Odd behavior when trying to authenticate domain

[teward]

I'm wondering if some of these are on the threat intel lists. I'll temporarily disable my pfBlocker rules and see if that fixes things.