Page 1 of 3 123 LastLast
Results 1 to 10 of 23
  1. #1
    Master Untangler
    Join Date
    Jan 2010
    Posts
    113

    Default List of Uknown Hosts IP addresses in Untangle Reports

    I just looked at some of my reports and noticed that there are a lot of host IP address that are not apart of my network listed in the Hosts section of the report. When I click on any of those IP address, all the stats for that host are all Zero...

    Actually, I just looked again and it appears that the extra unknown hosts only show up in the 7 day reports. Not in the individual daily reports.

    Is there something wrong with the reports module or do I really have all these strange Hosts and IP's somehow connecting to my network...?

  2. #2
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    The hosts are computed as any hosts that has traffic originating from a non-WAN device.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Master Untangler
    Join Date
    Jan 2010
    Posts
    113

    Default

    Actually... I just found a few daily reports that show a long list of unknown IP address in the Host section of the report...

  4. #4
    Master Untangler
    Join Date
    Jan 2010
    Posts
    113

    Default

    Just a sample list of IP address from one of the reports... Non of these IP address belongs to any device on my network...

    Reports
    LogoutWednesday, July 13 2011 - Wednesday, July 13 2011View Other Reports

    108.113.117.179
    108.90.203.58
    114.198.39.8
    119.15.156.76
    124.183.145.212
    139.55.251.250
    142.163.86.225
    166.205.137.144
    166.249.192.89
    173.177.250.38
    173.183.76.176
    173.184.176.112
    173.186.219.162
    173.213.168.74
    173.22.255.166
    173.227.92.114
    173.59.191.28
    174.1.24.143
    174.20.56.157
    174.253.148.172
    174.33.87.42
    174.7.94.203
    177.17.17.220
    177.17.98.199
    178.40.107.68
    178.40.43.177
    178.41.93.0

  5. #5
    Master Untangler
    Join Date
    Jan 2010
    Posts
    113

    Default

    These are the hosts on my network all with an IP address in the 192.168.xxx.xxx range...

    bizzlepad
    bryan-desktop
    bryan-laptop
    guest-pc
    homeserver
    macbook
    pirate-pod
    tiffany-laptop
    wii

  6. #6
    Newbie
    Join Date
    Jul 2011
    Location
    Lihue, HI
    Posts
    14

    Default

    Quote Originally Posted by BryanC1968 View Post
    These are the hosts on my network all with an IP address in the 192.168.xxx.xxx range...

    bizzlepad
    bryan-desktop
    bryan-laptop
    guest-pc
    homeserver
    macbook
    pirate-pod
    tiffany-laptop
    wii
    Do you have a wireless router or access point? That would be my first guess.

  7. #7
    Master Untangler
    Join Date
    Jan 2010
    Posts
    113

    Default

    Yeah I have a Linksys WRT54GS flashed with the Tomato Firmware... The wireless devices listed as connected on the router are the devices on my network... I use mac address filtering on the router to only allow certain devices to connect and my WPA2 PSK is a mile long with random of every type of letter (Upper/Lower), number, and character you can think of in the password...

  8. #8
    Newbie
    Join Date
    Jan 2011
    Posts
    4

    Default

    I recently (about 3 weeks ago) installed a new Untangle box and noticed this exact same thing. I have about 10 PCs on this network and no wifi at all so I don't think its related to an open AP either.

  9. #9
    Master Untangler
    Join Date
    Dec 2010
    Location
    Echuca, Victoria, Australia
    Posts
    278

    Default

    Quote Originally Posted by dmorris View Post
    The hosts are computed as any hosts that has traffic originating from a non-WAN device.
    Would this include people hosting local websites? I have a reverse proxy setup behind untangle talking to a few web servers that I host. Then in the reports sometimes I can see my home public IP when visiting these websites hosted at the office.

  10. #10
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,557

    Default

    Quote Originally Posted by pazza3564 View Post
    Would this include people hosting local websites? I have a reverse proxy setup behind untangle talking to a few web servers that I host. Then in the reports sometimes I can see my home public IP when visiting these websites hosted at the office.
    Inbound port 80 is filtered just like outbound. If you've got a web server, then yes those requests show up in the lists.

    Heck for that matter you're running virus scans on all that HTTP traffic. Do you like having the potential of some web visitors DOS'ing you off the net? If this bothers you as much as it does me, I suggest you bypass that traffic before you're flattened.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Page 1 of 3 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2