NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
jfitty
Jul 01, 2020Aspirant
Orbi satellite pinging: 1.0.254.169
Does anyone know why my Orbi is trying to ping: 1.0.254.169 and also why it is trying to FTP to Ireland at 52.208.82.166?
FURRYe38
Jul 01, 2020Guru
What model RBS and RBR do you have?
What Firmware version is currently loaded?
Do you have anything connected behind the RBS?
- jfittyJul 01, 2020Aspirant
Orbi Hardware version: RBR50
Running firmware: V2.5.1.16
It is in access point mode
I have an enterprise network firewall acting as my router and is giving the visibility as to what the network traffic from the router is generated.
I am also seeing that there is a good amount of traffic going to AWS for a URL for IoT on port 8883.
- FURRYe38Jul 01, 2020Guru
Do you have anything connected behind the RBS?
Whois that IP address belonging too?
- jfittyJul 01, 2020Aspirant
I keep trying to respond, but my replies are not showing up... the whois shows the IP is registered to Thailand it says it is registered to Dynamic IP Address for residential broadband customers
- CrimpOnJul 01, 2020Guru
jfitty wrote:Orbi Hardware version: RBR50
Running firmware: V2.5.1.16
It is in access point mode
I have an enterprise network firewall acting as my router and is giving the visibility as to what the network traffic from the router is generated.
I am also seeing that there is a good amount of traffic going to AWS for a URL for IoT on port 8883.
Well, this is unusual. I have collected every packet that passes through my Orbi router for hours and the satellite appears to ping only the router. My Orbi is in router mode, but it is hard to imagine the satellite behaving differently no matter what the router mode is.
The firewall definitely shows these ICMP packets coming from the IP address of the Orbi satellite?
- jfittyJul 01, 2020Aspirant
Yes, it is definitely ICMP and it seems to be 50 packets each time. They tried to ping the same IP 19 times since 6/10 and today is 7/1. It is both of my satellites that are pinging this IP.