Unknown IP Sessions

[rahulelectra]

Hello Untanglers

Here is our setup

Internet
|
Untangle Router Mode External IP 182.72.X.X
|
Computers 10.10.2.1/24


Our ISP has provided LAN Public IPS on different subnet but we are not using it (182.72.95.X)


Problem is there are Strange sessions, not only this , those sessiosn are bypassed and effecting VOIP Calls. See the attached pic
Source address is wierd IP I traced to chain, and destionation is showing unused LAN Public IP

[dmorris]

port 5060 is VOIP.

[rahulelectra]

Thanks for quick reply, Sometimes ther eare other ports like 80, 445, 3000 etc and I am shocked from where this ip 202.107.217.217 came from where as other sessions shows with my LAN Pool address.

[dwasserman]

inetnum: 202.107.217.0 - 202.107.217.255
netname: WENZHOU-HOTLINE
country: CN
descr: WenZhou Hotline
descr: NULL
admin-c: ZZ399-AP
tech-c: CW27-AP
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20040617
mnt-by: MAINT-CN-CHINANET-ZJ-WZ
source: APNIC