I was poking around and found the connections log. I found the attached screenshot. The first 3 are my local LAN IP. the bottom 4 root are not my IP. They are external IPs. What are these?

FWIW, 5.x.x.x are used by the ReadyCloud VPN (whois will give a different answer), https://community.netgear.com/t5/ReadyNAS-Cloud-Storage/ReadyCloud-replace-my-ReadyNAS-admin-page-with-a-new-IP-address/m-p/1184376#M6106

Ey that would be to complex for the GUI makers root@RN628X:~# lsof -i | grep ESTABLISHEDxagent 3725 root 7u IPv4 4890919 0t0 TCP RN628X:43836->ec2-52-18-224-100.eu-west-1.compute.amazonaws.com:https (ESTABLISHED)leafp2p 3726 root 4u IPv4 4890987 0t0 TCP RN628X:42498->ec2-52-8-235-19.us-west-1.compute.amazonaws.com:https (ESTABLISHED)leafp2p 3726 root 10u IPv4 4890983 0t0 TCP RN628X:42942->ec2-54-183-41-114.us-west-1.compute.amazonaws.com:https (ESTABLISHED)sshd 16738 root 3u IPv6 4977966 0t0 TCP RN628X:ssh->[fe80::5925:547b:3c3c:c027]:45244 (ESTABLISHED)

Hi vrspectre, you might want to use WHOIS to find out. See example below for the ipv4 local loopback IP-address and kind regards.https://www.whois.com/whois/127.0.0.1

I looked at the whois 3 of the 4 are coming Amazon. Presumably something in AWS, and the 4th is form Huricane Electric. I would assume it's from one of those backu apps that comes installed with the readynas, but NONE of them are enabled. So why is their crap connecting to my box?

vrspectre wrote: I looked at the whois 3 of the 4 are coming Amazon. Which of course doesn't tell you anything (and neither does the hurricane electric one, since it's also a data center). What apps and services are enabled? NTP will of course make connections from time to time. The system will also periodically connect to the firmware update server.

Root connections | NETGEAR Communities

25 Replies

Replies have been turned off for this discussion

Retired_Member
Jun 19, 2019
Hi vrspectre, you might want to use WHOIS to find out. See example below for the ipv4 local loopback IP-address and kind regards.
https://www.whois.com/whois/127.0.0.1
- StephenB
  Guru - Experienced User
  Jun 19, 2019
  FWIW, 5.x.x.x are used by the ReadyCloud VPN (whois will give a different answer),
  
  https://community.netgear.com/t5/ReadyNAS-Cloud-Storage/ReadyCloud-replace-my-ReadyNAS-admin-page-with-a-new-IP-address/m-p/1184376#M6106
- vrspectre
  Apprentice
  Jun 19, 2019
  I looked at the whois 3 of the 4 are coming Amazon. Presumably something in AWS, and the 4th is form Huricane Electric. I would assume it's from one of those backu apps that comes installed with the readynas, but NONE of them are enabled. So why is their crap connecting to my box?
  - StephenB
    Guru - Experienced User
    Jun 20, 2019
    vrspectre wrote:
    
    I looked at the whois 3 of the 4 are coming Amazon.
    
    Which of course doesn't tell you anything (and neither does the hurricane electric one, since it's also a data center).
    
    What apps and services are enabled?
    
    NTP will of course make connections from time to time. The system will also periodically connect to the firmware update server.

Forum Discussion

Root connections

25 Replies

Related Content

Readynas Pro 2 Corrupt root

Root Access

Accessing root for ReadyNAS 3312

spazio di root

ReadyNas102 - Volume Root Usage

NETGEAR Academy

ProSupport for Business