Firewall IP question

[Curious D]

Hi. I am using Firewall IP and I noticed that when I reset my Springboard or start up the phone from the locked position, Firewall IP asks for permission to a numerical IP address or to ATTWireless. Nothing else is active except for the Springboard (or lock screen), the phone, and the mail system. The program doesn't explain which program is asking for permission (referring to "This app" is asking for permission.

I went to menu to see which program was asking for permission, but I can't find the few IP addresses that I had allowed on any program listed. I thought perhaps if I deleted all rules it would work, but there isn't a function to do this. I had uninstalled the program once before and I noticed that the program settings were still there from the original installation when I reinstalled the program days later.

Is there a way to identify the mystery program asking for permission? Is there a way to eliminate all rules without reinstalling? If reinstallation is necessary, is there a way to eliminate all previous settings? I'm a little paranoid that some malicious program lurking about, but I haven't read anything to that effect except for the SSH security problem which I have hopefully plugged up.

[Curious D]

Additional information: The mysterious app is trying to connect to allntxacd505.attwireless.net. I had to allow this and the numerical IP address access because denial resulted in the phone crashing and very long wait times for the phone to reboot. I'm guessing this is an important function for the phone. I see there is an update. It may fix it since the update mentions something about ATT customers. This seems to be the better option than the opt out function since the opt out add on disables some programs.