LAN Connection to 192.168.49.1

[dcsang]

I am consistently receiving warnings from ESET that my browsers are attempting to communicate with 192.168.49.1 on a random UDP port. ESET reposts the company as Google LLC. I have the following installed: Diversion, Skynet, YazFi, conmon, uiDivStats, uiScribe, YazDHCP, nsrum, and scribe. How can I determine what is associated with that IP?

 

[ColinTaylor]

VPN? guest network (YazFi)?

 

[dcsang]

All VPNs disabled and guest networks 1-3 are usung 192.168.2.0, ...3.0, ...4.0 respectively (guest network 1 and associated 5GHz segments disabled).

 

[ColinTaylor]

Any Kodi/AnyCast/Miracast/WeCast/WiFi-Direct devices?

 

[dcsang]

Yes, I have a Firestick with KODI and ROKU. I didn't think to check them because nothing's changed with those devices and I started seeing the ESET warnings about a month ago. Will report back. Thank you for the suggestions!

 

[dcsang]

I really did research this before posting, and came up empty, but your suggestions pointed me in the right direction. Although I can't locate that specific IP anywhere in the settings/config, others suggest it is the address the remote uses to communicate with the Firestick. Why my browser is trying to connect to that IP is another story. Thank you @ColinTaylor.

 

[dethknite]

It is just ESET Network Inspector (go to Tools, Network Inspector). It "maps" out devices on your network.. and reports devices or known vulnerabilities and it is probably configured with some default or something is tripping its security from that IP/device. You can try turning down some of the security checks if you know how.. but that is difficult without knowing what is being tripped, or you can disable it in Settings, Network Protection, Network Inspector.

 

[Weston]

The best direct device to use Kodi is Firestick because you can highly customize the Kodi features on Firestick. Most of all you can unlock the Firestick and install kodi builds to stream content. Currently, Kodi nexus is performing pretty well on Firestick 4K. If you want to use the Roku then mirroring is the only option.

 

[FakePlasticPete]

Hey all, I see this thread is old, but I don't see a specific response to this question. I was also seeing mysterious traffic on multiple WFH machines for 192.168.49.1 over remote port 60,000. I was seeing this traffic on multiple different work-from-home users laptops. It looks like Amazon uses this IP for either Firesticks or Echo devices, based on information I'm getting from Crowdstrike.