#1  
Old April 11th, 2012, 06:18 AM
stillanoob stillanoob is offline
Junior Member
NETGEAR Newbie
 
Join Date: Jan 2012
Posts: 25
stillanoob is on a distinguished road
Default I was looking at my logs today and saw all this LAN acces from remote??

[LAN access from remote] from 199.126.141.244:61747 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:11
[LAN access from remote] from 50.129.80.215:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:11
[LAN access from remote] from 76.95.41.178:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 24.157.156.199:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 189.132.189.27:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 173.233.1.106:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 67.193.222.142:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 201.167.55.254:6657 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 99.112.129.92:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 98.144.56.196:34177 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 188.85.193.126:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 83.44.24.138:1024 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 67.224.201.97:59095 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:07
[LAN access from remote] from 67.224.182.39:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 24.96.81.124:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 98.214.122.205:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 184.144.5.166:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 74.240.155.92:1024 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 67.249.55.156:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 108.36.120.200:29538 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 50.129.248.212:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 68.11.232.168:22413 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 50.135.62.9:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 99.123.3.23:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 68.100.20.190:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 50.41.203.163:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 75.53.92.26:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 69.118.5.68:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 72.177.198.99:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 37.11.79.21:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 71.236.184.29:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 71.158.164.32:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 24.205.88.164:43544 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 100.40.21.232:28039 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 74.214.13.238:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:06
[LAN access from remote] from 201.173.16.219:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 75.171.203.111:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 204.116.30.44:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 68.239.8.116:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 97.113.198.188:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 71.139.143.248:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 24.191.206.236:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 142.167.250.255:1025 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05
[LAN access from remote] from 209.62.243.87:3074 to 192.168.0.3:3074 Tuesday, Apr 10,2012 17:06:05


I look into remote management and tha is off?? so im a lil confused here.
I look some off the ip's up and their from all over the place spain cananda but mostly from us
Reply With Quote
  #2  
Old April 11th, 2012, 07:35 AM
jmizoguchi's Avatar
jmizoguchi jmizoguchi is online now
Senior Member
NETGEAR Fanatic
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 88,629
jmizoguchi is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

http://support.xbox.com/en-US/xbox-l...used-xbox-live
__________________
VPN Case Study (www.vpncasestudy.com)
Our Second To None VPN Related Setup Case Study
"One Stop Solution To Your Netgear VPN Connectivity"
*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]

Most Other Useful Docs -"General Technical Documentation", "Router Reset", "Router Setup", "Print Server Tips", "Remote Admin"
"Wireless Tips"


Forum Policy

June Mizoguchi-i....@vpncasestudy.com
Reply With Quote
  #3  
Old April 11th, 2012, 09:21 AM
stillanoob stillanoob is offline
Junior Member
NETGEAR Newbie
 
Join Date: Jan 2012
Posts: 25
stillanoob is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

OK so i see tha port 3074 is used by xbox lived
Reply With Quote
  #4  
Old April 11th, 2012, 12:12 PM
stillanoob stillanoob is offline
Junior Member
NETGEAR Newbie
 
Join Date: Jan 2012
Posts: 25
stillanoob is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

Does anybody know if this Remote accesses are safe ?
I know they are coming from the xbox live but The xbox live was beign
used all evening yesterday and this Remote accesses were only around 5pm
Thats what im concern with because if this was normal i would have this connections longer than just 5pm
Reply With Quote
  #5  
Old April 11th, 2012, 04:22 PM
jmizoguchi's Avatar
jmizoguchi jmizoguchi is online now
Senior Member
NETGEAR Fanatic
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 88,629
jmizoguchi is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

this is simply an xbox live traffic somehow it logged

remove the xbox and should see the those type of log will be gone to test
__________________
VPN Case Study (www.vpncasestudy.com)
Our Second To None VPN Related Setup Case Study
"One Stop Solution To Your Netgear VPN Connectivity"
*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]

Most Other Useful Docs -"General Technical Documentation", "Router Reset", "Router Setup", "Print Server Tips", "Remote Admin"
"Wireless Tips"


Forum Policy

June Mizoguchi-i....@vpncasestudy.com
Reply With Quote
  #6  
Old April 11th, 2012, 04:56 PM
w3wilkes w3wilkes is offline
Senior Member
Advanced NETGEAR User
 
Join Date: Feb 2012
Location: Utah, USA
Posts: 129
w3wilkes is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

I temporarily had this router on another network that has a Windows Home Server on it. These servers have the ability to allow remote access and to do it you need to forward ports 80 and 443. The server has a static IP which I reserved in DHCP and then did the port forwarding. This server is still configured on the router even though it has not been present for a few weeks. Just for grins I look at the log and still see that the router is logging remote accesses to the server;
[LAN access from remote] from 141.212.109.58:11221 to 192.168.0.16:443 Tuesday, Apr 10,2012 23:34:49
[LAN access from remote] from 70.150.126.5:61212 to 192.168.0.16:80 Tuesday, Apr 10,2012 23:23:54
My guess is that there's a ton of port scanners out on the big I that are looking for networks to break into so it is no surprise to me that you're seeing remote access attempts. If the router is configured to allow traffic through (I think this can be done with port forwarding, port triggering or UPnP) then you will see these type entries in your log. Just because the router allowed the traffic doesn't mean that the target device on your network allowed the access.
Reply With Quote
  #7  
Old April 13th, 2012, 06:49 AM
stillanoob stillanoob is offline
Junior Member
NETGEAR Newbie
 
Join Date: Jan 2012
Posts: 25
stillanoob is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

I been noticeing every time the xbox live is turn on there are allways
LAN access from remote so alot of this lan acces from remote are beign targeted to the xbox
Reply With Quote
  #8  
Old April 13th, 2012, 07:43 AM
jmizoguchi's Avatar
jmizoguchi jmizoguchi is online now
Senior Member
NETGEAR Fanatic
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 88,629
jmizoguchi is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

all are from xbox community stuff.

expect as normal on this .
__________________
VPN Case Study (www.vpncasestudy.com)
Our Second To None VPN Related Setup Case Study
"One Stop Solution To Your Netgear VPN Connectivity"
*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]

Most Other Useful Docs -"General Technical Documentation", "Router Reset", "Router Setup", "Print Server Tips", "Remote Admin"
"Wireless Tips"


Forum Policy

June Mizoguchi-i....@vpncasestudy.com
Reply With Quote
  #9  
Old May 4th, 2012, 07:25 PM
stillanoob stillanoob is offline
Junior Member
NETGEAR Newbie
 
Join Date: Jan 2012
Posts: 25
stillanoob is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

I disable UPnP and i my router started dropping the packes from all
the remote connections i was getting from the xbox live network
Now im have a bunch of
"[Service blocked: ICMP_echo_req]" ON MY LOGS

And xbox live is running fined
Reply With Quote
  #10  
Old May 4th, 2012, 07:27 PM
jmizoguchi's Avatar
jmizoguchi jmizoguchi is online now
Senior Member
NETGEAR Fanatic
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 88,629
jmizoguchi is on a distinguished road
Default Re: I was looking at my logs today and saw all this LAN acces from remote??

http://en.wikipedia.org/wiki/Interne...ssage_Protocol
__________________
VPN Case Study (www.vpncasestudy.com)
Our Second To None VPN Related Setup Case Study
"One Stop Solution To Your Netgear VPN Connectivity"
*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]

Most Other Useful Docs -"General Technical Documentation", "Router Reset", "Router Setup", "Print Server Tips", "Remote Admin"
"Wireless Tips"


Forum Policy

June Mizoguchi-i....@vpncasestudy.com
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -8. The time now is 12:38 PM.