Anybody know what the last 2 entries comes from?

Product Discussion Peplink Balance
1

I am still a newbie at setting up my Peplink 720.

I am looking at my "Active sessions on the “status” tab and when I look at the last 2 entries, I am lost to as where they are coming from. My network internal net is only the 10.0.1.1 to 254, so where is the 10.192.73.254 coming from. Can’t seem to find anything on-line other that a Trojan back door and if that is what this is, how do I go about stopping it?

I have never noticed them before a few days ago!

[TABLE=“class: stat_table”]

TCP
10.0.1.234:48972
72.21.91.121:443
HTTPS
WAN3
00:01:00

[TR=“class: zb2”]
UDP
10.192.73.254:54965
172.22.252.131:2055

WAN3
00:00:08
[/TR]

UDP
10.192.73.254:54965
172.22.253.3:9996

WAN3
00:00:08

[/TABLE]

Any help/explanation is appreciated

2

Hi Charley,

  1. All 3 connection above you found in Outboud table?

  2. Please confirm what is your LAN subnet mask. Is 255.255.255.0 or 255.0.0.0?

  3. If your subnet mask is 255.0.0.0, are you manage to ping 10.192.74.254?

  4. May I know any Layer 3 device (router or Layer 3 switch) behind Balance 710?

3

Yes, all 3 connections are found only in the outbound table. There are many more but I only showed the last 3 entries. (All other entries are what I would expect to see.)

My Lan subnet mask is 255.255.255.252/24 (I set it up for the range of 10.0.0.1 to 10.0.2.254 on my DHCP server)

I get no ping return from the address 10.192.73.254

The 710 goes into a Netgear Smart Switch GS724AT and gets distributed from there via GB fiber.

Hope this makes sense.

4

Hello,

If you could reconfirm the subnet mask, as a 255.255.255.252 is a /30 and not a /24 (255.255.255.0).

5

Sorry, I put the wrong subnet. The correct subnet is 255.255.252.0

6

Hi,

Please open ticket for us to investigate and turn on Remote Assistance. We need to take a look on this unit.

Thank you.

7

Done.

Entries are only seen on WAN # 3.