I just noticed in Live View under Firewall traffic on the WAN interaface going to 172.28.195.1:4455.
Source shows my WAN's IP-address:64xxx with the xxx increasing every second.
Oddly enough, after port 64556 it turned to 53913 and start going up again.
172.28.195.1 is a private address. But I don't even use that private address range in my network.
What is this?
In the screenshots I blacked out my WAN IP address.
Here is discussion about the Tobii eye-tracking device
https://developer.tobii.com/community/forums/topic/network-sessions-with-rex-tcpip-driver/
where their SW seems to regularly try to connect to this address:port
"Yes, every second, the C:\Program Files (x86)\Tobii\Service\tobii.Service.exe tries hard to reach out to 172.28.195.1:4455 (which, of course, does not exist in most networks)."
You wouldn't happen to have something like this running?
Actually, I do. The device is not plugged in atm (bought a new monitor a while back) but the software is installed.
I'll read that link and disable the software for now.
Thanks for the link.