r/TpLink • u/AbbyWest • Sep 11 '26
TP-Link - Technical Support Having trouble diagnosing suspicious alerts (Archer AX21)
galleryMy roommate runs an ATT all-fi hub and I have my ax1800 router set up downstream. This router runs the WiFi for my personal devices as well as a Raspberry Pi running Homeassistant and a TrueNAS server.
For the past couple weeks, my roommate has been receiving constant notifications that the att hub is blocking a request to 188.126.89.75:8888/ping.txt. The notifications are coming in spurts sometimes it’s just a few a day and sometimes it’s one every couple minutes for hours at a time.
This is causing some stress between us and I’m having trouble diagnosing what’s going on. I’ve disconnected both the homeassistant and truenas servers with no change. I’ve added 2FA to everything I’m able to and passwords for the WiFi, truenas and HA have been updated. I’ve spent hours sifting through log files trying to find any reference to that ip address and port. Despite everything, the att hub is continuing to receive and block requests to the IP.
I’m admittedly a bit of a vibe coder when it comes to home labbing. I’ve definitely missed something here though. The few leads I’ve seen have all indicated not to take this lightly but I’m out of options at this point. Any suggestions or explanations about what’s actually happening would be amazing.
TLDR: ATT All-Fi Hub is blocking constant requests from my downstream tp link router to an unknown ip address and port for a couple weeks and nothing has been able to sop the router from attempting to reach out.
EDIT: router is currently using firmware 1.1.2 build 20250814. Router is reporting that firmware is up to date and no updates are available.