Diversion How can I determine what LAN client is calling blocked sites

[Wishmaster1965]

So I am seeing the following when I follow in the logfile

 18:15:00 blocked by blockinglist api2.amplitude.com

 18:16:02 blocked by blockinglist api2.amplitude.com

 18:16:16 blocked by blockinglist eu1.wzrkt.com

 18:16:16 blocked by blockinglist eu1.wzrkt.com

 18:17:03 blocked by blockinglist api2.amplitude.com

 18:18:04 blocked by blockinglist api2.amplitude.com

 18:19:06 blocked by blockinglist api2.amplitude.com

 18:20:12 blocked by blockinglist api2.amplitude.com

 18:21:04 blocked by blockinglist eu1.wzrkt.com

 18:21:04 blocked by blockinglist eu1.wzrkt.com

 18:21:20 blocked by blockinglist api2.amplitude.com

 18:22:22 blocked by blockinglist api2.amplitude.com

 18:22:30 blocked by blockinglist brahe.apptimize.com

 18:22:31 blocked by blockinglist brahe.apptimize.com

 18:23:23 blocked by blockinglist api2.amplitude.com

 18:24:10 blocked by blockinglist nrcapi.ssl2.duapps.com

 18:24:10 blocked by blockinglist nrcapi.ssl2.duapps.com

 18:24:13 blocked by blockinglist nrcapi.ssl2.duapps.com

 18:24:13 blocked by blockinglist nrcapi.ssl2.duapps.com

 18:24:16 blocked by blockinglist nrcapi.ssl2.duapps.com

Where do I check as to which client is accessing these sites ?

 

[Mutzli]

Blocked by diversion? If so, follow the dnsmaq.log. Option 2 will show you the blocked domains and highlighted in red with the client IP.