NBG6617 - many TLS sessions to AWS
Does your NAS542 use PPPoE?
Can share your network topology and details information about Darkstat report?
I checked the IP: 22.214.171.124, it seems belong to France Telecom (now Orange S.A.).
no, the nas doesn't use PPPoE
I reboot the nas , so i don't have anymore the stat about orange I got a new one see below
Orange is my Provider (FAI)
the new one is somethin like this :
126.96.36.199 (none) d4:60:e3:c8:1f:36 0 3,958,219,796 3,958,219,796 15 hrs, 23 mins, 46 sec
in detail188.8.131.52Hostname: (none)MAC Address: d4:60:e3:c8:1f:36Last seen: 2019-05-02 20:29:27 UTC+0000 (15 hrs, 28 mins, 57 secs ago)In: 0Out: 3,958,219,796Total: 3,958,219,796TCP ports on this hostThe table is empty.TCP ports on remote hostsThe table is empty.UDP ports on this host(1-1 of 1)Port |Service | In | Out |Total49152 | | 0 | 3,958,219,796 | 3,958,219,796UDP ports on remote hosts(1-2 of 2)Port | Service | In | Out | Total8200 | | 3,672,393,780 | 0 | 3,672,393,7808202 | | 285,826,016 | 0 | 285,826,016IP protocols(1-1 of 1)# Protocol | In | Out |Total17 |0 | 3,958,219,796 | 3,958,219,796
(edit : delete previous table )0
up after edit previous message0
Recently I changed my provider.
Now I get network connection with : 184.108.40.206
Last seen: 2020-05-09 09:47:17 UTC+0000 (2 hrs, 23 mins, 42 secs ago)In: 0Out: 185,073,997,412Total: 185,073,997,412
UDP ports on this host (1-1 of 1)Port Service In Out Total49152 0 185,073,997,412 185,073,997,412UDP ports on remote hosts (1-2 of 2)Port Service In Out Total8200 171,711,231,912 0 171,711,231,9128202 13,362,765,500 0 13,362,765,500
no idea what it might be ?0
Is IP: 220.127.116.11 the WAN IP of your Modem?
What is your topology? How do you connect your NAS in your Network0
What model of your gateway?
Can you set a Firewall on your gateway? If you can, please set the firewall, and stop the traffic from that IP, and also block the port 49152.
Will this traffic keep happened after the firewall setting?
yes, I think the external adress of the modem is this one : 18.104.22.1680
yes, I think the external adress of the modem is this one : 22.214.171.124
the modem is also the router proprietary can not install a firewall on this router.
maybe it is the upnp server (twonky) that cause this traffic
Why it is not the internal adress of the modem (192.168.1.254) that is seen I don't understand
If you have run some DDNS or access the NAS from WAN set, it will be possible that all the traffic head to the WAN IP.
Do you access NAS from WAN? Such as, watching NAS videos or downloading files to NAS from WAN?
And how do u view those data from the darkstat? do you install the darkstat on the lan device or install it in NAS?0
That's right I have a ddns even if I don't use it. But I don't access the NAS from the WAN, neither to get files nor watch video.
darkstat is a module of the NAS (if i remember it's a module from metarepository) , installed on the NAS0
- 8.4K All Categories
- 1.6K Nebula
- 70 Nebula Ideas
- 57 Nebula Status and Incidents
- 4.5K Security
- 226 Security Ideas
- 981 Switch
- 46 Switch Ideas
- 870 WirelessLAN
- 22 WLAN Ideas
- 5.1K Consumer Product
- 156 Service & License
- 280 News and Release
- 97 Success Stories
- 58 Security Advisories
- 13 Education Center
- 579 FAQ
- 262 Nebula FAQ
- 160 Security FAQ
- 76 Switch FAQ
- 74 WirelessLAN FAQ
- 7 Consumer Product FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 69 About Community
- 46 Security Highlight