While monitoring network connections on my home router I noticed that Apple TV sending something to somebody all the time when it turned on.
That how it looks like on an interface:
Destination hosts are:
2.20.29.237
17.57.146.26
17.248.172.142
17.248.172.241
17.248.173.70
17.253.56.85
What it sends? Who it sends to? Why?
Apple? Any comments?
Are you sure it is in sleep mode/standby? Is the status light off?
Do you have HomeKit devices, for which the Apple TV acts as a hub?
What is your model Apple TV?
What an odd graph. It measures speed (Mbps) against time, not data (KB, MB).
It doesn’t identify a device, local IP, or home network node. Who is obolon.random.net.ua? Apple TV should be on a private network.
Destination hosts are:
Those seem to be legit Apple and Akamai host IPs (unless spoofed).
Verify if UPnP is turned off on your router. It is insecure, not needed, and exploitable.
It sends data when turned on and screensaver is running. And when Apple TV is sleeping with light tuned off.
I don’t have HomeKit devices and Apple TV was never set up as a hub.
This is a common graph generated by Zabbix. Very common. Nothing strange with it.
It shows traffic on my bridge to internet. It is just for better illustration of how it looks like.
Of course Apple TV doesn’t have white IP. It is behind NAT.
Upnp is enabled on router and should be enabled. It needed for my PS4.
The list if IPs above I dumped directly from Apple TV Ethernet port. If they are legit, what it sends to internet? Why? How to disable this?
I am network engineer. My network configuration is perfectly fine. Problem with device. Not with network to which this device connected.
Any updates?
My Apple TV is generating strange outgoing traffic when in standby
