Page 1 of 1

What is "lp-push-server-797.lastpass.com" ?

PostPosted: Mon Sep 24, 2018 1:05 am
by frejoh466
So I'm monitoring my network and I see that last week I saw that "lp-push-server-797.lastpass.com" tried to connect to the internet 66780 times. I blocked it as nothing should connect more than 1000 times and even then that is quite excess. But I didn't notice any different.

So what does it do, and why is it connecting 66780 times in a week?

Re: What is "lp-push-server-797.lastpass.com" ?

PostPosted: Tue Oct 02, 2018 3:37 pm
by matthias74
Hi.

I have also seen these annoying frequent connects to the server
lp-push-server-566.lastpass.com:443


I'm also asking why and what is transmitted.
Hope to not involve the GDPR to get this information :-)

Short extract of my proxy server log:
---cut---
1538501484.825 60310 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501484.825 60316 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501484.825 60424 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60231 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60417 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60463 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501485.825 60469 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 59999 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60035 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60172 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60195 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 59911 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501486.824 60356 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501487.824 60452 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501487.824 60459 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60624 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60629 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60708 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501489.823 60714 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59899 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59905 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59921 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59928 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501491.823 59932 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501495.822 60741 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501495.822 60747 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501495.822 60775 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12 -
1538501499.820 59994 192.168.101.1 TCP_MISS/503 0 CONNECT lp-push-server-566.lastpass.com:443 - DIRECT/38.127.167.12
---cut---

Re: What is "lp-push-server-797.lastpass.com" ?

PostPosted: Tue Oct 02, 2018 7:21 pm
by Terribad
Yeah I use pi-hole and am noticing a HUGE amount of these notifications coming through - what gives ?
And can i block it without affecting Lastpass functionality.

Seems a little excessive.

Mine are to lp-push-server-801.lastpass.com :ugeek:

Re: What is "lp-push-server-797.lastpass.com" ?

PostPosted: Tue Oct 09, 2018 2:11 pm
by WorldsSmartestIdiot
Same here and also no negative effects observed. Somebody's got a story to tell about a narsty work around
I just know it.

LastPass suffocates browser limit of created websocket conne

PostPosted: Fri Oct 12, 2018 4:16 pm
by mrkoka
I'm using firefox 62.0.3 (64 bits) and LastPass 4.17.1.7.

LastPass is creating too many websocket connections, and after a while (less then hour?) nothing websocket can connect. When I looking at about:networking#websockets 196 of
Code: Select All Code
lp-push-server-213.lastpass.com   true   0   0   0   0

Which are host name, ssl, messages sent, messages recv, bytes sent, bytes recv

My guess is it was fixed but it is broken again or it does only apply to some accounts as described here https://bugzilla.mozilla.org/show_bug.cgi?id=1484997

Re: What is "lp-push-server-797.lastpass.com" ?

PostPosted: Wed Oct 17, 2018 1:24 pm
by curthutton873
Took a while to suss out the culprit, but ended up being the LastPass FF extension. Same exact issue as @mrkoka, with same version of FF and LastPass. Too many websockets will just stop connecting to anything else that uses websockets. This includes my company's online software applications. Pretty frustrating and have had to disable it.

Re: What is "lp-push-server-797.lastpass.com" ?

PostPosted: Fri Jan 18, 2019 9:46 am
by frejoh466
I know it is from the lastpass FF extension, not sure if it is the same for chrome. But blocking "lp-push-server-XXX.lastpass.com" seems to have changed nothing.

Would like a comment from @Lastpass as why this exist and what it does, as blocking it seems to change nothing, and I rather block things on my network than let unknown connections go rouge on my network.

Re: What is "lp-push-server-797.lastpass.com" ?

PostPosted: Wed Feb 27, 2019 3:23 am
by pranithgidijala78
We observe this specific call is in pending for ever while debugging the extension in dev tools as it is freezing our web application in chrome while the extension is enabled. If we disable the extension website is loading normally.. Any help here is highly appreciated.