Code:
skynet@RT-AX88U-DC28:/tmp/home/root# nslookup aftonbladet.se
Server: 127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain
Name: aftonbladet.se
Address 1: 13.53.120.82 ec2-13-53-120-82.eu-north-1.compute.amazonaws.com
Code:
skynet@RT-AX88U-DC28:/tmp/home/root# firewall stats search ip 13.53.120.82
#############################################################################################################
# _____ _ _ __ #
# / ____| | | | / / #
# | (___ | | ___ _ _ __ ___| |_ __ __/ /_ #
# \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \ #
# ____) | <| |_| | | | | __/ |_ \ V /| (_) | #
# |_____/|_|\_\\__, |_| |_|\___|\__| \_/ \___/ #
# __/ | #
# |___/ #
# #
## - 27/03/2019 - Asus Firewall Addition By Adamm v6.8.4 #
## https://github.com/Adamm00/IPSet_ASUS #
#############################################################################################################
=============================================================================================================
[i] Debug Data Detected in /tmp/mnt/USB/skynet/skynet.log - 328.0K
[i] Monitoring From May 7 11:00:31 To May 7 20:59:32
[i] 1390 Block Events Detected
[i] 476 Unique IPs
[i] 0 Manual Bans Issued
13.53.120.82 is in set Skynet-Whitelist.
13.53.120.82 is NOT in set Skynet-Blacklist.
13.53.120.82 is NOT in set Skynet-BlockedRanges.
Whitelist Reason;
--*
Associated Domain(s);
aftonbladet.se
[i] IP Location - Sweden (Amazon.com, Inc. / AS16509)
In this particular case, the domain is hosted on Amazon's CDN. We whitelist various CDN's by default to prevent false positives (the same IP may be used by hundreds of other domains).
I can probably add a toggle for this functionality if there is demand, but disabling it will no doubt cause other issues with false positives. Your best bet for the time being would be to block this one domain in Diversion if you use it.
