WAN address trying to connect to to itself @ ssh 22

[StealthNet]

Hi there,

I just reinstalled pfsense from scratch. Changed ssh to a non default port and blocked all traffic to 22 from lan and wan (and to the non default port from !LAN). But now I am getting these:

https://rmcholewa.com/wp-content/uploads/2025/04/sshloopback.jpg

192.168.125.0/24 is the network between pfsense wan and fibre "modem" lan. .6 is the Ip associated as wan address in pfsense.

Any ideas?

[johnpoz]

@StealthNet what packages are you running? ntop does discovery for example - ssh being one of the ports it tries to discover on, etc. That would be my guess.

[StealthNet]

@johnpoz You nailed it. ntopng is installed!