By default locations that don't match a client site will be aggregated to a /20 subnet. I suspect that you must have an client IP (or multiple) that doesn't match any of your user defined sites. If you have user details on demand enabled you should be able to drill down and see the actual IP address. I would then compare that with your site definitions.
If the address matches one of your sites then I would recommend opening a support ticket.