Forum Discussion

Aspirant

Jun 28, 2022

R7000 DHCP question

I checked my R7000 log this morning and saw this: "[LAN access from remote] from 192.144.226.157:26559 to 192.168.1.2:80, Tuesday, Jun 28,2022 03:33:38" Reading through the logs I see multiple e...

Java_man

Aspirant

Jun 28, 2022

I did a little more digging in the logs. Here are a few examples:

[LAN access from remote] from 2.57.122.209:17773 to 192.168.1.2:80, Monday, Jun 27,2022 07:37:33 PPTECHNOLOGY LIMITED

[LAN access from remote] from 185.196.220.70:50551 to 192.168.1.2:80, Monday, Jun 27,2022 07:10:34 = HOSTLICK - Germany (AbuseIPDB: This IP was reported 1,076 times. Confidence of Abuse is 12%)

[LAN access from remote] from 221.176.116.78:20647 to 192.168.1.2:80, Monday, Jun 27,2022 07:09:36 = China Mobile Communications Corporation - ISP (AbuseIPDB: This IP was reported 663 times. Confidence of Abuse is 100%)

[LAN access from remote] from 154.89.5.87:58914 to 192.168.1.2:80, Monday, Jun 27,2022 06:39:43 = AgotoZ HK Limited (AbuseIPDB: This IP was reported 1,132 times. Confidence of Abuse is 100%)

[LAN access from remote] from 128.1.248.46:18057 to 192.168.1.2:80, Monday, Jun 27,2022 06:35:25 = Zenlayer Inc (AbuseIPDB: This IP was reported 14,921 times. Confidence of Abuse is 100%)

FURRYe38

Guru - Experienced User

Jun 28, 2022

Hmmm...

FURRYe38
Guru - Experienced User
Jun 28, 2022
Would be curious to see what happens if you set the default DHCP IP address range to 192.168.1.100 to.200.

Has a factory reset and setup from scratch been performed since you updated FW?

Something would be using .2 I believe. What browser are you using? Try MS Edge or Firefox and see what's seen in Connected Devices.
- Java_man
  Aspirant
  Jun 28, 2022
  Earlier today I reset DHCP to begin range with 192.168.1.3.
  
  I cleared the logs and will post when there are some entries.
  
  [LAN access from remote] from 163.172.158.4:57501 to 192.168.1.2:80, Tuesday, Jun 28,2022 10:02:50
  
  BUT, I just remembered I used to host a web server. I searched some code that checked on the IP of the server and it was 192.168.1.2. Took it offline years ago and it's not even connected.
  
  Thoughts?