What is "lp-push-server-797.lastpass.com" ?

Have questions about LastPass, or having problems using it? Ask for help here!

Moderators: admin, Israel, anatoly_LP, chantieLP, robyn, JoeSiegrist

What is "lp-push-server-797.lastpass.com" ?

Postby frejoh466 » Mon Sep 24, 2018 1:05 am

So I'm monitoring my network and I see that last week I saw that "lp-push-server-797.lastpass.com" tried to connect to the internet 66780 times. I blocked it as nothing should connect more than 1000 times and even then that is quite excess. But I didn't notice any different.

So what does it do, and why is it connecting 66780 times in a week?
frejoh466
 
Posts: 2
Joined: Thu May 11, 2017 9:36 am

Re: What is "lp-push-server-797.lastpass.com" ?

Postby matthias74 » Tue Oct 02, 2018 3:37 pm

Hi.

I have also seen these annoying frequent connects to the server
lp-push-server-566.lastpass.com:443


I'm also asking why and what is transmitted.
Hope to not involve the GDPR to get this information :-)

Short extract of my proxy server log:
---cut---
1538501484.825 60310 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501484.825 60316 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501484.825 60424 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60231 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60417 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60463 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60469 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 59999 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60035 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60172 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60195 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 59911 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60356 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501487.824 60452 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501487.824 60459 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60624 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60629 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60708 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60714 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59899 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59905 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59921 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59928 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59932 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501495.822 60741 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501495.822 60747 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501495.822 60775 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501499.820 59994 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12
---cut---
matthias74
 
Posts: 1
Joined: Sun Jul 02, 2017 4:49 pm

Re: What is "lp-push-server-797.lastpass.com" ?

Postby Terribad » Tue Oct 02, 2018 7:21 pm

Yeah I use pi-hole and am noticing a HUGE amount of these notifications coming through - what gives ?
And can i block it without affecting Lastpass functionality.

Seems a little excessive.

Mine are to lp-push-server-801.lastpass.com :ugeek:
Terribad
 
Posts: 1
Joined: Tue Oct 02, 2018 7:16 pm

Re: What is "lp-push-server-797.lastpass.com" ?

Postby WorldsSmartestIdiot » Tue Oct 09, 2018 2:11 pm

Same here and also no negative effects observed. Somebody's got a story to tell about a narsty work around
I just know it.
WorldsSmartestIdiot
 
Posts: 1
Joined: Tue Oct 09, 2018 1:04 pm

LastPass suffocates browser limit of created websocket conne

Postby mrkoka » Fri Oct 12, 2018 4:16 pm

I'm using firefox 62.0.3 (64 bits) and LastPass 4.17.1.7.

LastPass is creating too many websocket connections, and after a while (less then hour?) nothing websocket can connect. When I looking at about:networking#websockets 196 of
Code: Select All Code
lp-push-server-213.lastpass.com   true   0   0   0   0

Which are host name, ssl, messages sent, messages recv, bytes sent, bytes recv

My guess is it was fixed but it is broken again or it does only apply to some accounts as described here https://bugzilla.mozilla.org/show_bug.cgi?id=1484997
mrkoka
 
Posts: 1
Joined: Fri Oct 12, 2018 4:04 pm

Re: What is "lp-push-server-797.lastpass.com" ?

Postby curthutton873 » Wed Oct 17, 2018 1:24 pm

Took a while to suss out the culprit, but ended up being the LastPass FF extension. Same exact issue as @mrkoka, with same version of FF and LastPass. Too many websockets will just stop connecting to anything else that uses websockets. This includes my company's online software applications. Pretty frustrating and have had to disable it.
curthutton873
 
Posts: 1
Joined: Wed Oct 17, 2018 1:20 pm

Re: What is "lp-push-server-797.lastpass.com" ?

Postby frejoh466 » Fri Jan 18, 2019 9:46 am

I know it is from the lastpass FF extension, not sure if it is the same for chrome. But blocking "lp-push-server-XXX.lastpass.com" seems to have changed nothing.

Would like a comment from @Lastpass as why this exist and what it does, as blocking it seems to change nothing, and I rather block things on my network than let unknown connections go rouge on my network.
frejoh466
 
Posts: 2
Joined: Thu May 11, 2017 9:36 am

Re: What is "lp-push-server-797.lastpass.com" ?

Postby pranithgidijala78 » Wed Feb 27, 2019 3:23 am

We observe this specific call is in pending for ever while debugging the extension in dev tools as it is freezing our web application in chrome while the extension is enabled. If we disable the extension website is loading normally.. Any help here is highly appreciated.
pranithgidijala78
 
Posts: 1
Joined: Wed Feb 27, 2019 3:20 am


Return to General Support & Troubleshooting

Who is online

Users browsing this forum: Google Feedfetcher and 77 guests