Find IP Address being blocked in feeds

[nuffsai21]

Hello Everyone,

I am seeing that the canonical update server IP's are being blocked by pfblocker:

Mar 9 08:16:25,1770005485,igb1.10,HOME_VLAN,block,4,6,TCP-S,192.168.10.119,91.189.95.83,42558,80,out,GB,pfB_Top_v4,91.189.80.0/20,pfB_Top_v4,haetae.canonical.com,Unknown,null,+
Mar 9 08:16:25,1770005485,igb1.10,HOME_VLAN,block,4,6,TCP-S,192.168.10.119,91.189.91.26,59058,80,out,US,pfB_Top_v4,91.189.80.0/20,pfB_Top_v4,hanger.canonical.com,Unknown,null,+

pfB_Top_v4 is an alias but I cannot find the IP subnet in the source feeds. In the meantime to get things I have created an IP white list allowing that subnet 91.189.80/20

https://mxtoolbox.com/SuperTool.aspx?action=arin%3A91.189.91.26&run=toolpage

Any ideas on how to hunt down that IP in pfblockerng?

[nuffsai21]

Spent more time reviewing the changes I made. If I am not mistaken the pfB_Top_v4 alias is made by enabling GeoIP blocking (any of the lists there). In my case I enabled Top Spammers list and with action 'deny outbound'.

After disabling 'GeoIP Top Spammers' the ubuntu updates began working.