cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
davidramsay
Aspiring Expert
1,108 Views
Message 1 of 7

I am getting Remote Administration and Port Forwarding in the event log on my HH4

The following is a small sample of the events;

 

12:36:57, 07 Jan.IN: BLOCK [16] Remote administration (TCP [169.229.3.90]:41590-​>[86.186.72.110]:80 on ppp1)
12:36:03, 07 Jan.IN: BLOCK [16] Remote administration (TCP [119.133.54.46]:50876-​>[86.186.72.110]:8080 on ppp1)

 

... using the tools I have available it seems that they originate from across the world.  I know they are blocked but ...

 

I am also getting the following port forwarding events shortly after my device connects, I have not implemented these rules;

 

12:25:27, 07 Jan.(44473.080000) Port forwarding rule added via UPnP/TR064. Protocol: UDP, external ports: any-​>4500, internal ports: 4500, internal client: 192.168.1.64
12:25:26, 07 Jan.(44472.720000) Port forwarding rule added via UPnP/TR064. Protocol: UDP, external ports: any-​>5353, internal ports: 5353, internal client: 192.168.1.64
12:25:26, 07 Jan.(44472.090000) Port forwarding rule added via UPnP/TR064. Protocol: UDP, external ports: any-​>4500, internal ports: 4500, internal client: 192.168.1.64
12:25:25, 07 Jan.(44471.660000) Port forwarding rule added via UPnP/TR064. Protocol: UDP, external ports: any-​>5353, internal ports: 5353, internal client: 192.168.1.64
12:25:24, 07 Jan.(44470.020000) Lease for IP 192.168.1.64 renewed by host DavidRaaysi7MBP (MAC 14:10:9f:de:8d:61). Lease duration: 1440 min

 

... any advice appreciated.

0 Ratings
6 REPLIES 6
licquorice
Distinguished Sage
Distinguished Sage
1,104 Views
Message 2 of 7

Re: I am getting Remote Administration and Port Forwarding in the event log on my HH4

Are you using a VPN and possibly Apple TV?

0 Ratings
davidramsay
Aspiring Expert
1,102 Views
Message 3 of 7

Re: I am getting Remote Administration and Port Forwarding in the event log on my HH4

Neither, although I do have VMWare Fusion installed but not running, WiFi is currently the only configured network device.
0 Ratings
licquorice
Distinguished Sage
Distinguished Sage
1,099 Views
Message 4 of 7

Re: I am getting Remote Administration and Port Forwarding in the event log on my HH4

I would disable UPnP in that case.

0 Ratings
davidramsay
Aspiring Expert
1,096 Views
Message 5 of 7

Re: I am getting Remote Administration and Port Forwarding in the event log on my HH4

Nope cannot do that as I require it for remote connection to support my disabled Son and his iMac
0 Ratings
licquorice
Distinguished Sage
Distinguished Sage
1,090 Views
Message 6 of 7

Re: I am getting Remote Administration and Port Forwarding in the event log on my HH4

In which case, that is probably what is causing UPnP to open the ports and there is no problem.

davidramsay
Aspiring Expert
1,080 Views
Message 7 of 7

Re: I am getting Remote Administration and Port Forwarding in the event log on my HH4

As the session isn't running and I haven't used it for at least a week then ...

 

Anyway will do some more testing thanks

0 Ratings