127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)

skinz

skinz

VIP Member
VIP Member
Joined
Jan 28, 2007
Messages
2,239
Reaction score
306
I have posted this on the Qnap forum as well but have had no reply there so I thought maybe someone here knows what is going on.

Can anyone explain why my logs are showing this. I have spent the last 2 days searching for answers and can not seem to find anything. I have disabled media station, download station etc and disabled all ports for the time being

Why is my netbook continuiously pinging my server, it only seems to stop when I turn that machine off. I read somewhere that it may be due to dhcp but I have even reset my router and re-enabled dhcp. Any help greatly appreciated as I do not understand what is going on. This never used to happen. I have tried to run various scans and nothing is found. Also my net connection on that netbook is slow compared to the rest on the network.

Thanks in advance for looking

Skinz

2010-11-02
494 23:52:55 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
493 23:43:46 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
492 23:42:57 System 127.0.0.1 localhost [Security] Access Violation from 218.24.233.54 with TCP (port=22)
2010-11-02
491 23:42:56 System 127.0.0.1 localhost Add IP: [218.24.233.54] to ban list forever.
2010-11-02
490 23:38:45 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
489 23:31:21 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
488 23:23:50 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
487 23:03:20 System 127.0.0.1 localhost [Security] Access Violation from 204.80.91.4 with TCP (port=22)
2010-11-02
486 23:03:18 System 127.0.0.1 localhost Add IP: [204.80.91.4] to ban list forever.
2010-11-02
485 22:43:31 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
484 22:37:34 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
483 22:30:17 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
482 22:22:55 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
481 22:15:31 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
480 22:07:13 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
479 22:00:43 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
478 21:53:19 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
477 21:43:25 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
476 21:36:42 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
475 21:31:08 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
474 21:23:23 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
473 21:15:53 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
472 21:08:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
471 21:01:30 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
470 20:54:06 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
469 20:44:48 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
468 20:44:47 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with TCP (port=49153)
2010-11-02
467 20:39:18 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
466 20:31:53 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
465 20:23:09 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
464 20:14:47 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
463 20:09:41 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
462 20:02:17 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
461 19:54:16 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
460 19:47:29 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1900)
2010-11-02
459 19:41:01 System 127.0.0.1 localhost [Security] Access Violation from 67.205.83.1 with TCP (port=22)
2010-11-02
458 19:41:00 System 127.0.0.1 localhost Add IP: [67.205.83.1] to ban list forever.
 
Sort by date Sort by votes
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

i take it the localhost is the server?
the ip ending 4 is the netbook?

what software you got installed on the netbook that connects to the server? from the logs id have thought the machine with the ip ending with 4 is trying to access itself on 1900. what have you got on that port?

can you do a manual ping and get the same result in the logs? also do a telnet and a trace route see what you get.
 
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

The Dentist said:
i take it the localhost is the server?

no mate, server ip is 192.168.17, thats why i was wondering where 127 ip came from

the ip ending 4 is the netbook?

Yep it is

what software you got installed on the netbook that connects to the server? from the logs id have thought the machine with the ip ending with 4 is trying to access itself on 1900. what have you got on that port?

On the way home I was wondering if it could be itunes client on my netbook as I installed that. so i need to check if that is it but need to figure out what port it uses as it is a built in feature of the server to - just click here to activate sort of thing. It doesnt mention which port. I installed it only last week so more thna likely this is the culprit I believe

can you do a manual ping and get the same result in the logs? also do a telnet and a trace route see what you get.
Click to expand...

I will try this in a while andlook at itunes as well. cheers mate
 
Last edited:
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

UDP port 1900 is used bu uPnP devices and as its broadcast traffic, it is being tagged as a security alert
 
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

But it never happened used to happen before,so it could be my pc trying to connect to the server
 
Last edited:
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

Right it seems my ip has changed again. I guess thats due to reseting the router yet again but the logs now show that right at the bottom 192.168.1.2 was banned but soon after started pinging again. I dont have udp turned on at the server could this be the problem and I dont have anything using port 1900 however I feel certain this is something to do with iTunes. Should I actually be worrying about thos though

2010-11-04
560 04:48:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
559 04:41:30 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
558 04:32:13 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
557 04:26:42 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
556 04:19:18 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
555 04:11:53 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
554 04:02:11 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
553 03:57:06 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
552 03:49:42 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
551 03:41:27 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
550 03:34:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
549 03:27:30 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
548 03:20:06 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
547 03:11:21 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
546 03:05:18 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
545 02:57:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
544 02:50:30 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
543 02:41:08 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
542 02:35:43 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
541 02:28:18 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
540 02:20:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
539 02:12:13 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
538 02:06:06 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
537 01:58:42 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
536 01:50:52 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
535 01:43:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
534 01:36:32 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
533 01:29:06 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
532 01:20:44 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
531 01:12:13 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
530 01:09:19 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=3689)
2010-11-04
529 01:06:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
528 01:04:19 System 127.0.0.1 localhost [Security] Access Violation from 61.151.238.131 with TCP (port=22)
2010-11-04
527 01:04:19 System 127.0.0.1 localhost Add IP: [61.151.238.131] to ban list forever.
2010-11-04
526 00:59:25 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
525 00:52:07 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=49152)
2010-11-04
524 00:52:07 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)

[/B]Also this morning

2010-11-04
593 08:30:54 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
592 08:23:30 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
591 08:19:12 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=3689)

What is this new port 3689
 
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

2010-11-04
652 22:25:43 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
651 22:22:08 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=3689)
2010-11-04
650 22:20:33 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=9000)
2010-11-04
649 22:18:45 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
648 22:12:22 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=9000)
2010-11-04
647 22:11:21 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-04
646 22:09:13 System 127.0.0.1 localhost [Security] Access Violation from 58.252.5.174 with TCP (port=22)

Hi i got these from my logs last night should I open these ports up as after doing some readings it seems that these ports are all used for sharing between pc's

Is this correct and that it is not a security issue, thanks for looking
 
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

Ok another twist in the tale, i opened the ports up and another ste of ports are asking for access now, i have tuerned all the ports off now as I do not understand what is going on - Also I am now unable to map my network drives either - why can i not map my drives and why are all these other ports requesting access, by the way I can connect via the net to my web admin but unable to see it locally or even ping the nas - it just times out

2010-11-05
729 19:16:01 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=9500)
2010-11-05
728 19:15:49 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=8097)
2010-11-05
727 19:15:10 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=49152)
2010-11-05
726 19:15:10 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=139)
2010-11-05
725 19:15:08 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-05
724 19:15:07 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=445)
2010-11-05
723 19:14:50 System 127.0.0.1 localhost Network connection resume.
2010-11-05
722 19:14:13 System 127.0.0.1 localhost Network connection lost.
2010-11-05
721 19:08:43 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with UDP (port=1900)
2010-11-05
720 19:05:33 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=139)
2010-11-05
719 19:05:32 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=445)
2010-11-05
718 19:04:51 System 127.0.0.1 localhost [Security] Access Violation from 192.168.1.2 with TCP (port=49152)
 
Last edited:
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

Right last night when I got home I managed to map all the drives - the only thing that I can think of that I did was reset the admin settings back to factory default yesterday morning.

So when I got home just started the netbook and mapped drives as easy as that but a few hours later I lost all of them again - could this be a dhcp fault or a problem with my server firmware

I need to try this again to see if it will find the drives again but I am litterally pulling my hair out
 
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

by QNAPFrances » Tue Nov 09, 2010 8:12 am

Dear all,

We are sorry for the troubles but could you pls downgrade the FW to 3.3.3_0928 first?
There might be some connection issue with the FW 3.3.4/3.3.5 but we're working on solving that at this stage.

Deeply sorry for the problem.

Well well well, seems like I answered my own question here prior to seeing Qnap's response
 
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

Well downgraded firmware 2 nights ago, seems stable again and my error logs seemed to be clear regarding the ports but still getting loads of people trying to hack the damn thing mainly the ssh and ftp

I was able to get iTunes to see the NAS but realised that this probably not the best program to use in this senario as their is limited functionailty, basically all you see is a list of files no structure etc.

So all seems to be well again - I have left MediaMonkey scanning so lets see if thats better - well it has to be right.

Anyone using MM, can it be used over a wan as well as lan

Thanks
 
Upvote 0 Downvote
Re: 127.0.0.1 localhost [Security] Access Violation from 192.168.1.4 with UDP (port=1

Still having this problem and still waiting for a new firmware to hopefully fix this.

Apparently the next version of Media Monkey (4) will allow streaming over wan

Can't wait :)
 
Upvote 0 Downvote
You must log in or register to reply here.

Similar threads

S
help to understand log
Replies
1
Views
831
acebing
A
joe516
    • Like
Ladbrokes Masters Jan 29 -Jan 31 2021 On ITV4
Replies
7
Views
328
joe516
joe516
Napster
    • Like
DW Lottery Saturday 23rd
Replies
11
Views
647
Napster
Napster
Napster
    • Like
DW Lottery Saturday 16th November
Replies
14
Views
768
joe516
joe516
Napster
    • Like
DW Lottery, Saturday 9th
Replies
13
Views
599
Napster
Napster
Back
Top