what is going on with BI and my firewall log? why all this connections?

[Coldair]

[LAN access from remote] from 75.145.0.97:56129 to 172.16.0.101:81, Thursday, Jun 22,2017 07:01:00
[LAN access from remote] from 75.145.0.97:56128 to 172.16.0.101:81, Thursday, Jun 22,2017 07:01:00
[LAN access from remote] from 75.145.0.97:56126 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:59
[LAN access from remote] from 75.145.0.97:56127 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:59
[LAN access from remote] from 75.145.0.97:56125 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:58
[LAN access from remote] from 75.145.0.97:56124 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:58
[LAN access from remote] from 75.145.0.97:56121 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:57
[LAN access from remote] from 75.145.0.97:56122 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:57
[LAN access from remote] from 75.145.0.97:56118 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:56
[LAN access from remote] from 75.145.0.97:56119 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:56
[LAN access from remote] from 75.145.0.97:56115 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:55
[LAN access from remote] from 75.145.0.97:56116 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:55
[LAN access from remote] from 75.145.0.97:56113 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:54
[LAN access from remote] from 75.145.0.97:56114 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:54
[LAN access from remote] from 75.145.0.97:56111 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:53
[LAN access from remote] from 75.145.0.97:56112 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:53
[LAN access from remote] from 75.145.0.97:56109 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:52
[LAN access from remote] from 75.145.0.97:56110 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:52
[LAN access from remote] from 75.145.0.97:56107 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:51
[LAN access from remote] from 75.145.0.97:56108 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:51
[LAN access from remote] from 75.145.0.97:56105 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:50
[LAN access from remote] from 75.145.0.97:56106 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:50
[LAN access from remote] from 75.145.0.97:56103 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:49
[LAN access from remote] from 75.145.0.97:56104 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:49
[LAN access from remote] from 75.145.0.97:56099 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:48
[LAN access from remote] from 75.145.0.97:56098 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:48
[LAN access from remote] from 75.145.0.97:56097 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:47
[LAN access from remote] from 75.145.0.97:56096 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:47
[LAN access from remote] from 75.145.0.97:56095 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:46
[LAN access from remote] from 75.145.0.97:56094 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:46
[LAN access from remote] from 75.145.0.97:56092 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:45
[LAN access from remote] from 75.145.0.97:56091 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:45
[LAN access from remote] from 75.145.0.97:56090 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:44
[LAN access from remote] from 75.145.0.97:56089 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:44
[LAN access from remote] from 75.145.0.97:56086 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:43
[LAN access from remote] from 75.145.0.97:56085 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:43
[LAN access from remote] from 75.145.0.97:56083 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:42
[LAN access from remote] from 75.145.0.97:56084 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:42
[LAN access from remote] from 75.145.0.97:56082 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:41
[LAN access from remote] from 75.145.0.97:56081 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:41
[LAN access from remote] from 75.145.0.97:56079 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:39
[LAN access from remote] from 75.145.0.97:56080 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:39
[LAN access from remote] from 75.145.0.97:56078 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:38
[LAN access from remote] from 75.145.0.97:56077 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:38
[LAN access from remote] from 75.145.0.97:56072 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:37
[LAN access from remote] from 75.145.0.97:56073 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:37
[LAN access from remote] from 75.145.0.97:56070 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:36
[LAN access from remote] from 75.145.0.97:56071 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:36
[LAN access from remote] from 75.145.0.97:56067 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:35
[LAN access from remote] from 75.145.0.97:56068 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:35
[LAN access from remote] from 75.145.0.97:56065 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:34
[LAN access from remote] from 75.145.0.97:56066 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:34
[LAN access from remote] from 75.145.0.97:56064 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:33
[LAN access from remote] from 75.145.0.97:56063 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:33
[LAN access from remote] from 75.145.0.97:56061 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:32
[LAN access from remote] from 75.145.0.97:56062 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:32
[LAN access from remote] from 75.145.0.97:56058 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:31
[LAN access from remote] from 75.145.0.97:56059 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:31
[LAN access from remote] from 75.145.0.97:56056 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:30
[LAN access from remote] from 75.145.0.97:56057 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:30
[LAN access from remote] from 75.145.0.97:56054 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:29
[LAN access from remote] from 75.145.0.97:56055 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:29
[LAN access from remote] from 75.145.0.97:56053 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:28
[LAN access from remote] from 75.145.0.97:56052 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:28
[LAN access from remote] from 75.145.0.97:56051 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:27
[LAN access from remote] from 75.145.0.97:56050 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:27
[LAN access from remote] from 75.145.0.97:56049 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:26
[LAN access from remote] from 75.145.0.97:56048 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:26
[LAN access from remote] from 75.145.0.97:56045 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:25
[LAN access from remote] from 75.145.0.97:56046 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:25
[LAN access from remote] from 75.145.0.97:56044 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:24
[LAN access from remote] from 75.145.0.97:56043 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:24
[LAN access from remote] from 75.145.0.97:56041 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:23
[LAN access from remote] from 75.145.0.97:56042 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:23
[LAN access from remote] from 75.145.0.97:56039 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:22
[LAN access from remote] from 75.145.0.97:56040 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:22
[LAN access from remote] from 75.145.0.97:56038 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:21
[LAN access from remote] from 75.145.0.97:56037 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:21
[LAN access from remote] from 75.145.0.97:56036 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:20
[LAN access from remote] from 75.145.0.97:56035 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:20
[LAN access from remote] from 75.145.0.97:56034 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:19
[LAN access from remote] from 75.145.0.97:56033 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:19
[LAN access from remote] from 75.145.0.97:56032 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:17
[LAN access from remote] from 75.145.0.97:56031 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:17
[LAN access from remote] from 75.145.0.97:56029 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:16
[LAN access from remote] from 75.145.0.97:56028 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:16
[LAN access from remote] from 75.145.0.97:56026 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:15
[LAN access from remote] from 75.145.0.97:56025 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:15
[LAN access from remote] from 75.145.0.97:56020 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:14
[LAN access from remote] from 75.145.0.97:56021 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:14
[LAN access from remote] from 75.145.0.97:56019 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:13
[LAN access from remote] from 75.145.0.97:56018 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:13
[LAN access from remote] from 75.145.0.97:56016 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:12
[LAN access from remote] from 75.145.0.97:56017 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:12
[LAN access from remote] from 75.145.0.97:56014 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:11
[LAN access from remote] from 75.145.0.97:56013 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:11
[LAN access from remote] from 75.145.0.97:56012 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:10
[LAN access from remote] from 75.145.0.97:56011 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:10
[LAN access from remote] from 75.145.0.97:56010 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:09
[LAN access from remote] from 75.145.0.97:56009 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:09
[LAN access from remote] from 75.145.0.97:56007 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:08
[LAN access from remote] from 75.145.0.97:56008 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:08
[LAN access from remote] from 75.145.0.97:56006 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:07
[LAN access from remote] from 75.145.0.97:56005 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:07
[LAN access from remote] from 75.145.0.97:56004 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:06
[LAN access from remote] from 75.145.0.97:56003 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:06
[LAN access from remote] from 75.145.0.97:56000 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:05
[LAN access from remote] from 75.145.0.97:56001 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:05
[LAN access from remote] from 75.145.0.97:55999 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:04
[LAN access from remote] from 75.145.0.97:55998 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:04
[LAN access from remote] from 75.145.0.97:55997 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:03
[LAN access from remote] from 75.145.0.97:55996 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:03
[LAN access from remote] from 75.145.0.97:55994 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:02
[LAN access from remote] from 75.145.0.97:55995 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:02
[LAN access from remote] from 75.145.0.97:55993 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:01
[LAN access from remote] from 75.145.0.97:55992 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:01
[LAN access from remote] from 75.145.0.97:55991 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:00
[LAN access from remote] from 75.145.0.97:55990 to 172.16.0.101:81, Thursday, Jun 22,2017 07:00:00
[LAN access from remote] from 75.145.0.97:55988 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:59
[LAN access from remote] from 75.145.0.97:55989 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:59
[LAN access from remote] from 75.145.0.97:55984 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:58
[LAN access from remote] from 75.145.0.97:55983 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:58
[LAN access from remote] from 75.145.0.97:55981 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:57
[LAN access from remote] from 75.145.0.97:55982 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:57
[LAN access from remote] from 75.145.0.97:55977 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:56
[LAN access from remote] from 75.145.0.97:55978 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:56
[LAN access from remote] from 75.145.0.97:55975 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:55
[LAN access from remote] from 75.145.0.97:55974 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:55
[LAN access from remote] from 75.145.0.97:55973 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:54
[LAN access from remote] from 75.145.0.97:55972 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:54
[LAN access from remote] from 75.145.0.97:55971 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:53
[LAN access from remote] from 75.145.0.97:55970 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:53
[LAN access from remote] from 75.145.0.97:55968 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:52
[LAN access from remote] from 75.145.0.97:55969 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:52
[LAN access from remote] from 75.145.0.97:55962 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:51
[LAN access from remote] from 75.145.0.97:55963 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:51
[LAN access from remote] from 75.145.0.97:55960 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:50
[LAN access from remote] from 75.145.0.97:55961 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:50
[LAN access from remote] from 75.145.0.97:55959 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:49
[LAN access from remote] from 75.145.0.97:55958 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:49
[LAN access from remote] from 75.145.0.97:55957 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:48
[LAN access from remote] from 75.145.0.97:55956 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:48
[LAN access from remote] from 75.145.0.97:55955 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:47
[LAN access from remote] from 75.145.0.97:55954 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:47
[LAN access from remote] from 75.145.0.97:55953 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:46
[LAN access from remote] from 75.145.0.97:55952 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:46
[LAN access from remote] from 75.145.0.97:55949 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:45
[LAN access from remote] from 75.145.0.97:55950 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:45
[LAN access from remote] from 75.145.0.97:55947 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:44
[LAN access from remote] from 75.145.0.97:55948 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:44
[LAN access from remote] from 75.145.0.97:55946 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:43
[LAN access from remote] from 75.145.0.97:55945 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:43
[LAN access from remote] from 75.145.0.97:55944 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:42
[LAN access from remote] from 75.145.0.97:55943 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:42
[LAN access from remote] from 75.145.0.97:55940 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:41
[LAN access from remote] from 75.145.0.97:55941 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:41
[LAN access from remote] from 75.145.0.97:55938 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:40
[LAN access from remote] from 75.145.0.97:55937 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:40
[LAN access from remote] from 75.145.0.97:55936 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:39
[LAN access from remote] from 75.145.0.97:55935 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:39
[LAN access from remote] from 75.145.0.97:55934 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:38
[LAN access from remote] from 75.145.0.97:55933 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:38
[LAN access from remote] from 75.145.0.97:55932 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:37
[LAN access from remote] from 75.145.0.97:55931 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:37
[LAN access from remote] from 75.145.0.97:55930 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:36
[LAN access from remote] from 75.145.0.97:55929 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:36
[LAN access from remote] from 75.145.0.97:55926 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:35
[LAN access from remote] from 75.145.0.97:55927 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:35
[LAN access from remote] from 75.145.0.97:55920 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:33
[LAN access from remote] from 75.145.0.97:55921 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:33
[LAN access from remote] from 75.145.0.97:55918 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:32
[LAN access from remote] from 75.145.0.97:55919 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:32
[LAN access from remote] from 75.145.0.97:55916 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:31
[LAN access from remote] from 75.145.0.97:55917 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:31
[LAN access from remote] from 75.145.0.97:55914 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:30
[LAN access from remote] from 75.145.0.97:55915 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:30
[LAN access from remote] from 75.145.0.97:55908 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:29
[LAN access from remote] from 75.145.0.97:55909 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:29
[LAN access from remote] from 75.145.0.97:55907 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:28
[LAN access from remote] from 75.145.0.97:55906 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:28
[LAN access from remote] from 75.145.0.97:55905 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:27
[LAN access from remote] from 75.145.0.97:55904 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:27
[LAN access from remote] from 75.145.0.97:55903 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:26
[LAN access from remote] from 75.145.0.97:55902 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:26
[LAN access from remote] from 75.145.0.97:55900 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:25
[LAN access from remote] from 75.145.0.97:55899 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:25
[LAN access from remote] from 75.145.0.97:55192 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:24
[LAN access from remote] from 75.145.0.97:55163 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:24
[LAN access from remote] from 75.145.0.97:55896 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:23
[LAN access from remote] from 75.145.0.97:55895 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:23
[LAN access from remote] from 75.145.0.97:55893 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:22
[LAN access from remote] from 75.145.0.97:55894 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:22
[LAN access from remote] from 75.145.0.97:55892 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:21
[LAN access from remote] from 75.145.0.97:55891 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:21
[LAN access from remote] from 75.145.0.97:55890 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:20
[LAN access from remote] from 75.145.0.97:55889 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:20
[LAN access from remote] from 75.145.0.97:55887 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:19
[LAN access from remote] from 75.145.0.97:55888 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:19
[LAN access from remote] from 75.145.0.97:55886 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:18
[LAN access from remote] from 75.145.0.97:55885 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:18
[LAN access from remote] from 75.145.0.97:55883 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:17
[LAN access from remote] from 75.145.0.97:55884 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:17
[LAN access from remote] from 75.145.0.97:55880 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:15
[LAN access from remote] from 75.145.0.97:55881 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:15
[LAN access from remote] from 75.145.0.97:55878 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:14
[LAN access from remote] from 75.145.0.97:55879 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:14
[LAN access from remote] from 75.145.0.97:55876 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:13
[LAN access from remote] from 75.145.0.97:55877 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:13
[LAN access from remote] from 75.145.0.97:55875 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:12
[LAN access from remote] from 75.145.0.97:55874 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:12
[LAN access from remote] from 75.145.0.97:55873 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:11
[LAN access from remote] from 75.145.0.97:55872 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:11
[LAN access from remote] from 75.145.0.97:55871 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:10
[LAN access from remote] from 75.145.0.97:55870 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:10
[LAN access from remote] from 75.145.0.97:55869 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:09
[LAN access from remote] from 75.145.0.97:55868 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:09
[LAN access from remote] from 75.145.0.97:55866 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:08
[LAN access from remote] from 75.145.0.97:55867 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:08
[LAN access from remote] from 75.145.0.97:55865 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:06
[LAN access from remote] from 75.145.0.97:55864 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:06
[LAN access from remote] from 75.145.0.97:55862 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:05
[LAN access from remote] from 75.145.0.97:55861 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:05
[LAN access from remote] from 75.145.0.97:55859 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:04
[LAN access from remote] from 75.145.0.97:55860 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:04
[LAN access from remote] from 75.145.0.97:55857 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:03
[LAN access from remote] from 75.145.0.97:55858 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:03
[LAN access from remote] from 75.145.0.97:55856 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:02
[LAN access from remote] from 75.145.0.97:55855 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:02
[LAN access from remote] from 75.145.0.97:55854 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:01
[LAN access from remote] from 75.145.0.97:55853 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:01
[LAN access from remote] from 75.145.0.97:55851 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:00
[LAN access from remote] from 75.145.0.97:55852 to 172.16.0.101:81, Thursday, Jun 22,2017 06:59:00
[LAN access from remote] from 75.145.0.97:55849 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:59
[LAN access from remote] from 75.145.0.97:55850 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:59
[LAN access from remote] from 75.145.0.97:55336 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:58
[LAN access from remote] from 75.145.0.97:55847 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:58
[LAN access from remote] from 75.145.0.97:55846 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:57
[LAN access from remote] from 75.145.0.97:55845 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:57
[LAN access from remote] from 75.145.0.97:55843 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:56
[LAN access from remote] from 75.145.0.97:55844 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:56
[LAN access from remote] from 75.145.0.97:55840 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:55
[LAN access from remote] from 75.145.0.97:55841 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:55
[LAN access from remote] from 75.145.0.97:55839 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:54
[LAN access from remote] from 75.145.0.97:55838 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:54
[LAN access from remote] from 75.145.0.97:55837 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:53
[LAN access from remote] from 75.145.0.97:55836 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:53
[LAN access from remote] from 75.145.0.97:55835 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:52
[LAN access from remote] from 75.145.0.97:55834 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:52
[LAN access from remote] from 75.145.0.97:55832 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:51
[LAN access from remote] from 75.145.0.97:55833 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:51
[LAN access from remote] from 75.145.0.97:55830 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:50
[LAN access from remote] from 75.145.0.97:55831 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:50
[LAN access from remote] from 75.145.0.97:55829 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:49
[LAN access from remote] from 75.145.0.97:55828 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:49
[LAN access from remote] from 75.145.0.97:55826 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:48
[LAN access from remote] from 75.145.0.97:55827 to 172.16.0.101:81, Thursday, Jun 22,2017 06:58:48

 

[fenderman]

Those are communications between your modem/router and your blue iris pc

 

[Coldair]

I wonder why I am seeing so many ? I never saw more than just a few before but suddenly I am seeing what looks like a port scan

 

[fenderman]

I wonder why I am seeing so many ? I never saw more than just a few before but suddenly I am seeing what looks like a port scan

possibly, but if properly setup it would not forward to your BI server unless they hit port 81...

 

[Machine]

What type of FW do you have? Is 75.145.0.97 your global IP Address?

 

[Coldair]

What type of FW do you have? Is 75.145.0.97 your global IP Address?

yes a dedicated IP

 

[aristobrat]

I wonder why I am seeing so many ? I never saw more than just a few before but suddenly I am seeing what looks like a port scan

That does look like a port scan. But if it's coming from the Internet, unless you have your router set to forward all of those different ports to your BI PC, your BI PC shouldn't be seeing that?

 

[Coldair]

only port 81 is forwarded to Blue Iris

 

[Coldair]

so I started looking at my logs and it seems a lot of servers seem to be logging into BI some how
10 6/2/2017 2:03:56 AM Server Connected: 82.58.157.251
10 6/2/2017 2:06:30 AM Server Connected: 78.188.205.58
10 6/2/2017 2:27:40 AM Server Connected: 150.101.121.193
10 6/2/2017 2:34:21 AM Server Connected: 31.167.21.184
10 6/2/2017 2:36:41 AM Server Connected: 75.145.0.97
10 6/2/2017 2:49:12 AM Server Connected: 31.167.21.184
10 6/2/2017 3:11:05 AM Server Connected: 31.167.21.184
10 6/2/2017 3:17:30 AM Server Connected: 31.167.21.184
3 6/2/2017 3:19:47 AM PZT MOTION
10 6/2/2017 3:32:23 AM Server Connected: 31.167.21.184
10 6/2/2017 3:39:14 AM Server Connected: 31.167.21.184
10 6/2/2017 3:47:54 AM Server Connected: 31.167.21.184
10 6/2/2017 3:57:01 AM Server Connected: 31.167.21.184
10 6/2/2017 4:07:47 AM Server Connected: 31.167.21.184
10 6/2/2017 4:16:39 AM Server Connected: 31.167.21.184
10 6/2/2017 4:16:39 AM Server Connected: 157.55.39.23
10 6/2/2017 4:16:48 AM Server Connected: 31.167.21.184
10 6/2/2017 4:16:49 AM Server Connected: 207.46.13.205
10 6/2/2017 4:16:54 AM Server Connected: 31.167.21.184
10 6/2/2017 4:16:55 AM Server Connected: 157.55.39.86
10 6/2/2017 4:22:33 AM Server Connected: 157.55.39.86
10 6/2/2017 4:24:50 AM Server Connected: 75.145.0.97
10 6/2/2017 4:27:30 AM Server Connected: 207.46.13.205
10 6/2/2017 4:33:25 AM Server Connected: 207.46.13.205
10 6/2/2017 4:46:28 AM Server Connected: 207.46.13.205
10 6/2/2017 5:05:53 AM Server Connected: 172.16.0.100
10 6/2/2017 5:05:53 AM Server Connected: 75.145.0.97
10 6/2/2017 5:05:53 AM Mphone 172.16.0.100: Login
10 6/2/2017 5:07:55 AM Mphone 172.16.0.100: Logout, 2:02




6/5/2017 7:58:55 AM Cam157 Signal: Socket error: 10065
1 6/5/2017 7:58:55 AM H3 Signal: Socket error: 10065
1 6/5/2017 7:58:55 AM bd Signal: Socket error: 10065
1 6/5/2017 7:58:55 AM NE Signal: Socket error: 10065
1 6/5/2017 7:58:55 AM House1 Signal: Socket error: 10065
1 6/5/2017 7:58:55 AM FD Signal: Socket error: 10065
1 6/5/2017 7:58:55 AM Garage Signal: Socket error: 10065
1 6/5/2017 7:58:55 AM MB Signal: Socket error: 10065
1 6/5/2017 7:59:19 AM TPC Signal: network retry
1 6/5/2017 7:59:19 AM Ngate Signal: network retry
1 6/5/2017 7:59:20 AM PZT Signal: network retry
1 6/5/2017 7:59:21 AM Shop1 Signal: network retry
1 6/5/2017 7:59:21 AM TPC Signal: Socket error: 10065
1 6/5/2017 7:59:21 AM Ngate Signal: Socket error: 10065
1 6/5/2017 7:59:21 AM PZT Signal: Socket error: 10065
1 6/5/2017 7:59:22 AM Shop1 Signal: HTTP: 12029 Cannot connect
1 6/5/2017 7:59:23 AM H3 Signal: network retry
1 6/5/2017 7:59:23 AM NE Signal: network retry
1 6/5/2017 7:59:23 AM FD Signal: network retry
1 6/5/2017 7:59:23 AM House1 Signal: network retry
1 6/5/2017 7:59:23 AM Bear Signal: network retry
1 6/5/2017 7:59:23 AM Cam157 Signal: network retry
1 6/5/2017 7:59:23 AM bd Signal: network retry
1 6/5/2017 7:59:23 AM Garage Signal: network retry
1 6/5/2017 7:59:24 AM MB Signal: network retry
1 6/5/2017 7:59:25 AM bd Signal: Socket error: 10065
1 6/5/2017 7:59:25 AM Bear Signal: Socket error: 10065
1 6/5/2017 7:59:25 AM Garage Signal: Socket error: 10065
1 6/5/2017 7:59:25 AM H3 Signal: Socket error: 10065
1 6/5/2017 7:59:25 AM Cam157 Signal: Socket error: 10065
1 6/5/2017 7:59:25 AM House1 Signal: Socket error: 10065
1 6/5/2017 7:59:25 AM NE Signal: Socket error: 10065
1 6/5/2017 7:59:25 AM FD Signal: Socket error: 10065
1 6/5/2017 7:59:26 AM MB Signal: Socket error: 10065
1 6/5/2017 7:59:49 AM TPC Signal: network retry
1 6/5/2017 7:59:49 AM Ngate Signal: network retry
1 6/5/2017 7:59:50 AM PZT Signal: network retry
1 6/5/2017 7:59:51 AM Shop1 Signal: network retry
1 6/5/2017 7:59:51 AM TPC Signal: Socket error: 10065
1 6/5/2017 7:59:51 AM Ngate Signal: Socket error: 10065
1 6/5/2017 7:59:52 AM PZT Signal: Socket error: 10065
1 6/5/2017 7:59:52 AM Shop1 Signal: HTTP: 12029 Cannot connect
1 6/5/2017 7:59:53 AM H3 Signal: network retry
10 6/16/2017 7:26:19 AM Server Connected: 157.55.39.199
10 6/16/2017 7:26:20 AM Server Connected: 157.55.39.133
10 6/16/2017 7:29:50 AM Server Connected: 157.55.39.199

 

[Machine]

If that is your FW log, its just showing you the TCP connection from the internet to your BI server; they might not actually be logging in. I would check the BI logs to see whats happening.

What type of cameras do you have? I have some cheap chinese cameras that are constantly trying to talk to the internet; I placed them in a VLAN without Internet access, but my FW log still shows the attempts.

Also, I would change your port from 81, to something greater than 1024.

 

[MrRalphMan]

You should probably stop forwarding anything to the BI server and test to see if all this stops. If it doesn't then you have something else opening up the ports.
Do you have UPnP enabled on the Router, it could be that BI is using that to open ports?

 

[Coldair]

my Saga continues, comcast said there was nothing wrong with my modem yesterday but today a great level 2 tech called and said my ip is somewhere else on the network. he assigned me a new IP but it took an hour and half for it to come back online so he schulde a tech to come out and swap the modem and he said insist on a new not a refurbished modem, the tech called and said he has no new modems but he can possible get one on monday after speaking to his supervisor. so here I am no BI for the weekend, if we hadn't had threats of bodily harm 2 weeks ago from an attempt by a prison inmate I would not care. now to figure out how to get my BI back on the WWW. my old modem settings were my static IP coming in now it shows an IP6 address. anyone have a link on how to set BI on comcast business class?

 

[Jareds]

Disable ipv6 on the modem. If it's a smc it should have that setting. Mine did but I also heard recently that Comcast is running out of ipv4 and only give them out upon request.

 

[Machine]

I would recommend against using any comcast hardware. Go to Walmart or Costco and get your own equipment.

 

[Coldair]

now I hear the "pop" of an BI connection being made but when I look at the logs it does not show who is logging in just an address of 0.0.0.0
3 6/26/2017 6:17:31 AM Bear MOTION
3 6/26/2017 6:17:31 AM bd GROUP
10 6/26/2017 6:17:31 AM Server Connected: 172.16.0.101
10 6/26/2017 6:17:31 AM Mphone 172.16.0.101: Login
10 6/26/2017 6:17:31 AM Server Connected: 0.0.0.0
10 6/26/2017 6:17:33 AM Mphone 172.16.0.101: Logout, 0:01
3 6/26/2017 6:18:10 AM PZT MOTION
3 6/26/2017 6:19:03 AM TPC MOTION
3 6/26/2017 6:19:22 AM PZT MOTION
3 6/26/2017 6:20:30 AM PZT MOTION
3 6/26/2017 6:21:30 AM PZT MOTION
3 6/26/2017 6:21:54 AM PZT MOTION
3 6/26/2017 6:22:09 AM Ngate MOTION
3 6/26/2017 6:22:10 AM MB GROUP
10 6/26/2017 6:22:10 AM Server Connected: 172.16.0.101
10 6/26/2017 6:22:10 AM Mphone 172.16.0.101: Login
10 6/26/2017 6:22:10 AM Server Connected: 0.0.0.0
10 6/26/2017 6:22:12 AM Mphone 172.16.0.101: Logout, 0:02
3 6/26/2017 6:22:38 AM PZT MOTION
3 6/26/2017 6:23:09 AM PZT MOTION
3 6/26/2017 6:24:14 AM PZT MOTION
3 6/26/2017 6:24:45 AM PZT MOTION
3 6/26/2017 6:26:20 AM PZT MOTION
3 6/26/2017 6:27:12 AM PZT MOTION
3 6/26/2017 6:31:00 AM MB MOTION
3 6/26/2017 6:31:00 AM Ngate GROUP
3 6/26/2017 6:31:00 AM PZT GROUP
10 6/26/2017 6:31:00 AM Server Connected: 172.16.0.101
10 6/26/2017 6:31:00 AM Mphone 172.16.0.101: Login
10 6/26/2017 6:31:01 AM Server Connected: 0.0.0.0
10 6/26/2017 6:31:03 AM Mphone 172.16.0.101: Logout, 0:03
3 6/26/2017 6:32:08 AM PZT MOTION
3 6/26/2017 6:33:10 AM PZT MOTION

 

[looney2ns]

Read here: VPN Primer for Noobs

Go buy yourself an Asus router with OPENVPN, call comcrap and have them put the modem into bridged mode and turn off the wifi in that modem.

Then install the new router and use OPENVPN from now on, don't forward ports.

 

[aristobrat]

now I hear the "pop" of an BI connection being made but when I look at the logs it does not show who is logging in just an address of 0.0.0.0

If you're running 4.5.8, check out the third bullet... it mentions 0.0.0.0 connections.

4.5.8 - June 23, 2017

• The functionality of the BlueIrisApplePush.exe is now built-into the main executable, so this file is no longer required and will be removed from the installer. This new version is much more efficient and can be extended to support new Apple and iOS features.
  
  
• Support for "rich notification" content via iOS push notifications. A corresponding update to the iOS app is forthcoming--you will be able to "long press" the notification to preview an image without launching the app. A web server session key is generated in order to allow the app to connect back to the server to retrieve the image--you may notice this on the Status/Connections page as IP address 0.0.0.0 unless/until the app retrieves the image.
  
  
• The Status Connections and Status Messages pages now memorize column widths when you adjust them
  
  
• The Status Messages page now performs a refresh without losing list position and selected item state. Previously it was difficult use the list while it was continuously updated, taking you back to the top of the list each time.