| Home | Register | Members | Search | Links |
![]() |
| Thread Tools | Display Modes |
|
|
|
| |
|
Guest
Posts: n/a
|
"Unauthorized HTTP Access" -- someone from the WAN is
trying unsuccessfully to access a web server on port 80 at your IP. The router log says that the access was blocked. The numbers "24.12.120.13:2092 ->> 24.16.61.4:80" show the "attacker's" IP ort number andthen your IP followed by port 80 (standard HTTP port). "System time synchronized" -- the router accessed a Internet server to synchronize its internal clock (Internet typically uses a synchronized clock). The IP is the servers IP (this is configured on the router, and typically people leave as it is) "Port Scan ** Port scanning from 64.71.165.195 detected" - - someone from the given IP is scanning your ports looking for vulnerabilities >-----Original Message----- >I have had the MN-700 for about a month, replaced my NetGear wired router >with it. Everything seems to be working fine with both my wired desktop PC >and the 2 other computers in my teenagers rooms that are wireless connected. >In looking in the Base Station Log, I noticed the log full of the following: > > > >Can someone help me understand what this means? I validated that my system >is totally updated with Windows Update, but short of this, I cannot tell >from the doc's what these entries mean. > > > >Also, any pointers to information that I could read to be more enlightened >about this please pass on. > > > > > > > >==================== Base Station Log Snip ======================== > > > >2004/01/26 04:05:03 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:2092 ->> 24.16.61.4:80 > >2004/01/26 04:18:13 System time synchronized with 192.5.41.209 > >2004/01/26 04:35:15 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:4800 ->> 24.16.61.4:80 > >2004/01/26 04:35:17 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:4800 ->> 24.16.61.4:80 > >2004/01/26 04:35:24 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:4800 ->> 24.16.61.4:80 > >2004/01/26 05:18:13 System time synchronized with 192.5.41.209 > >2004/01/26 05:26:20 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:3633 ->> 24.16.61.4:80 > >2004/01/26 05:26:23 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:3633 ->> 24.16.61.4:80 > >2004/01/26 05:26:29 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:3633 ->> 24.16.61.4:80 > >2004/01/26 05:49:19 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.19.77:3051 ->> 24.16.61.4:80 > >2004/01/26 05:49:22 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.19.77:3051 ->> 24.16.61.4:80 > >2004/01/26 05:49:28 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.19.77:3051 ->> 24.16.61.4:80 > >2004/01/26 06:18:13 System time synchronized with 192.5.41.209 > >2004/01/26 07:18:14 System time synchronized with 192.5.41.209 > >2004/01/26 08:18:06 ** Unauthorized HTTP Access ** <IP/TCP> >209.74.22.108:28657 ->> 24.16.61.4:80 > >2004/01/26 08:18:14 System time synchronized with 192.5.41.209 > >2004/01/26 10:02:14 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:2829 ->> 24.16.61.4:80 > >2004/01/26 10:02:17 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:2829 ->> 24.16.61.4:80 > >2004/01/26 10:02:23 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:2829 ->> 24.16.61.4:80 > >2004/01/26 10:18:09 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:4210 ->> 24.16.61.4:80 > >2004/01/26 10:18:12 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:4210 ->> 24.16.61.4:80 > >2004/01/26 10:18:18 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:4210 ->> 24.16.61.4:80 > >2004/01/26 11:07:23 ** Unauthorized HTTP Access ** <IP/TCP> >24.21.152.171:3560 ->> 24.16.61.4:80 > >2004/01/26 11:07:26 ** Unauthorized HTTP Access ** <IP/TCP> >24.21.152.171:3560 ->> 24.16.61.4:80 > >2004/01/26 14:01:39 ** Unauthorized HTTP Access ** <IP/TCP> >64.71.165.195:38708 ->> 24.16.61.4:80 > >2004/01/26 14:01:42 ** Unauthorized HTTP Access ** <IP/TCP> >64.71.165.195:38708 ->> 24.16.61.4:80 > >2004/01/26 14:01:48 ** Unauthorized HTTP Access ** <IP/TCP> >64.71.165.195:38708 ->> 24.16.61.4:80 > >2004/01/26 14:03:44 ** Port Scan ** Port scanning from 64.71.165.195 >detected > >2004/01/26 15:16:47 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:1629 ->> 24.16.61.4:80 > >2004/01/26 15:16:50 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:1629 ->> 24.16.61.4:80 > >2004/01/26 15:16:56 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.141.158:1629 ->> 24.16.61.4:80 > >2004/01/26 16:35:59 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.213.145:4047 ->> 24.16.61.4:80 > >2004/01/26 16:36:02 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.213.145:4047 ->> 24.16.61.4:80 > >2004/01/26 16:36:08 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.213.145:4047 ->> 24.16.61.4:80 > >2004/01/26 17:11:11 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.213.145:1227 ->> 24.16.61.4:80 > >2004/01/26 17:11:14 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.213.145:1227 ->> 24.16.61.4:80 > >2004/01/26 17:11:20 ** Unauthorized HTTP Access ** <IP/TCP> >24.16.213.145:1227 ->> 24.16.61.4:80 > >2004/01/26 17:25:52 ** Unauthorized HTTP Access ** <IP/TCP> >24.12.120.13:2092 ->> 24.16.61.4:80 > >2004/01/26 17:25:55 ** Unauthorized HTTP Access ** <IP/TCP> >24.12.120.13:2092 ->> 24.16.61.4:80 > >2004/01/26 17:26:02 ** Unauthorized HTTP Access ** <IP/TCP> >24.12.120.13:2092 ->> 24.16.61.4:80 > >2004/01/26 18:20:13 System time synchronized with 192.5.41.209 > > >. > |
|
|
|
|
|||
|
|||
|
Chris H.
Guest
Posts: n/a
|
How to interpret your base station log is covered in this article:
http://www.microsoft.com/hardware/br..._log_file.mspx -- Chris H. Microsoft Windows MVP Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone "Dan Ulrich" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)... > I have had the MN-700 for about a month, replaced my NetGear wired router > with it. Everything seems to be working fine with both my wired desktop PC > and the 2 other computers in my teenagers rooms that are wireless connected. > In looking in the Base Station Log, I noticed the log full of the following: > > > > Can someone help me understand what this means? I validated that my system > is totally updated with Windows Update, but short of this, I cannot tell > from the doc's what these entries mean. > > > > Also, any pointers to information that I could read to be more enlightened > about this please pass on. > > > > > > > > ==================== Base Station Log Snip ======================== > > > > 2004/01/26 04:05:03 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2092 ->> 24.16.61.4:80 > > 2004/01/26 04:18:13 System time synchronized with 192.5.41.209 > > 2004/01/26 04:35:15 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4800 ->> 24.16.61.4:80 > > 2004/01/26 04:35:17 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4800 ->> 24.16.61.4:80 > > 2004/01/26 04:35:24 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4800 ->> 24.16.61.4:80 > > 2004/01/26 05:18:13 System time synchronized with 192.5.41.209 > > 2004/01/26 05:26:20 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:3633 ->> 24.16.61.4:80 > > 2004/01/26 05:26:23 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:3633 ->> 24.16.61.4:80 > > 2004/01/26 05:26:29 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:3633 ->> 24.16.61.4:80 > > 2004/01/26 05:49:19 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.19.77:3051 ->> 24.16.61.4:80 > > 2004/01/26 05:49:22 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.19.77:3051 ->> 24.16.61.4:80 > > 2004/01/26 05:49:28 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.19.77:3051 ->> 24.16.61.4:80 > > 2004/01/26 06:18:13 System time synchronized with 192.5.41.209 > > 2004/01/26 07:18:14 System time synchronized with 192.5.41.209 > > 2004/01/26 08:18:06 ** Unauthorized HTTP Access ** <IP/TCP> > 209.74.22.108:28657 ->> 24.16.61.4:80 > > 2004/01/26 08:18:14 System time synchronized with 192.5.41.209 > > 2004/01/26 10:02:14 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2829 ->> 24.16.61.4:80 > > 2004/01/26 10:02:17 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2829 ->> 24.16.61.4:80 > > 2004/01/26 10:02:23 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2829 ->> 24.16.61.4:80 > > 2004/01/26 10:18:09 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4210 ->> 24.16.61.4:80 > > 2004/01/26 10:18:12 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4210 ->> 24.16.61.4:80 > > 2004/01/26 10:18:18 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4210 ->> 24.16.61.4:80 > > 2004/01/26 11:07:23 ** Unauthorized HTTP Access ** <IP/TCP> > 24.21.152.171:3560 ->> 24.16.61.4:80 > > 2004/01/26 11:07:26 ** Unauthorized HTTP Access ** <IP/TCP> > 24.21.152.171:3560 ->> 24.16.61.4:80 > > 2004/01/26 14:01:39 ** Unauthorized HTTP Access ** <IP/TCP> > 64.71.165.195:38708 ->> 24.16.61.4:80 > > 2004/01/26 14:01:42 ** Unauthorized HTTP Access ** <IP/TCP> > 64.71.165.195:38708 ->> 24.16.61.4:80 > > 2004/01/26 14:01:48 ** Unauthorized HTTP Access ** <IP/TCP> > 64.71.165.195:38708 ->> 24.16.61.4:80 > > 2004/01/26 14:03:44 ** Port Scan ** Port scanning from 64.71.165.195 > detected > > 2004/01/26 15:16:47 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:1629 ->> 24.16.61.4:80 > > 2004/01/26 15:16:50 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:1629 ->> 24.16.61.4:80 > > 2004/01/26 15:16:56 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:1629 ->> 24.16.61.4:80 > > 2004/01/26 16:35:59 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:4047 ->> 24.16.61.4:80 > > 2004/01/26 16:36:02 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:4047 ->> 24.16.61.4:80 > > 2004/01/26 16:36:08 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:4047 ->> 24.16.61.4:80 > > 2004/01/26 17:11:11 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:1227 ->> 24.16.61.4:80 > > 2004/01/26 17:11:14 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:1227 ->> 24.16.61.4:80 > > 2004/01/26 17:11:20 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:1227 ->> 24.16.61.4:80 > > 2004/01/26 17:25:52 ** Unauthorized HTTP Access ** <IP/TCP> > 24.12.120.13:2092 ->> 24.16.61.4:80 > > 2004/01/26 17:25:55 ** Unauthorized HTTP Access ** <IP/TCP> > 24.12.120.13:2092 ->> 24.16.61.4:80 > > 2004/01/26 17:26:02 ** Unauthorized HTTP Access ** <IP/TCP> > 24.12.120.13:2092 ->> 24.16.61.4:80 > > 2004/01/26 18:20:13 System time synchronized with 192.5.41.209 > > |
|
|
|
|
|||
|
|||
|
Rob M
Guest
Posts: n/a
|
The *Unauthorized HTTP Access* ones just mean that the router detected
someone attempting to make a connection to your system from the outside and it prevented this from happening. It's basically telling you that the router is doing it's job. There is a cheat sheet of all the log entries here, however this particular one is missing from it because it looks like the cheat sheet hasn't been updated for the MN-700 yet: http://www.microsoft.com/hardware/br..._log_file.mspx -- rm Please remove "nospam" from email address to send email. "Dan Ulrich" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)... > I have had the MN-700 for about a month, replaced my NetGear wired router > with it. Everything seems to be working fine with both my wired desktop PC > and the 2 other computers in my teenagers rooms that are wireless connected. > In looking in the Base Station Log, I noticed the log full of the following: > > > > Can someone help me understand what this means? I validated that my system > is totally updated with Windows Update, but short of this, I cannot tell > from the doc's what these entries mean. > > > > Also, any pointers to information that I could read to be more enlightened > about this please pass on. > > > > > > > > ==================== Base Station Log Snip ======================== > > > > 2004/01/26 04:05:03 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2092 ->> 24.16.61.4:80 > > 2004/01/26 04:18:13 System time synchronized with 192.5.41.209 > > 2004/01/26 04:35:15 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4800 ->> 24.16.61.4:80 > > 2004/01/26 04:35:17 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4800 ->> 24.16.61.4:80 > > 2004/01/26 04:35:24 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4800 ->> 24.16.61.4:80 > > 2004/01/26 05:18:13 System time synchronized with 192.5.41.209 > > 2004/01/26 05:26:20 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:3633 ->> 24.16.61.4:80 > > 2004/01/26 05:26:23 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:3633 ->> 24.16.61.4:80 > > 2004/01/26 05:26:29 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:3633 ->> 24.16.61.4:80 > > 2004/01/26 05:49:19 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.19.77:3051 ->> 24.16.61.4:80 > > 2004/01/26 05:49:22 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.19.77:3051 ->> 24.16.61.4:80 > > 2004/01/26 05:49:28 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.19.77:3051 ->> 24.16.61.4:80 > > 2004/01/26 06:18:13 System time synchronized with 192.5.41.209 > > 2004/01/26 07:18:14 System time synchronized with 192.5.41.209 > > 2004/01/26 08:18:06 ** Unauthorized HTTP Access ** <IP/TCP> > 209.74.22.108:28657 ->> 24.16.61.4:80 > > 2004/01/26 08:18:14 System time synchronized with 192.5.41.209 > > 2004/01/26 10:02:14 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2829 ->> 24.16.61.4:80 > > 2004/01/26 10:02:17 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2829 ->> 24.16.61.4:80 > > 2004/01/26 10:02:23 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:2829 ->> 24.16.61.4:80 > > 2004/01/26 10:18:09 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4210 ->> 24.16.61.4:80 > > 2004/01/26 10:18:12 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4210 ->> 24.16.61.4:80 > > 2004/01/26 10:18:18 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:4210 ->> 24.16.61.4:80 > > 2004/01/26 11:07:23 ** Unauthorized HTTP Access ** <IP/TCP> > 24.21.152.171:3560 ->> 24.16.61.4:80 > > 2004/01/26 11:07:26 ** Unauthorized HTTP Access ** <IP/TCP> > 24.21.152.171:3560 ->> 24.16.61.4:80 > > 2004/01/26 14:01:39 ** Unauthorized HTTP Access ** <IP/TCP> > 64.71.165.195:38708 ->> 24.16.61.4:80 > > 2004/01/26 14:01:42 ** Unauthorized HTTP Access ** <IP/TCP> > 64.71.165.195:38708 ->> 24.16.61.4:80 > > 2004/01/26 14:01:48 ** Unauthorized HTTP Access ** <IP/TCP> > 64.71.165.195:38708 ->> 24.16.61.4:80 > > 2004/01/26 14:03:44 ** Port Scan ** Port scanning from 64.71.165.195 > detected > > 2004/01/26 15:16:47 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:1629 ->> 24.16.61.4:80 > > 2004/01/26 15:16:50 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:1629 ->> 24.16.61.4:80 > > 2004/01/26 15:16:56 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.141.158:1629 ->> 24.16.61.4:80 > > 2004/01/26 16:35:59 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:4047 ->> 24.16.61.4:80 > > 2004/01/26 16:36:02 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:4047 ->> 24.16.61.4:80 > > 2004/01/26 16:36:08 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:4047 ->> 24.16.61.4:80 > > 2004/01/26 17:11:11 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:1227 ->> 24.16.61.4:80 > > 2004/01/26 17:11:14 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:1227 ->> 24.16.61.4:80 > > 2004/01/26 17:11:20 ** Unauthorized HTTP Access ** <IP/TCP> > 24.16.213.145:1227 ->> 24.16.61.4:80 > > 2004/01/26 17:25:52 ** Unauthorized HTTP Access ** <IP/TCP> > 24.12.120.13:2092 ->> 24.16.61.4:80 > > 2004/01/26 17:25:55 ** Unauthorized HTTP Access ** <IP/TCP> > 24.12.120.13:2092 ->> 24.16.61.4:80 > > 2004/01/26 17:26:02 ** Unauthorized HTTP Access ** <IP/TCP> > 24.12.120.13:2092 ->> 24.16.61.4:80 > > 2004/01/26 18:20:13 System time synchronized with 192.5.41.209 > > |
|
|
|
|
|||
|
|||
|
|
|
| |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Base Station Log entries | Guy | Broadband Hardware | 1 | 03-05-2005 09:25 PM |
| Unauthorized HTTP Access | Bill | Broadband Hardware | 1 | 08-25-2004 01:31 AM |
| MN-700 Wireless Base ** Unauthorized HTTP Access ** | Rich | Broadband Hardware | 1 | 05-02-2004 03:15 PM |
| Unauthorized HTTP Access | shane | Broadband Hardware | 2 | 04-25-2004 06:57 PM |
| Unauthorized HTTP Access | Todd | Broadband Hardware | 1 | 02-21-2004 09:10 AM |
Forum Software Powered by vBulletin®, Copyright Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2 ©2009, Crawlability, Inc. |



Linear Mode

