

Hello tsparling,
The SourceIP you see, might not be own by you, but that was the IP that was seen in the Ingress Interface. Which in this case was the outside. That IP would correspond to a Public IP. Now your destination IP, also seems kind of odd.
I would recommend to open a TAC SR for a deeper dive/explanation of what is going.