/ Register

why is the ts4k spamming sage-hec.oi.tivo.com after update?

Discussion in 'TiVo Stream 4K' started by crackers8199, Mar 8, 2021.

  1. Mar 8, 2021 #1 of 3
    crackers8199

    crackers8199 New Member

    19
    2
    Dec 8, 2020

    Advertisements

    just ran through my pi.hole logs, and my ts4k (since updating and causing a whole bunch of headaches last night) is spamming my network with requests to sage-hec.oi.tivo.com literally every few seconds (119 requests over the past 10 minutes).

    according to the logs, this didn't happen until the update last night...so it seems this is something new.
     
  2. Mar 8, 2021 #2 of 3
    kdmorse

    kdmorse Well-Known Member TCF Club

    8,532
    2,300
    Jan 29, 2001
    Germantown, MD
    It smells a lot like a AWS (Amazon Web Services) provisioned Enterprise Splunk server. It's probably their direction for centralized log aggregation. I don't know enough about the splunk daemon to know if spammy DNS queries is a sign of a problem, or if it's just the way it is - could go either way.
     
  3. Mar 8, 2021 #3 of 3
    crackers8199

    crackers8199 New Member

    19
    2
    Dec 8, 2020
    interesting. can you see any harm in just blocking it (if i set the pi.hole to blacklist it)?
     

Share This Page

spam firewall

Advertisements