APC UPS Data Center & Enterprise Solutions Forum
Schneider, APC support forum to share knowledge about installation and configuration for Data Center and Business Power UPSs, Accessories, Software, Services.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2024-08-22 12:04 PM
Hello I am having constant warnings on Event Log (I am tempted to disable the Email as well) of this:
"Warning - Detected an unauthorized user attempting to access the Control Console interface from 192.168.X.XXX."
Being the latest segments of the IP the one from the Gateway on the Network.
Honestly I have no idea why it is happening, I thought it was some sort of ping or network recognition but there is a "Ping" option on the UPS Control Console and it is enable so it wouldn't mistake it as an Unauthorized Login I think.
The Model is AP9537SUM and here are the captures of how much I see when trying to change the option, because at least I wanted to exclude that specific IP (attached to the post).
Is anything I can do about it? I am really clueless about it and I really need some help here please.
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2024-08-23 06:50 AM
To start what network device has this 192.168.X.X address?!?
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2024-08-23 10:39 AM
Nevermind, found the issue, the IP was from the Gateway, I was trying to find a way to make APC ignore attempts from it when checking Ping or stuff like that but it seems it can't be configured on the software.
The issue was that not only was Mikrotik sending Ping to the UPS but also sniffing ports for HTTP and FTP, so I disabled those checks on the UPS IP and now there are no more warnings about it.
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2024-08-23 08:11 PM
Generally this means someone or something is scanning the network and trying to telnet or ssh (putty) into the device
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.