Reply
Aspirant
Posts: 3
Registered: ‎2009-02-25

LAN access from remote

Can can someone please explain what the log below means, where it says from, is not my ip and i dont know who it belongs too. Im not sure if someone is accessing my network

[LAN access from remote] from 70.112.165.22:3074 to 192.778.1.2:3074 Wednesday, Feb 25,2009 18:14:18
[LAN access from remote] from 90.212.126.243:3074 to 192.778.1.2:3074 Wednesday, Feb 25,2009 18:14:18
[LAN access from remote] from 99.253.21.50:3074 to 192.778.1.2:3074 Wednesday, Feb 25,2009 18:14:18
[LAN access from remote] from 24.45.175.108:3074 to 192.778.1.2:3074
Aspirant
Posts: 1,791
Registered: ‎2008-10-01

Re: LAN access from remote

Do you have an xbox with xbox live? It looks like port 3074 is commonly used by that service.
1-888-NETGEAR - (Phone Support)



"Apple's market share is bigger than BMW's or Mercedes's or Porsche's in the automotive market. What's wrong with being BMW or Mercedes?" -Steve Jobs



Network Cards/Adapters:

GA311, WNDA3100



Routers/APs/Switches:

DGDN3300, FVS114, GS108, WRT54GL (DD-WRT)



Comps:

MacBook C2D 2.0Ghz/3GB/250GB

Hackintosh C2D 2.4 GHz/4GB/700GB

iPhone 3G (16GB Black), Xbox 360, PS3
Aspirant
Posts: 3
Registered: ‎2009-02-25

Re: LAN access from remote

Yes i do have xbox live and yes thats where i got those logs.

Sometimes i get similar logs without having my xbox connected, can someone use my network via LAN access from remote even though ive got wpa security and the rest

Sorry if i sound dumb
Aspirant
Posts: 1,791
Registered: ‎2008-10-01

Re: LAN access from remote

I wouldn't worry too much about it. It could just be the microsoft servers trying to contact the xbox even when it's turned off (dunno)

I doubt it's anything nefarious though
1-888-NETGEAR - (Phone Support)



"Apple's market share is bigger than BMW's or Mercedes's or Porsche's in the automotive market. What's wrong with being BMW or Mercedes?" -Steve Jobs



Network Cards/Adapters:

GA311, WNDA3100



Routers/APs/Switches:

DGDN3300, FVS114, GS108, WRT54GL (DD-WRT)



Comps:

MacBook C2D 2.0Ghz/3GB/250GB

Hackintosh C2D 2.4 GHz/4GB/700GB

iPhone 3G (16GB Black), Xbox 360, PS3
Aspirant
Posts: 3
Registered: ‎2009-02-25

Re: LAN access from remote

Thanks for the quick reply
Aspirant
Posts: 3
Registered: ‎2008-12-17

Re: LAN access from remote

I don't have an Xbox nor do I use P2P utilities, but I am receiving this message. Are there any other reasons I may be getting it? Any way to stop it?
Luminary
Posts: 89,285
Registered: ‎2009-01-27

Re: LAN access from remote

ssmoore wrote:
I don't have an Xbox nor do I use P2P utilities, but I am receiving this message. Are there any other reasons I may be getting it? Any way to stop it?


there is many valid app you have installed that reach server for updates etc. if all the ports is closed then it's probably reaching for updates etc.
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Aspirant
Posts: 1
Registered: ‎2009-05-22

Re: LAN access from remote

The router is bombarded with hundreds of these each minute.
[LAN access from remote] from 119.160.129.25:10870 to 205.103.1.16:6114
[LAN access from remote] from 124.180.116.20:60005 to 205.103.1.16:6114
[LAN access from remote] from 187.13.156.179:60559 to 205.103.1.16:6114
[LAN access from remote] from 189.153.54.67:59532 to 205.103.1.16:6114 S
[LAN access from remote] from 190.100.86.59:37523 to 205.103.1.16:6114 S
[LAN access from remote] from 216.103.80.129:56328 to 205.103.1.16:6114
[LAN access from remote] from 220.233.42.53:63199 to 205.103.1.16:6114 S
[LAN access from remote] from 68.2.176.145:12963 to 205.103.1.16:6114 Sa

The source IP addresses are from around the world.

Does this mean that this is getting through the "firewall?
What security impact does this have?
Luminary
Posts: 89,285
Registered: ‎2009-01-27

Re: LAN access from remote

dleongvp wrote:
The router is bombarded with hundreds of these each minute.
[LAN access from remote] from 119.160.129.25:10870 to 205.103.1.16:6114
[LAN access from remote] from 124.180.116.20:60005 to 205.103.1.16:6114
[LAN access from remote] from 187.13.156.179:60559 to 205.103.1.16:6114
[LAN access from remote] from 189.153.54.67:59532 to 205.103.1.16:6114 S
[LAN access from remote] from 190.100.86.59:37523 to 205.103.1.16:6114 S
[LAN access from remote] from 216.103.80.129:56328 to 205.103.1.16:6114
[LAN access from remote] from 220.233.42.53:63199 to 205.103.1.16:6114 S
[LAN access from remote] from 68.2.176.145:12963 to 205.103.1.16:6114 Sa

The source IP addresses are from around the world.

Does this mean that this is getting through the "firewall?
What security impact does this have?

using torrent? if so you will see many of log like this
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Aspirant
Posts: 9
Registered: ‎2007-01-29

Re: LAN access from remote

i am getting the same thing. not connected to any p2p at the times in question. no xbox. 600-800 requests in four minutes. i am worried, should i stop?
Luminary
Posts: 89,285
Registered: ‎2009-01-27

Re: LAN access from remote

wobumang wrote:
i am getting the same thing. not connected to any p2p at the times in question. no xbox. 600-800 requests in four minutes. i am worried, should i stop?


these logs does no say it penetrate to your LAN. firewall is blocking these by logging it. don't expect to have clean log because you don't. internet traffic never dies and there is somewhere scanning, pinging.. etc
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Novice
Posts: 0
Registered: ‎2010-11-11

Re: LAN access from remote

I know that this is a dated topic, but I don't think any of the items apply to me, or maybe they do, but I need some clarification.

I am getting

[LAN access from remote] from 213.231.6.164:29465 to 192.168.1.17:4041, Thursday, November 11,2010 06:41:59
[LAN access from remote] from 91.210.144.5:4801 to 192.168.1.17:4041, Thursday, November 11,2010 06:41:54
[LAN access from remote] from 124.229.243.209:9878 to 192.168.1.17:4041, Thursday, November 11,2010 06:41:51
[LAN access from remote] from 108.67.244.164:60924 to 192.168.1.17:4041, Thursday, November 11,2010 06:41:50


Now, the IP address that this is referring to (192.168.1.17) is a wired address, not wireless. So I am wondering how any of the devices previously mentioned could be hitting it. Also, this is not saying Denial Of Service....this is saying Access. It definately concerns me.

There is a PS3 and a Wii in the house, but at the moment, they are both turned off.
Luminary
Posts: 89,285
Registered: ‎2009-01-27

Re: LAN access from remote

scan your PC for any malware or if you use torrent type of app could be generated from multiple traffics
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Novice
Posts: 0
Registered: ‎2010-11-11

Re: LAN access from remote

I don't use any torrent apps (to my knowledge) and I always worry about malware scans......most of them turn out to be malware themselves. Any safe reccommendations?
Luminary
Posts: 89,285
Registered: ‎2009-01-27

Re: LAN access from remote

192.168.1.17 is destination on log so I would double check all the background app etc.
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Novice
Posts: 0
Registered: ‎2010-11-11

Re: LAN access from remote

jmizoguchi wrote:
192.168.1.17 is destination on log so I would double check all the background app etc.


Nope, nothing jumped out there, or killing anything that appeared to be suspect did not help.

I also scanned using Malware Bytes and it found nothing. Interestingly though, I showed the router log to a neighbor who immediately said...

interesting. something is running on 4041 and using upnp to get the router to open a port


Sure enough.....uPnP was turned on and there was activity on the IP/Ports in question. I turned it off and voila........
Luminary
Posts: 89,285
Registered: ‎2009-01-27

Re: LAN access from remote

That means you PC still making connection

Every log you see is not negative. It's a log.

You app that is going out for legit traffic that you installed if you are free from malware
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Novice
Posts: 0
Registered: ‎2010-11-25

Re: LAN access from remote

I saw 3 similar log entries but they were marded as going to the ip address of my PRINTER.

WHOIS had one of the outside IP addresses coming from .ru domain (Russia).

I just turned off upnp, but this concerns me a lot. I want plug and play for my printer, but ONLY inside the lan, not outside. It's an HP printer.

Any ideas?
Thanks-
Luminary
Posts: 89,285
Registered: ‎2009-01-27

Re: LAN access from remote

Upnp is for ports to be used by the devices.

Printer will work without Upnp on LAN side.
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Aspirant
Posts: 1
Registered: ‎2011-08-28

Re: LAN access from remote

Sorry to be late to this forum, am having the same problem, but with DoS mixed in.

I would be worried especially if you have not been using P2P sites and the IP addresses are .ru
Aspirant
Posts: 1
Registered: ‎2011-12-08

Re: LAN access from remote

Had this same issue today, disabled uPNP and no longer saw any of those logs. If you have UPnP on.....some routers have this defaulted on, you will see logs of this sort. I wonder why the big boss man who works for Netgear did not even think to mention this.
Aspirant
Posts: 5
Registered: ‎2011-01-08

Re: LAN access from remote

If you've got Skype running, have a look at that. Just turned it off on one of my machines and the messages stop.

I was getting this, for info:

[LAN access from remote] from 83.87.219.220:54848 to 192.168.1.5:28609, Saturday, March 01,2014 12:10:16

Skype was the culprit. No harm done.
Aspirant
Posts: 1
Registered: ‎2014-09-16

Re: LAN access from remote

jmizoguchi wrote:
using torrent? if so you will see many of log like this


Hi @jmizoguchi, does that affect in any way the users within that network?
My uncle uses torrents too and we get these logs all the time. Should we worry?

[LAN access from remote] from 83.117.222.111:61827 to 192.168.0.10:18552, Tuesday, Sep 16,2014 08:17:24
Aspirant
Posts: 1
Registered: ‎2014-10-01

Re: LAN access from remote

hi,
can you help in connecting my HP Laserjet 4200 printer with lan for network printing to my work. i'm getting trouble with the network printing....hope to have a exact solution to my issues.
Discussion Stats
  • 23 replies
  • 90076 views
  • 0 kudos
  • 13 in conversation