Anyone Using Ring Video Doorbell and Chime

[Griswold]

Particularly their Chime Pro?

If so it may be worth checking your router's Security Log.

This is a very small sample of what mine is showing



192.168.1.189 is the ip address of my Chime Pro

This is happening every 6 hours on the dot and there are around 20 of them at a time.

Have reported to Ring and they sent me a new Chime Pro but that is doing exactly the same thing. After moving the Chime Pro to a separate network other Ring Devices on the original network are now doing the same thing.

Ring don't appear to be very proactive in getting to the bottom of this.

[reggie747]

"Ping of Death Attack"

What's that all about ?

[Arcam]

"Ping of Death Attack"

What's that all about ?

Trying to saturate the connection to stop it working, normally referred to as a DDOS attack, but normally they don't stop, they may also be probing for a way into the network. I would always run devices like this in a DMZ.

[Arcam]

Duplicate post

[unclealec]

I use a Eufy with network connection; no upload of stored image, it is all stored on a SD inside the device.
Am I safe?

[Griswold]

Trying to saturate the connection to stop it working, normally referred to as a DDOS attack, but normally they don't stop, they may also be probing for a way into the network. I would always run devices like this in a DMZ.

These are from within the network. It is the Chime Pro, (and now other Ring devices), sending them out to external ip addresses.

Here's a list of the ip addresses it/they are trying to send them to

54.78.224.214 Amazon Data Centre - Dublin


100.69.0.0 IANA in Los Angeles


195.66.237.117 London Internet Exchange


3.255.214.129 Amazon Dublin


34.244.84.185 Amazon Dublin


185.208.241.31 Connexin Hull


52.51.171.35 Amazon Dublin


3.249.245.233 Amazon Dublin


54.217.53.247 Amazon Dublin

154.54.39.118 Cogent Data Centre London

154.54.38.61 Cogent Communications Liverpool

63.33.213.189 Amazon Dublin

154.54.39.149 Cogent Data Centre London


149.11.42.41 Connexin London

185.242.218.0 Connexin Hull

108.129.129.128 Amazon Dublin

And you're right, they don't normally stop which makes these even more odd. Most modern receivers now recognise and drop them so it's likely that none of the locations involved are even aware.

[Montello]

Sounds odd, are you saying your chime pro is up to something nefarious?

I have a chime (2nd gen) and other Ring products, Sky router… how do I see that log?

[Montello]

Just looked on my router and found the below.

No idea if this is normal or an issue.

Everything seems to be working fine.

[Griswold]

Sounds odd, are you saying your chime pro is up to something nefarious?

I have a chime (2nd gen) and other Ring products, Sky router… how do I see that log?

Deleted as you've already found it.

[Griswold]

Just looked on my router and found the below.

No idea if this is normal or an issue.

Everything seems to be working fine.

If you click on an entry does it open app with more details?

[Montello]

Deleted as you've already found it.

That log just shows my firewall is working I assume.

[Griswold]

That log just shows my firewall is working I assume.

Certainly looks like it.

[Montello]

Certainly looks like it.

Is that normal reading ?

Looks like I’m under attack??

[Griswold]

Is that normal reading ?

Looks like I’m under attack??

There are ‘bots’ out there constantly scanning for open ports on routers all round the world. ISPs trap much of it with their own firewalls but quite a lot still gets through. Some of the numbers look high but it looks like your router’s firewall is doing its job well.