WAN address traffic to 172.28.195.1:455. What is it?

Started by weust, April 29, 2019, 10:35:04 PM

Previous topic - Next topic
I just noticed in Live View under Firewall traffic on the WAN interaface going to 172.28.195.1:4455.
Source shows my WAN's IP-address:64xxx with the xxx increasing every second.

Oddly enough, after port 64556 it turned to 53913 and start going up again.

172.28.195.1 is a private address. But I don't even use that private address range in my network.
What is this?

In the screenshots I blacked out my WAN IP address.
Hobbyist at home, sysadmin at work. Sometimes the first is mixed with the second.

Here is discussion about the Tobii eye-tracking device
https://developer.tobii.com/community/forums/topic/network-sessions-with-rex-tcpip-driver/
where their SW seems to regularly try to connect to this address:port
"Yes, every second, the C:\Program Files (x86)\Tobii\Service\tobii.Service.exe tries hard to reach out to 172.28.195.1:4455 (which, of course, does not exist in most networks)."

You wouldn't happen to have something like this running?

Actually, I do. The device is not plugged in atm (bought a new monitor a while back) but the software is installed.
I'll read that link and disable the software for now.

Thanks for the link.
Hobbyist at home, sysadmin at work. Sometimes the first is mixed with the second.