#1  
Old September 2nd, 2011, 09:47 PM
allcaps allcaps is offline
Junior Member
 
Join Date: Sep 2011
Posts: 4
allcaps is on a distinguished road
Default [WLAN access rejected: incorrect security] from MAC address

i am using a comcast supplied 1000v2

i recently had some online accounts compromised (social engineering by phone) which has led to me to go "full shields" on my home networks and computers (all os x based and up to date)

i have seen different patterns over the last 10 days in the netgear log file. initially a slew of RST DoS attacks, then ACK attacks, then most recently (today) this error message (which i hadn't seen in the last 10 days)

i have 5-6 machines on the home network which i have listed in the mac table and am not letting anyone else on. i changed the ssid and wpa2 key recently to make sure no one was lurking. i'm checking the log files religiously.

i've only seen a couple of theories on this error message and i'm wondering if it is cause for alarm

as a second question, i am seeing norton firewall logs saying "blocked incoming windows file sharing connection" which is udp 137/138. this is happening pretty regularly. i have two questions about this. 1) is there any way on the 1000v2 to block this at the router (it appears that the "block services" feature is outbound only). 2) how can someone outside my subnet be addressing udp packets to my device successfully through the nat?

i'm not worried about the UDP packets - the service is turned off, no one is listening on those ports and it's obviously a scan. that said, it's a machine that i just flattened today and have disabled just about everything but safari. how can someone be addressing me through a NAT like the 1000v2? also, it'd be swell if there was someway i could get the netgear to log the internet addresses the attempts are coming from. is there a different netgear product that will give me a firewall and log the external-to-my-subnet information?

thanks
Reply With Quote
  #2  
Old September 3rd, 2011, 07:22 AM
fordem fordem is offline
Moderator
NETGEAR Fanatic
 
Join Date: Nov 2006
Posts: 7,676
fordem is on a distinguished road
Default Re: [WLAN access rejected: incorrect security] from MAC address

The WLAN access rejected message suggests that someone has attempted to connect to your wireless LAN with the incorrect encryption key - compare the MAC address to your MAC addresses - does it match?

This actually presents an intriguing situation ...

You mentioned 5 or 6 machines listed in the MAC table which suggests you are using MAC filtering - which should prevent an association from any but the MAC addresses listed, and there is no reason for any of your systems to have the wrong encyption key, so the message would suggest someone might be trying to connect to your network, and is sufficiently interested to go to the trouble of spoofing an acceptable MAC address.

If the MAC address matched yours - if possible leave that system off for a while and see if attempts continue whilst the system is off.

Re the Norton firewall "blocked incoming windows file sharing connection" - your router because of the NAT blocks all unsolicited incoming traffic by default, so unless you have fowarded ports 137/138 to a particular ip address, these connection attempts probably originate within your network.
__________________
Give a man a fish, feed him for a day
Teach a man to fish, feed him for life.
Reply With Quote
  #3  
Old September 3rd, 2011, 09:17 AM
allcaps allcaps is offline
Junior Member
 
Join Date: Sep 2011
Posts: 4
allcaps is on a distinguished road
Default Re: [WLAN access rejected: incorrect security] from MAC address

fordem - thanks for the reply. i should have been more clear. yes, the mac addresses match devices on my lan in the filter list. it's exactly that worry - is someone trying to spoof my devices by mac. i parsed out the filter list more thoughtfully and it is attached below. would love anyone's thoughts on whether or not there is cause for alarm. it's possible that i set something new in the admin session (there are notes in the log) which started the behavior

i became alarmed by this when i read that the logfile error maps to this on a cisco website:

DOT11-TKIP_MIC_FAILURE: TKIP Michael MIC failure was detected on a packet
(TSC=0x0) received from [mac-address]
Explanation TKIP Michael MIC failure was detected on a unicast frame decrypted locally with the pairwise key.

Recommended Action A failure of the Michael MIC in a packet usually indicates an active attack on your network. Search for and remove potential rogue devices from your wireless LAN.


in the log - the ::laptop:: is a flattened snow leopard ppc mac laptop. ::ipad:: is a gen 1 ipad. ::bridge:: is a wnce2001 that i use to attach my desktop since i don't have wiring in my apt. i pulled that out of the loop since i don't know much about the device and wanted to research it

in terms of the windows file sharing thing - you helped me figure that out too. i had never considered that my machine could be the source (duh). turns out that i permitted finder.app to get access to the internet (didn't know why it needed it couldn't find the answer on the web). it is occasionally doing netbios udp broadcasts on those ports to see if they should enumerate any windows machines in the finder. problem solved!

would appreciate anyone's read on the log and any comments on the wnce2001 if people are familiar. thanks again


[DHCP IP: 192.168.1.100] to MAC address ::laptop::, Saturday, September 03,2011 07:50:19
[WLAN access allowed] from MAC: ::laptop::, Saturday, September 03,2011 07:50:18
[DHCP IP: 192.168.1.100] to MAC address ::laptop::, Saturday, September 03,2011 07:50:16
[WLAN access allowed] from MAC: ::laptop::, Saturday, September 03,2011 07:50:16

[DHCP IP: 192.168.1.100] to MAC address ::laptop::, Friday, September 02,2011 22:13:25
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 22:13:25

[DoS Attack: RST Scan] from source: 207.171.168.103, port 80, Friday, September 02,2011 22:03:37

***failure/success
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 21:49:58
[WLAN access rejected: incorrect security] from MAC address ::laptop::, Friday, September 02,2011 21:49:58

[WLAN access allowed] from MAC: ::ipad::, Friday, September 02,2011 21:40:34
[admin login] from source 192.168.1.100, Friday, September 02,2011 21:40:17

[DHCP IP: 192.168.1.100] to MAC address ::laptop::, Friday, September 02,2011 21:40:08
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 21:39:58


***note: i changed the ip pool to 100- to see if i saw any packets flowing to 200+ afterwards
[admin login] from source 192.168.1.211, Friday, September 02,2011 21:30:16

***failure/success
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 21:29:45
[WLAN access rejected: incorrect security] from MAC address ::laptop::, Friday, September 02,2011 21:29:45

[admin login] from source 192.168.1.211, Friday, September 02,2011 19:50:38

<<i disabled this from the mac list because i was concerned about it and wanted to test that mac filtering was working>>
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 18:26:59

[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 18:23:15
[DHCP IP: 192.168.1.211] to MAC address ::laptop::, Friday, September 02,2011 18:23:15
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 18:23:13

***failure/success
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 18:09:45
[WLAN access rejected: incorrect security] from MAC address ::laptop::, Friday, September 02,2011 18:09:45

[admin login] from source 192.168.1.211, Friday, September 02,2011 18:00:39

[DHCP IP: 192.168.1.211] to MAC address ::laptop::, Friday, September 02,2011 17:59:07
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 17:59:07

***failure/success
[DHCP IP: 192.168.1.211] to MAC address ::laptop::, Friday, September 02,2011 17:58:41
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 17:49:45
[WLAN access rejected: incorrect security] from MAC address ::laptop::, Friday, September 02,2011 17:49:45

[admin login] from source 192.168.1.211, Friday, September 02,2011 17:42:23

[DHCP IP: 192.168.1.211] to MAC address ::laptop::, Friday, September 02,2011 17:42:16
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 17:42:10

[Time synchronized with NTP server] Friday, September 02,2011 12:21:16
[admin login] from source 192.168.1.210, Friday, September 02,2011 10:51:51
[admin login failure] from source 192.168.1.210, Friday, September 02,2011 10:51:47
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:28:11
[admin login] from source 192.168.1.210, Friday, September 02,2011 10:28:07
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:24:26
[DHCP IP: 192.168.1.210] to MAC address ::laptop::, Friday, September 02,2011 10:24:23
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:24:21


***why are there two close entries here for the laptop getting wlan access?
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 10:24:16
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:23:21
[DHCP IP: 192.168.1.209] to MAC address ::laptop::, Friday, September 02,2011 10:23:19
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 10:23:18

[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:20:26
[DHCP IP: 192.168.1.209] to MAC address ::laptop::, Friday, September 02,2011 10:20:26
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:20:26
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Friday, September 02,2011 10:20:23
[WLAN access allowed] from MAC: ::ipad::, Friday, September 02,2011 10:20:23
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:20:21
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 10:20:19
[WLAN access denied] from MAC: ::wifi bridge::, Friday, September 02,2011 10:19:46
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Friday, September 02,2011 10:18:48
[admin login] from source 192.168.1.206, Friday, September 02,2011 10:16:37
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Friday, September 02,2011 10:16:24
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Friday, September 02,2011 09:59:39
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Friday, September 02,2011 09:30:36


**this is where i started wondering what the heck was going on. you can see that the bridge has a minute, sometimes more between failure and success
[WLAN access allowed] from MAC: ::wifi bridge::, Friday, September 02,2011 08:35:26
[WLAN access rejected: incorrect security] from MAC address ::wifi bridge::, Friday, September 02,2011 08:34:24

[WLAN access allowed] from MAC: ::wifi bridge::, Friday, September 02,2011 08:34:21
[WLAN access rejected: incorrect security] from MAC address ::wifi bridge::, Friday, September 02,2011 08:33:04

[WLAN access allowed] from MAC: ::wifi bridge::, Friday, September 02,2011 08:31:30
[WLAN access rejected: incorrect security] from MAC address ::wifi bridge::, Friday, September 02,2011 08:28:17

[WLAN access allowed] from MAC: ::wifi bridge::, Friday, September 02,2011 08:27:16
[WLAN access rejected: incorrect security] from MAC address ::wifi bridge::, Friday, September 02,2011 08:27:13

[WLAN access allowed] from MAC: ::wifi bridge::, Friday, September 02,2011 08:16:21
[WLAN access rejected: incorrect security] from MAC address ::wifi bridge::, Friday, September 02,2011 08:16:18

[WLAN access allowed] from MAC: ::wifi bridge::, Friday, September 02,2011 08:16:15
[WLAN access rejected: incorrect security] from MAC address ::wifi bridge::, Friday, September 02,2011 08:14:42

[WLAN access allowed] from MAC: ::wifi bridge::, Friday, September 02,2011 08:13:17


**and this seems to be the turning point - this was a session that i had that is legit (it was me that logged in). i don't believe that i changed anything in the router config that could have caused this. notice that the wan accesses here are all okay. it was after this session that things went sideways

[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 06:30:56
[WLAN access rejected: incorrect security] from MAC address ::laptop::, Friday, September 02,2011 06:30:56

[DHCP IP: 192.168.1.202] to MAC address ::laptop::, Friday, September 02,2011 06:21:56
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 06:21:56
[admin login] from source 192.168.1.202, Friday, September 02,2011 06:12:25
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 06:10:10
[DHCP IP: 192.168.1.202] to MAC address ::laptop::, Friday, September 02,2011 05:54:02
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 05:54:01
[DHCP IP: 192.168.1.202] to MAC address ::laptop::, Friday, September 02,2011 05:35:32
[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 05:35:32
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Friday, September 02,2011 05:29:39
[DHCP IP: 192.168.1.202] to MAC address ::laptop::, Friday, September 02,2011 00:06:38
Reply With Quote
  #4  
Old September 3rd, 2011, 09:18 AM
allcaps allcaps is offline
Junior Member
 
Join Date: Sep 2011
Posts: 4
allcaps is on a distinguished road
Default Re: [WLAN access rejected: incorrect security] from MAC address

(rest of the logfile to meet the 10k limit)

***this isn't particularly interesting aside from the fact that there are DoS scans (which seemed to stop when i started getting these incorrect security messages. you'll also see other devices on the net that i turned off to help understand what was going on.

[WLAN access allowed] from MAC: ::laptop::, Friday, September 02,2011 00:06:35
[admin login] from source 192.168.1.206, Thursday, September 01,2011 21:05:15
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Thursday, September 01,2011 20:45:19
[DHCP IP: 192.168.1.202] to MAC address ::laptop::, Thursday, September 01,2011 20:37:39
[WLAN access allowed] from MAC: ::laptop::, Thursday, September 01,2011 20:37:36
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Thursday, September 01,2011 16:22:09
[admin login] from source 192.168.1.206, Thursday, September 01,2011 16:00:52
[WLAN access allowed] from MAC: ::wifi bridge::, Thursday, September 01,2011 15:59:30
[DoS Attack: ACK Scan] from source: 96.17.116.111, port 443, Thursday, September 01,2011 15:37:58
[WLAN access allowed] from MAC: ::laptop2::, Thursday, September 01,2011 15:27:35
[DHCP IP: 192.168.1.208] to MAC address ::laptop2::, Thursday, September 01,2011 15:26:24
[WLAN access allowed] from MAC: ::laptop2::, Thursday, September 01,2011 15:26:24
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Thursday, September 01,2011 15:21:08
[DoS Attack: ACK Scan] from source: 67.207.129.146, port 80, Thursday, September 01,2011 15:17:57
[DoS Attack: ACK Scan] from source: 74.125.127.104, port 80, Thursday, September 01,2011 15:17:16
[admin login] from source 192.168.1.206, Thursday, September 01,2011 15:16:32
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Thursday, September 01,2011 15:16:18
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Thursday, September 01,2011 15:14:39
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Thursday, September 01,2011 14:07:09
[admin login] from source 192.168.1.206, Thursday, September 01,2011 14:01:28
[admin login failure] from source 192.168.1.206, Thursday, September 01,2011 14:01:24
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Thursday, September 01,2011 14:01:17
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Thursday, September 01,2011 12:59:39
[Time synchronized with NTP server] Thursday, September 01,2011 12:21:15
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Thursday, September 01,2011 12:05:49
[admin login] from source 192.168.1.206, Thursday, September 01,2011 11:51:31
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Thursday, September 01,2011 11:47:27
[WLAN access allowed] from MAC: ::wifi bridge::, Thursday, September 01,2011 10:51:47
[DHCP IP: 192.168.1.208] to MAC address ::laptop2::, Thursday, September 01,2011 10:47:57
[WLAN access allowed] from MAC: ::laptop2::, Thursday, September 01,2011 10:47:56
[admin login] from source 192.168.1.206, Thursday, September 01,2011 10:35:54
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Thursday, September 01,2011 10:34:59
[DHCP IP: 192.168.1.208] to MAC address ::laptop2::, Thursday, September 01,2011 10:02:17
[WLAN access allowed] from MAC: ::laptop2::, Thursday, September 01,2011 10:02:14
[WLAN access allowed] from MAC: ::wifi bridge::, Thursday, September 01,2011 09:38:57
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Thursday, September 01,2011 08:29:39
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 21:02:15
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Wednesday, August 31,2011 21:00:32
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 20:32:15
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Wednesday, August 31,2011 20:12:46
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 20:02:15
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Wednesday, August 31,2011 19:55:54
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 19:32:15
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Wednesday, August 31,2011 19:22:09
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 18:32:13
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Wednesday, August 31,2011 18:14:39
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 16:02:14
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Wednesday, August 31,2011 15:59:39
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 12:32:13
[Time synchronized with NTP server] Wednesday, August 31,2011 12:21:15
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 11:32:13
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Wednesday, August 31,2011 11:29:39
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 10:02:12
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 09:37:26
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 09:32:12
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 09:20:39
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 09:02:13
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 08:58:16
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Wednesday, August 31,2011 08:44:51
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 08:32:13
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 08:13:31
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 07:02:13
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 06:34:36
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 06:32:12
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 06:09:18
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 06:02:11
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 05:35:33
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 04:32:10
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 04:28:03
[Internet connected] IP address: 98.232.92.97, Wednesday, August 31,2011 02:32:09
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Wednesday, August 31,2011 02:13:03
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 23:32:07
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Tuesday, August 30,2011 23:12:45
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 23:02:07
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Tuesday, August 30,2011 22:55:53
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 22:32:08
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Tuesday, August 30,2011 22:22:08
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 22:02:08
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Tuesday, August 30,2011 21:43:04
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 21:32:08
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Tuesday, August 30,2011 21:14:38
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 21:02:08
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Tuesday, August 30,2011 20:44:52
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 19:02:08
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Tuesday, August 30,2011 18:59:38
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 17:02:08
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Tuesday, August 30,2011 14:29:38
[Time synchronized with NTP server] Tuesday, August 30,2011 12:21:15
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Tuesday, August 30,2011 08:57:40
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Tuesday, August 30,2011 08:44:53
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Tuesday, August 30,2011 05:34:56
[Internet connected] IP address: 98.232.92.97, Tuesday, August 30,2011 05:02:08
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Tuesday, August 30,2011 04:27:26
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Tuesday, August 30,2011 02:12:44
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Tuesday, August 30,2011 02:12:27
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Monday, August 29,2011 21:59:37
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Monday, August 29,2011 21:42:28
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Monday, August 29,2011 20:44:53
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Monday, August 29,2011 17:29:38
[Internet connected] IP address: 98.232.92.97, Monday, August 29,2011 17:02:08
[Time synchronized with NTP server] Monday, August 29,2011 12:21:15
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Monday, August 29,2011 08:57:01
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Monday, August 29,2011 08:44:54
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Monday, August 29,2011 05:34:18
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Monday, August 29,2011 05:12:44
[Internet connected] IP address: 98.232.92.97, Monday, August 29,2011 05:02:07
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Monday, August 29,2011 04:55:53
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Monday, August 29,2011 04:26:48
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Monday, August 29,2011 03:14:38
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Monday, August 29,2011 02:11:48
[DoS Attack: ACK Scan] from source: 96.17.164.138, port 80, Monday, August 29,2011 01:00:35
Reply With Quote
  #5  
Old September 3rd, 2011, 09:19 AM
allcaps allcaps is offline
Junior Member
 
Join Date: Sep 2011
Posts: 4
allcaps is on a distinguished road
Default Re: [WLAN access rejected: incorrect security] from MAC address

sorry - one more

[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Monday, August 29,2011 00:59:38
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Sunday, August 28,2011 21:41:49
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Sunday, August 28,2011 20:44:55
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Sunday, August 28,2011 20:29:38
[Internet connected] IP address: 98.232.92.97, Sunday, August 28,2011 17:02:07
[DoS Attack: ACK Scan] from source: 67.18.17.146, port 80, Sunday, August 28,2011 16:30:17
[DoS Attack: ACK Scan] from source: 188.165.13.72, port 80, Sunday, August 28,2011 16:25:36
[admin login] from source 192.168.1.208, Sunday, August 28,2011 16:16:41
[DoS Attack: ACK Scan] from source: 96.17.121.87, port 80, Sunday, August 28,2011 15:56:13
[WLAN access allowed] from MAC: ::laptop2::, Sunday, August 28,2011 15:53:58
[DHCP IP: 192.168.1.208] to MAC address ::laptop2::, Sunday, August 28,2011 15:53:58
[WLAN access allowed] from MAC: ::laptop2::, Sunday, August 28,2011 15:53:58
[Time synchronized with NTP server] Sunday, August 28,2011 12:21:14
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Sunday, August 28,2011 09:41:47
[DoS Attack: ACK Scan] from source: 50.17.194.6, port 80, Sunday, August 28,2011 09:39:54
[admin login] from source 192.168.1.208, Sunday, August 28,2011 09:18:39
[DHCP IP: 192.168.1.208] to MAC address ::laptop2::, Sunday, August 28,2011 09:18:30
[WLAN access allowed] from MAC: ::laptop2::, Sunday, August 28,2011 09:18:24
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Sunday, August 28,2011 08:44:56
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Sunday, August 28,2011 07:55:53
[WLAN access allowed] from MAC: ::wifi bridge::, Sunday, August 28,2011 07:51:16
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Sunday, August 28,2011 06:14:37
[Internet connected] IP address: 98.232.92.97, Sunday, August 28,2011 05:02:07
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Sunday, August 28,2011 03:59:37
[DoS Attack: RST Scan] from source: 61.191.61.238, port 11053, Sunday, August 28,2011 02:18:58
[DoS Attack: RST Scan] from source: 61.191.61.238, port 47597, Sunday, August 28,2011 01:12:40
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Saturday, August 27,2011 23:29:37
[DHCP IP: 192.168.1.207] to MAC address ::laptop2::, Saturday, August 27,2011 21:55:49
[WLAN access allowed] from MAC: ::laptop2::, Saturday, August 27,2011 21:55:49
[DoS Attack: ACK Scan] from source: 74.125.53.105, port 80, Saturday, August 27,2011 21:42:52
[admin login] from source 192.168.1.207, Saturday, August 27,2011 21:33:37
[DHCP IP: 192.168.1.207] to MAC address ::laptop2::, Saturday, August 27,2011 21:33:22
[WLAN access allowed] from MAC: ::laptop2::, Saturday, August 27,2011 21:33:17
[DHCP IP: 192.168.1.201] to MAC address ::ipad::, Saturday, August 27,2011 20:44:56
[Internet connected] IP address: 98.232.92.97, Saturday, August 27,2011 17:02:07
[DoS Attack: ACK Scan] from source: 74.125.53.103, port 80, Saturday, August 27,2011 15:12:42
[DoS Attack: ACK Scan] from source: 74.125.53.147, port 80, Saturday, August 27,2011 15:02:41
[DoS Attack: ACK Scan] from source: 74.125.127.103, port 80, Saturday, August 27,2011 14:49:01
[DHCP IP: 192.168.1.205] to MAC address ::laptop2::, Saturday, August 27,2011 14:46:19
[WLAN access allowed] from MAC: ::laptop2::, Saturday, August 27,2011 14:46:19
[admin login] from source 192.168.1.205, Saturday, August 27,2011 14:35:10
[DHCP IP: 192.168.1.205] to MAC address ::laptop2::, Saturday, August 27,2011 14:32:30
[WLAN access allowed] from MAC: ::laptop2::, Saturday, August 27,2011 14:32:29
[Time synchronized with NTP server] Saturday, August 27,2011 12:21:14
[admin login] from source 192.168.1.205, Saturday, August 27,2011 11:53:53
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Saturday, August 27,2011 11:29:50
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Saturday, August 27,2011 11:29:36
[WLAN access allowed] from MAC: ::wifi bridge::, Saturday, August 27,2011 11:21:49
[DoS Attack: ACK Scan] from source: 77.87.192.45, port 80, Saturday, August 27,2011 11:18:38
[DoS Attack: RST Scan] from source: 193.239.68.34, port 80, Saturday, August 27,2011 11:18:27
[DoS Attack: ACK Scan] from source: 74.125.53.147, port 80, Saturday, August 27,2011 11:15:28
[DoS Attack: ACK Scan] from source: 74.125.53.103, port 80, Saturday, August 27,2011 11:15:01
[DHCP IP: 192.168.1.206] to MAC address ::desktop::, Saturday, August 27,2011 10:56:43
[DHCP IP: 192.168.1.200] to MAC address ::wifi bridge::, Saturday, August 27,2011 10:56:31
[WLAN access allowed] from MAC: ::wifi bridge::, Saturday, August 27,2011 10:56:29
[admin login] from source 192.168.1.205, Saturday, August 27,2011 10:32:46
[DoS Attack: ACK Scan] from source: 96.32.104.158, port 80, Saturday, August 27,2011 10:28:49
[DoS Attack: ACK Scan] from source: 174.143.237.174, port 443, Saturday, August 27,2011 10:17:48
[WLAN access allowed] from MAC: ::laptop2::, Saturday, August 27,2011 10:04:13
Reply With Quote
  #6  
Old December 22nd, 2011, 07:25 PM
slgnj slgnj is offline
Junior Member
 
Join Date: Dec 2011
Posts: 1
slgnj is on a distinguished road
Default Re: [WLAN access rejected: incorrect security] from MAC address

I have the same situation - Comcast supplied router, etc. I can fix the problem for a while by changing the wireless password on the router. Once I change the password on the laptop, it immediately works. I then immediately change it back to the old password because I don't want to change all of the other devices (laptops, printer, blu ray, xbox, etc.). Change it back on the offending laptop, still works.

The odd thing is that I have this problem on only one of my devices - an HP Pavillion D7. Once it is fixed, it lasts for a while - maybe 4 or 6 weeks - then I have to do it again.
Reply With Quote
  #7  
Old February 26th, 2014, 05:15 AM
wraromer wraromer is offline
Junior Member
 
Join Date: Feb 2014
Posts: 1
wraromer is on a distinguished road
Default Re: [WLAN access rejected: incorrect security] from MAC address

No answer in all these years?? I have the same issue with a WNR2200 and an iPad 2 connecting to it: First there is a message that the MAC of the iPad is rejected for security reasons and almost immediately afterwards it is accepted. If that would have been a hacker, he would obviously have managed to name to correct password. So there should be no more rejections due to the correct password for the WPA now being known by the hacker, right?! But instead this "couple of log messages" reappears a few times every hour.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -8. The time now is 10:08 PM.