host with active connection list on tp-link ac1750

[thevanman]

Hi

I noticed today two weird IP listed on my active connection list, they are as follow:
22.2.64.1
The other ip seems to be from my isp so I can't list it
The active tcp and recent tcp counters are 0, in the mean time I have created a block rule, but would like to know why this address appears on my connection list, any help is appreciated

[Lantis]

It happens to everyone. I don't fully understand how it works so I don't know why.

[thevanman]

It happens to everyone. I don't fully understand how it works so I don't know why.

thanks Lantis for the replay, I have done some troubleshooting to see if one of my computers was generating the IP but I found that none were, but what I did find is that the IP in question (22.6.64.1) will only appear after I connect the WAN port cable, so if I reboot the router and remove the WAN cable during the reboot process once the router comes back online I do not see 22.6.64.1 (WAN port still unplugged) on my connection list, I waited 20 min and it never appeared, plug in the WAN port and within 5sec the IP appears. This kinda points to the ISP doesnt? I tried changing the DNS server setting from default ISP to google DNS and checked force clients to use router DNS but that did not make any difference.

I have created a block rule but it seems to not be working, since I cant upload a picture Ill write it down
Rule description: Block
Rule applies to: All hosts
Schedule: Checked all day and every day
Restricted resources: unchecked all network access
Remote IP: set to Block only and added 22.6.64.1
Remote port, local ports, etc are set to block all
Is this how I block the IP?

As to this happens to everyone, are you saying this happens regardless of router manufacture? if so does it maybe come from openwrt? or from my ISP? I can give them a call and ask but i will probably be told that since I own the router they cant help unless I get a modem/router combo

[Lantis]

it isn't always the same IP, but odd entries do occur.
You could ask your ISP if they know it, or you could just ignore it.

Or you could look it up yourself.
I found that IP belongs to "DoD Network Information Center". Department of Defense looking into you? Seen any Black Hawk's flying around recently
It is probably some automated probe based on something you did (purposely or inadvertently) and i'd honestly just ignore it. You can't make it go away.

[thevanman]

I found that IP belongs to "DoD Network Information Center". Department of Defense looking into you? Seen any Black Hawk's flying around recently

Dude you serious? I did do an IP lookup on it before I posted but I never thought it was from the actual dod, why would they be probing random networks?
Lantis so just to make something clear, having such address on my active list, does that mean they are inside my network? in other works can they see my devices behind the router?

[Lantis]

I doubt it. Probably just doing random door knocking so to speak.

Just ignore it and you'll be fine