NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

J_C_B's avatar
J_C_B
Aspirant
Apr 09, 2018

Orbi seems to be reaching out to Netgrear often.. normal?

 

Hello, 

 

Router Firmware Version
V2.0.0.64

 

I have noticed that the Orbis are reaching out to netgear, and what looks to be the CND that hosts the site frequently, about every 2 mins.  

2018-04-08 
15:30:40

IPv4

Omitted

gateway

OK 
(forwarded)

-

 Blacklist

2018-04-08 
15:30:33

IPv6

www.netgear.com

gateway

OK 
(forwarded)

-

 Blacklist

2018-04-08 
15:30:33

IPv6

d3jdtixm7cvu7y.cloudfront.net

gateway

OK 
(cached)

-

 Blacklist

2018-04-08 
15:30:33

IPv4

www.netgear.com

gateway

OK 
(forwarded)

-

 Blacklist

2018-04-08 
15:28:21

IPv4

Omitted

gateway

OK 
(forwarded)

-

 Blacklist

2018-04-08 
15:25:18

IPv6

www.netgear.com

gateway

OK 
(forwarded)

-

 Blacklist

2018-04-08 
15:25:18

IPv6

d3jdtixm7cvu7y.cloudfront.net

gateway

OK 
(cached)

-

 Blacklist

2018-04-08 
15:25:18

IPv4

www.netgear.com

gateway

OK 
(forwarded)

-

 Blacklist

2018-04-08 
15:25:13

IPv6

www.netgear.com

gateway

OK 
(forwarded)

-

 Blacklist

2018-04-08 
15:23:21

IPv4

Omitted

gateway

OK 
(forwarded)

-

 
2018-04-08 
14:18:43
IPv6ftp.updates1.netgear.com.edgesuite.net

 

Seems to reach out about every 2 mins.  Are these communications necessary?  I can imagine, but unknown,  that the last exmple is important to check for updates, but the rest?  This is interesting.  My questions is why are these necessary?  I would like to blacklist these unless they are necessary. I have not pulled a pcap yet to see what wlse is happening yet, but curious. 

 

Any one else see this or know why? 

 

Thank you, 

 

JC

 

2 Replies

  • FURRYe38's avatar
    FURRYe38
    Guru - Experienced User

    Are you seing this in the log or debug log? 

     

    MIght try newer FW and see if the same thing is happending.