gt-axe16000 and outbound port 8883

[jtjbt20x]

My gt-axe16000 tries to connect to various .compute.amazonaws.com servers on port 8883. What is that for? I've searched everywhere and can't find anything on that.

 

[ColinTaylor]

Garage door opener?

 

[jtjbt20x]

Garage door opener?

No, it's coming directly from the AXE.

 

[ColinTaylor]

What's the complete URL?

It's probably the router checking for firmware or security updates (we've seen this before with amazonaws.com addresses).

What firmware version are you running?

 

[jtjbt20x]

I can't see the complete url unfortunately, the only thing I can see is the server name, all of which are variants of .compute.amazonaws.com. For example, ec2-54-244-146-91.us-west-2.compute.amazonaws.com.

I'm using firmware version 3.0.0.4.388_23012.

I just noticed all of my Asus WiFi routers are making these connections.

I expanded my google search and found that port 8883 is MQTT over SSL, an IoT communications protocol, but I don't know what it is doing.

Strange.

 

[ColinTaylor]

You could run netstat on the router and try and catch it running. But you'd need netstat to support the -p option. I know Merlin's firmware has that but I don't know about stock firmware.

netstat -ap | grep aws

I still think it's normal update checking. Might be AiProtection related.

 

[jtjbt20x]

Results, looks like it is AWS IoT, which is used for "continuously audit security configurations for compliance with security best practices and your own organizational security policies"


netstat -ap | grep aws
tcp 0 1 GT-AXE16000-xxxx.:41826 ec2-34-209-43-55.us-west-2.compute.amazonaws.com:8883 SYN_SENT 27005/awsiot
unix 2 [ ACC ] STREAM LISTENING 664924 27005/awsiot /var/run/awsiot_ipc_socket
unix 2 [ ] STREAM 664923 27005/awsiot "

 

[ColinTaylor]

Ah good spot. There was a recent discussion about this relatively new process here:

CPU utilisation spikes AX86U?

I keep getting strange CPU utilisation spikes on my AX86U for the past few months and I cant figure out how to fix it. I've done numerous L&LD resets & minimal config before performing more resets and I still can't find the cause of this. It only occurs on core 3. Whenpon SSH into my router and...

www.snbforums.com

 

[jtjbt20x]

Strangely enough, when I open 8883 on the firewall, there are no further comms on it.