Base station VMB5000

[MicG]

My internet provider security sends notification that it blocked a potentially dangerous site my base station was trying to access. I got 3 different notification, 3 diff days, 3 diff IP addresses. 

This is not a new setup. Had it for 4 years. Only been happening for a few weeks.

[jguerdat]

Sounds like your ISP is overly aggressive (of course, that can be a Good Thing, too). I would work with them to help fine-tune their security. The different IP addresses are probably due to a DNS "round-robin" where there's a bunch of available addresses that can respond to the hub's output. Nothing wrong there, just the way server load-leveling works.

[MicG]

Thanks for the reply. I have no way to change what provider stops. 

I do question more if base station was hijacked somehow. I see when I want to look for wifi for another device the arlo shows up as a wifi device along with my home wifi and a few close neighbors.

I like your response but wonder why ARLO does not respond to ensure that this is normal IP addresses for the base station to be requesting.

Thanks again.

[StephenB]

---

@MicG wrote:

I see when I want to look for wifi for another device the arlo shows up as a wifi device along with my home wifi

---

That is normal.  The smarthub creates a closed wifi network for the cameras to use.

---

@MicG wrote:

I like your response but wonder why ARLO does not respond to ensure that this is normal IP addresses for the base station to be requesting.

---

Do you know what addresses these are?  If so, can you post them?

Also, I am wondering how your ISP knows it is the smarthub?  Normally the network address translation (NAT) in the router would make it impossible for the ISP to know exactly what device is attempting the connection.  Does your ISP manage your router?

[MicG]

StephenB,

Last question first. ISP provider monitors anything that is allowed on my wifi. Phones, tablets, apple watch, laptop or desk top computer. It specifically notifies me when VMB5000 had  IP address blocked. It lists the IP address.

The 4 IP addresses that were blocked are not close numerically or similar in any way. Not sure if thats an issue.

Xfinity is my provider and does manage the router. The app can be on a phone or tablet. It gives you all info to your cable, internet, phones , billing and internet usage. It can also tell me if I have any smart devices connected to the wifi too.

As I said in original post, I have had app for a year or so and the notifications for security issue seem to have started in March. App always notified me as to what or who was on wifi.

Just wanted to find out if this is normal for Base to reach out to these IP's or is something wrong.

Thanks

[StephenB]

---

@MicG wrote:

Just wanted to find out if this is normal for Base to reach out to these IP's or is something wrong.

---

No way to tell unless you have the IP addresses (or better yet, the hostnames) the base was accessing.