UniFi Threat Alert form HA

Configuration
1

Does anyone have any insight as what this might mean?
It is a threat alert from my UniFi controller.

Threat Management Alert 1: Potential Corporate Privacy Violation. Signature ET P2P eMule KAD Network Connection Request. From: 192.168.1.25:5353, to: 224.0.0.251:5353, protocol: UDP

192.168.1.25 is my HA VM on my NUC.

The only exposure to the outside world is via NabuCasa.

Thanks.

image

2

If I had to bet my life savings on one of the following:

  1. Home assistant being infected or doing something nefarious

or

  1. Ubiquiti’s deep packet inspection being a bit rubbish and giving a false positive

I know which one I would choose.

224.0.0.251:5353, is mDNS, which Home Assistant uses for discovery.

1 Like
3

I think I do too hence my attempt at a calm and unemotional question :slight_smile:

Thanks for the info…

4

Lol. I feel young again :joy:

1 Like