Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[rosede]

Every few seconds I see this entry in my router logs:

Establishing connection w/ auth server: 92.242.140.2:443

whois shows that this IP is registered to barefruit.co.uk.   

Google searches doesn't give me much info on why this is occurring.  There is a similar posting in this product line http://forums.dlink.com/index.php?topic=12244.0 with the issue being "securespot".  However, I see that securespot was removed in FW version 1.37NA, which happens to be the version that I am using.

Anyone have any information on what this is and how to stop it?

Thanks

Daryl

[FurryNutz]

Link>Welcome!

• What region are you located?
• Has a Factory Reset been performed?
• Was a Factory Reset performed before and after any firmware updates then set up from scratch?

  Link> >FW Update Process

• Was the router working before any firmware updates?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

Is any FW auto update features enabled on this router?

[rosede]

Lots of questions.  Let me see if I can answer them.

What region? 

• Central United States

Has a Factory Reset been preformed?   

• I don't remember if, or when I've preformed a factory reset.

Was a Factory Reset performed before and after any firmware updates then set up from scratch? 

• After reading over the link that you provided, I am pretty confident that I followed the instructions as written.  Those instructions say to save a copy of the configuration, preform a factory reset, then update the firmware, and then reload the configuration.  I know that I still have that configuration, so I'm pretty sure that was how I did the update.
  

Was the router working before any firmware updates?

• Yes.  I don't remember when this started happening.

I did the update because I had just purchased a Samsung Galaxy S4.  It was not working with the FW that was installed.  After a little research, I discovered that the current version of FW fixed the issue with the SG S4.

Is any FW auto update features enabled on this router?

• No

Do you think that a factory reset would resolve this issue?

[FurryNutz]

What is connected to the router when you see these log entries?
Any unauthorized users by chance on the Wifi?

I'd give a reset a try. FIrst do a config save to file so you have a back up of what you have configured. Then do a reset and see what happens. Don't load the config file, just set up from scratch.

[rosede]

What is connected to the router when you see these log entries?
Any unauthorized users by chance on the Wifi?

I don't believe that these entries are coming from any external device.  I remember having looked into this a year or more ago, and concluding that its nothing dangerous.  But I don't remember what I felt that it was connected to.  My environment has changed a lot since I first remember seeing these entries, equipment added, equipment removed etc...  The one thing that has remained for some time now is this router, and after this latest round of trouble shooting, I'm pretty confident that the source is the router.

I really don't want to do a reset, unless that is the only option available, because its going to be a big pain the rear.  Due to an outage, I'll have to get permission.  Just like a production environment at work, I need coordinate with my bosses and make sure I can take the network down.  LOL  Hahaha.  Maybe put in a change control and see if it gets approved.  HA.

I'll post the results of the factory rest once I get it accomplished.

Thanks

Daryl

[FurryNutz]

First do a config save to file so you have a back up of what you have configured. That way you'll have a copy of a current configuration if you need it. Then do a reset and see what happens. Don't load the config file, just set up from scratch.

Let us know how it goes.

[rosede]

FurryNutz,

I did the reset and it appears to have resolved the issue.  I made sure that I documented the hell out of all of the changes and settings that I made before I did the reset.  As I said before, I wasn't looking forward to doing a factory reset, but I no longer see that entry in my logs.  As a matter of fact, I see more entries in the logs than what I saw before. The establishing connection was filling up the log and nothing else was being displayed, or was getting pushed off so fast that I wasn't able to see what else was there.

Thanks Furry.

Daryl

[FurryNutz]

Glad you got it fixed. Make a new save configuration file now for back up.

Enjoy.