AI Protection - Malicious Site Blocking

  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

dieter

Senior Member
AI Protection's "Event Details" lists entries from my WAN port to primarily Pixel.Bilinmedia.net. (see attached JPG)
Does this mean one of the clients on my LAN is trying to go to Pixel.Bilinmedia.net?
I can't find anything on this URL.
 

Attachments

  • ASUS Wireless Router RT-AC1900P - Malicious Sites Blocking.jpg
    ASUS Wireless Router RT-AC1900P - Malicious Sites Blocking.jpg
    52.2 KB · Views: 1,026

Equinox

Occasional Visitor
AI Protection's "Event Details" lists entries from my WAN port to primarily Pixel.Bilinmedia.net. (see attached JPG)
Does this mean one of the clients on my LAN is trying to go to Pixel.Bilinmedia.net?
I can't find anything on this URL.
I had the same issue. To solve this , update your Windows host file. There is a good template that you can use: http://someonewhocares.org/hosts/
 

RMerlin

Asuswrt-Merlin dev
I would check that DK Tablet, might be a malicious application installed.
 

dieter

Senior Member
I would check that DK Tablet, might be a malicious application installed.
DK tablet is my Android Samsung tablet. It caused most of my AiProtection security events.
Does Android support a "hosts" file. Or how do I stop these events?
 

RMerlin

Asuswrt-Merlin dev
DK tablet is my Android Samsung tablet. It caused most of my AiProtection security events.
Does Android support a "hosts" file. Or how do I stop these events?

You need to track down the source rather than just hide it. Review every installed applications on that tablet, one of them might be malicious. You will need to uninstall that application.
 

Equinox

Occasional Visitor
DK tablet is my Android Samsung tablet. It caused most of my AiProtection security events.
Does Android support a "hosts" file. Or how do I stop these events?
Not sure about Android OS.

Two my desktops had the same issue. It was caused by accessing particular website. After updating Windows host files, the issue went away.
 

dieter

Senior Member
What are "Two-Way IPS" events?
Most event sources are from my Roku device going to Roku, Inc. (Cross Site Scripting - XSS events.) I'm also seeing several "External Attacks".

If I were NOT using AI Protection, would these events cause any issues?
 

Attachments

  • AI Protection Two Way IPS events.jpg
    AI Protection Two Way IPS events.jpg
    46.8 KB · Views: 419
Last edited:

eastavin

Senior Member

madfusker

Regular Contributor
I am getting it from multiple devices on my network too. I am suspecting a popup from some site. AI emails me a few times a day with this and would be good to just block it on the router. Any suggestions on how to do that?

Event number : 1
Alert type : Malicious Sites Blocking
Source : (50:85:C5:0C:2D:C0)
Destination : pixel.bilinmedia.net
 

vanic

Regular Contributor
You find this mail, it means the URL access is blocked by AiProtection already.
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top