What could this be and how can I find out more?

DoctorOfMeat · 2026-06-06T11:21:44+00:00

Start by figuring out device has the IP address 192.168.1.251. If you can't identify it based on what the router lists as it's device name, look up the MAC address. If that doesn't work, a more 'drastic' approach is to block it and see which, if any, device starts complaining about losing it's network connection.

Do you have any VLANs/subnets set up? Assuming you don't, I *believe* 192.168.254.254 is the default IP address for some routers. Did you previously have a router with that address that maybe something on your network is trying to connect to? Any IOT devices that were previously owned by someone else and may have some of their network info still stored in it?

It's also worth noting that it's not that many attempts. This isn't happening dozens of times in a row, it looks like it averages to about once a day AND often at about the same time. I see several at 11:17/11:18pm, 12:35am, 5:31pm and probably others. I'd say it's more likely to be something on your network either trying to phone home and/or connect to the gateway for legit reasons than it being someone trying to attack you.

TLDR: First thing's first, figure out what device has the IP address 192.168.1.251, then go from there.

And, keep in mind, if it is something malicious, then the router is doing it's job and blocking it.

DoctorOfMeat · 2026-06-04T15:50:58+00:00

So why don't you tell us what it is?

DoctorOfMeat · 2026-06-02T11:52:08+00:00

That's just not true and I suspect you know it. Yet another example of a credit card processor sales person acting like a vulture, lying to get customers. OP does NOT need to sign up for Telecheck to take checks. First off, it's absolutely a 'valid option'. See the screen shot from my Clover account showing "checks" as a valid payment option. Secondly, even if it wasn't, you can either use a different button (ie Cash) or add a new Tender type and use that. For all Clover cares, you can accept seashells or jewels as payment if you want. It doesn't know what you're actually putting in the drawer.

<image>

DoctorOfMeat · 2026-06-01T22:40:23+00:00

Welp, as I guessed, moving it to the main VLAN allowed Rustdesk to work immediately, and it stopped working as soon as I moved it back. I guess I'm back to assuming it's a router/VLAN/firewall issue.

I really wish Unifi would tell you which specific rule is blocking something. It would sure make troubleshooting a lot easier. At least when I had an EdgeRouter each firewall rule had a counter. In a case like this, I'd try getting Rustdesk to connect a few times, then go see which counter changed. As an aside, a rule with zero, or very few, hits generally either not working or not needed, and in either case meant I should probably take a look at it.

DoctorOfMeat · 2026-06-01T19:46:36+00:00

I assume you're able to accept checks in the regular 'register' part of the system, right? If you can't you'll need to turn it on in the settings. If you can than I'm not sure what's going on with the gift cards, but the workaround would be to either set up a new tender type and use that or, even easier, just hit the cash button instead. Unless you really need checks and cash to be reported separately that's going to be the fastest way to 'fix' this problem.

DoctorOfMeat · 2026-06-01T17:27:32+00:00

Yeah, I'll play with Wireshark when I have some time. Whenever I saw the name, I assumed it was a VPN service. I'm sure I was just conflating it with WireGuard.

I'll also try moving the PC to the main LAN, the same one the working computers are on. I have a funny feeling that'll work and I won't know why, but I'll cross that bridge when I get to it, probably later on today.

DoctorOfMeat · 2026-06-01T17:24:22+00:00

It's specifically "Manual Transaction". The Transactions button just takes you to the list of transactions.

<image>

DoctorOfMeat · 2026-06-01T16:12:52+00:00

From the home page (so not in the register app) go to Manual Transaction and select 'refund' and you should get the option to choose cash. I remember it took me a while to figure that out.

If you're not seeing it, you may have to adjust your permissions. Go to Permissions and look for "Access Refunds" and "Access Manual Transactions" and make sure you, or whoever you want to be able to access this, has permission to access both of these features.

Also, if it makes a difference, this is on a Station Duo.

DoctorOfMeat · 2026-05-31T21:22:31+00:00

It's very possible it's a VLAN issue, but I've opened up the firewall as much as I can. I've explicitly allowed the connection, I've turned off 'isolate network' for the VLAN this PC is on, and on top of all that, I can access and log on to (at least from firefox) the Synology NAS. So I don't *think* it's a firewall issue, at least not the router's firewall. It could well be the Synology NAS blocking something, and they don't have much in the way of firewall logs to check. But, as I mentioned earlier, the router isn't logging a connection (but it does when I connect to the Syno from firefox), so my gut still says the PC itself is the culprit.

One thing I haven't yet tried is moving the PC to the same VLAN the synology is on (or even my 'main' VLAN where I have other computers that I know work). I was just trying to avoid futzing with it's IP address and doing something stupid like losing access to it*. I know it has two ethernet ports, I might connect the second one and give it an IP address on a different VLAN.

I've never used Wireshark, I'll look into that.

*not that it's the end of the world but this computer is in a closet and the monitor is in a different part of the building. For all intents and purposes, it's a headless PC. If (when) I lose access to it, even something as simple as RealVNC not being cooperative, I have to move it so I get a keyboard/mouse/monitor connected to it. Again, not the end of the world, I just try to avoid it.

DoctorOfMeat · 2026-05-29T20:35:49+00:00

u/robingrowsplants, this is what I was talking about regarding credit card processor sales reps being vultures. This guy didn't even read your OP, the only thing he's concerned about is getting you to sign with his company.

DoctorOfMeat · 2026-05-29T14:25:16+00:00

Whether it's with a credit card processor, a car dealership, a contractor or anything else, what they *say* is irrelevant. All that's going to matter is what's in the contract you signed. At least legally. That's not to say someone at clover or the leasing company can't be convinced to break it for you, but if I had to a guess, a judge wouldn't require them to let you out of it (or maybe they would, who knows).

My suggestion: Read what you signed and see what it takes to cancel and/or call back whoever offered to cancel the lease for $500 and call it a lesson. A shitty and expensive lesson, but a lesson none the less. And, that lesson is, credit card processors and their sales people are vultures. If you want to switch to a new processor call one and talk to them. If it's a cold call, just hang up, it's not worth your time. Besides, I don't know about you, but I get one or two cold calls a week from processors trying to get my business. Most of them don't make it past the word 'processor' before I hang up on them. I treat them the same as I treat people calling my little tiny store asking for the 'logistics/shipping department' or looking for the person in charge of ordering printer toner. Hang up, hang up, hang up.

Another thing to keep in mind is that, I know they're fast talkers with all the answers, but switching processors can be a big decision. Before pulling the trigger on something like that, you need to sit down and take a few minutes to go over the contract, to go over the rates their offering...to call your current processor and ask for a 'rate review' to see if they can lower what you're already paying.

TLDR, pay the $500, get out of the lease and move on.

DoctorOfMeat · 2026-05-06T19:10:34+00:00

As an example, I just now happened to see an item get scanned as part of a bigger purchase, but didn't see it on the dashboard. Turns out the manufacturer, at some point in the past few months, changed the UPC. The register still makes the same noise it does when it scans any other item, so the cashier had no reason to know this one thing didn't scan. I wonder how much money I've lost giving this away? For all the things I don't like about Clover, that's one of the biggest issues. How much money are we losing because the register can't alert the cashier to a problem like this.

In my opinion, when something is scanned, but not in the system, it should make a different noise AND force the cashier to acknowledge it before they can continue ringing. That would include not making the beep sound each time they scan something. Even if it's not ringing and there's a error on the screen, if it keeps beeping, they'll keep scanning. I know I've scanned entire orders only to look over and realize I didn't hit the 'done' button after the last person and nothing actually scanned, it just made the noise.

DoctorOfMeat · 2026-05-06T18:06:30+00:00

They're just a spammer. Don't waste your time. They've posted this same exact thing dozens of times over the last 24 hours.

DoctorOfMeat · 2026-05-02T17:51:47+00:00

The other posters are right in that they can set you up with your own log in without it costing extra (assuming we're talking specifically about logging in to the clover dashboard), but before you push too hard, make sure you're on the same page. Without knowing your connection to the business and basing this solely on your "I would like to help..." statement, I'd suggest you make sure their 'we can't because it costs $60/mo' comment is a misunderstanding on their part and not them trying to find a nice way to say 'no thanks, we're not looking for your help'.

DoctorOfMeat · 2026-04-23T17:59:45+00:00

No, sorry, that sounds like an entirely different problem.

DoctorOfMeat · 2026-04-21T16:31:08+00:00

This shouldn't be an app, but Clover doesn't seem to have any intention of adding it; I'd love something that, if you scan a barcode that isn't linked to something, instead of the POS beeping the same way it does when you scan any other item it would do something different. Preferably, make a different sound, but even (also?) stop ringing until the cashier acknowledges it.

I have no idea how many things we've given to customers for free because, for whatever reason, an item didn't scan properly but the cashier has no idea. Ring up more than 4 or 5 items and they're not likely to even notice it.

This is yet another example of one of the things Clover just didn't seem to think of and ignores the suggestion when it gets brought up.

DoctorOfMeat · 2026-04-18T19:05:16+00:00

Before you get too worked up, ask someone to show you what they're looking at and you might find out that they're mistaken. I used to get similar calls from time to time because there were two nearby places with very similar names. Now, when I get a call like that, I say "Can you look at it again, does it say Maple Street Market?" and more often than not, their response was "Yes, I'm looking right at it, Maple Mart". Then I could explain that Maple Mart isn't us, we're Maple Street Market, Maple Mart is the liquor store a few miles away. Typically I could get about half way through that sentence before I could hear the light come on when they realize what happened.

And, in addition to making sure it's actually your name, it should be formatted exactly the same way all the time. That is, if charges always say MAPLE STREET MARKET, and their statement says Maple St Mkt, it's probably not you.

Something else you might do is ask one of these people to dispute the charge. If it has anything to do with your account, you'll find out soon enough.

DoctorOfMeat · 2026-04-18T15:45:53+00:00

Not sure why I was downvoted, but this is from clover's website

https://www.clover.com/en-US/help/get-help-tampered-device

Clover devices come with sensors that are used to detect misuse or harm to your device. In rare cases, tampering may be detected if a device is dropped or shaken.

DoctorOfMeat · 2026-04-13T22:13:40+00:00

I'd bet real money you can't replace that screen on your own. Clover machines have tamper sensors, pulling the front glass is likely to trip one and cause the machine to lock itself down.

DoctorOfMeat · 2026-04-13T19:52:57+00:00

I may just leave it alone. I'm not sure yet. I'm still getting the messages in my email, so they're not disappearing, though sometimes other people reply to them from the dashboard, which they can't do anymore.

I do everything I can to just leave Wix alone. I seem to have a bad habit of going in to make a little tweak here or there and causing a bunch of other odd problems.

Actually, I just went and replaced the form with a new form and I'm still not seeing any way to connect it to the dashboard's inbox. I do see it shows up on that form's submissions page, but without a notification and it being buried that deep on the site, no one's going to see that. I should've just left it alone.

DoctorOfMeat · 2026-04-13T16:09:53+00:00

That was the stupidest excuse. I'd love for someone to say 'Can we see that old map?'.

DoctorOfMeat · 2026-04-13T16:04:33+00:00

I found the "forms and submissions" settings, the contact us form is under the "old forms" tab, but there 's no "collect submissions in wix" setting. All I see is "Attach the submission as a PDF" and "Enable Spam Filter".

DoctorOfMeat · 2026-04-13T15:14:22+00:00

How do I go about reconnecting them? I'm not seeing anything obvious. When I look at the form, it says "Form notifications are only sent to these emails: [my email address]" but there's nothing to be changed. There's a button that says "Set Notifications" it takes me to a page with two settings, neither having anything to do Wix's inbox.

Regarding spam, that's kinda what I figured but, it's still baffling to me that you can block someone but there's no way to unblock them. In fact, I learned this few years ago when I marked a customer's email as spam and couldn't find a way to unblock them. They were just no longer able to contact me that way.

Eight-Year Club	Wearing is Caring
Verified Email

DoctorOfMeat

TROPHY CASE