Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




31 posts

Geek


# 30676 17-Feb-2009 14:14
Send private message

I have been getting between 20-30 emails daily with the Subject "Alert Message!". It goes something like this
"Dear User
You router has detected and protected you against an attempt to gain access to your network. This may have been an attempted hacker intrusion, or perhaps just your ISP doing routine network maintenance. Most of these network probes are nothing to worry about. But repeat alerts should be reported."

Then it lists the day, time, Source, Destination etc of this "probe". The days are always back in 2008!

I have contacted my ISP regarding these messages. They had stopped the ones with them as Source or Destination. They had not been able to stop the others.

I told our PC fixit guy last time he was here, and showed him the messages. He seemed to think they are not harmful. he thinks our firewall, anti-virus, and anti-spyware should give our network enough protection.

I am not worried that our network is in danger of intrusion, just that it is rather annoying to receive these messages and have to delete them everyday.

Any suggestions?

Create new topic
507 posts

Ultimate Geek


  # 196297 17-Feb-2009 14:52
Send private message

Disconnect your internet and phone line, close your windows and blinds.

Big brother has their beady eye on you. 

All connection with teh outside world must be discontinued!!!!!!1111!!!




 


The force is strong with this one!

BDFL - Memuneh
64658 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

# 196319 17-Feb-2009 15:52
Send private message

What router do you have? Is this a home connection? This message sounds strange  - usually home routers don't send notifications. Are you sure it's not someone trying to get you to install some malware?




 
 
 
 


xpd

Chief Trash Bandit
10035 posts

Uber Geek

Mod Emeritus
Trusted
Lifetime subscriber

  # 196320 17-Feb-2009 15:53
Send private message

Obvious question.... what router are you using ?? <snap>




XPD / Gavin / DemiseNZ

 

Server : i5-3470s @ 3.50GHz  16GB RAM  Win 10 Pro    Workstation : i5-3570K @ 3.40GHz  20GB RAM  RX580 4GB Win 10 Pro    Console : Xbox One

 

https://www.xpd.co.nz - Games, emulation, geekery, and my attempts at photography.     Now on BigPipe 100/100 and 2Talk

 

Emulation - The art of getting your $4000 PC to run an 80's system - and still fails.

 

Add me on Steam


6358 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 196328 17-Feb-2009 16:53
Send private message

Check the headers of the email, if it doesn't originate from any equipment in a range under your control, ignore them.



31 posts

Geek


# 196531 18-Feb-2009 15:55
Send private message

Hi guys

Thanks for the quick replies

Freitasm and xpd - the router (hub?) is 3Com model 3CRWDR101A-75 (I think this is what you mean?). We are set up as a home network (wireless and wired).

nate - please enlighten me re what you mean by the header of the email? When I click on "View Full Header", which part should l be looking at? and how do I find out whether it originates from eqipment in a range under my control? (Sorry, I am really a novice at this)


BDFL - Memuneh
64658 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 196554 18-Feb-2009 17:01
Send private message

I guess the next logical question is "does this router support notifications" (which I doubt). If it does, then next question would be "do you remember setting up notifications to your e-mail?"

I think you will find out the router does not support notifications, and that you never entered your e-mail address anywhere in the router configuration - in which case I'd just say these e-mails are just some phishing scam.




xpd

Chief Trash Bandit
10035 posts

Uber Geek

Mod Emeritus
Trusted
Lifetime subscriber

  # 196559 18-Feb-2009 17:15
Send private message

Ive got the same router (or very similar) and never had emails from it nor does it have the option.
Id say theyre scam/phising emails...




XPD / Gavin / DemiseNZ

 

Server : i5-3470s @ 3.50GHz  16GB RAM  Win 10 Pro    Workstation : i5-3570K @ 3.40GHz  20GB RAM  RX580 4GB Win 10 Pro    Console : Xbox One

 

https://www.xpd.co.nz - Games, emulation, geekery, and my attempts at photography.     Now on BigPipe 100/100 and 2Talk

 

Emulation - The art of getting your $4000 PC to run an 80's system - and still fails.

 

Add me on Steam


 
 
 
 


6358 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 196595 18-Feb-2009 20:23
Send private message

slowcoach:
nate - please enlighten me re what you mean by the header of the email? When I click on "View Full Header", which part should l be looking at? and how do I find out whether it originates from eqipment in a range under my control? (Sorry, I am really a novice at this)


Do a View Full Headers and copy and paste the info in here, then I can point out what is generating the emails.



31 posts

Geek


# 196681 19-Feb-2009 11:57
Send private message

Freitasm, xpd, and nate

I have checked my router settings. Under "Firewall" section, has been set to "Alert by e-mail" with my email address.

In the "Alert Message!" emails, there is a refernce to visit a website "http://combat.uxn.com/", to find out more about "the intruder". But when I click the link, it always give "Page Load Error"

nate, I have copied and pasted the "View Full Header" for one fo the messages below. I have deleted my email address from the message for privacy reasons

Return-path:

Envelope-to:
Delivery-date: Thu, 19 Feb 2009 11:14:30 +1300
Received: from Debian-exim by mx1.orcon.net.nz with local (Exim 4.67)
     (envelope-from )
     id 1LZugX-0007Zx-9P
     for ; Thu, 19 Feb 2009 11:14:29 +1300
Received: from [SLOW-COACHES-IP-ADDRESS-GOES-HERE] (helo=brnt)
     by mx1.orcon.net.nz with esmtpa (Exim 4.67)
     (envelope-from <>)
     id 1LZugX-0007Zk-2o
     for ; Thu, 19 Feb 2009 11:14:29 +1300
From: <>
To:
Subject: Alert Message!!!
Message-ID:
X-DSPAM-Check: by mx1.orcon.net.nz on Thu, 19 Feb 2009 11:14:29 +1300
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Thu Feb 19 11:14:29 2009
X-DSPAM-Confidence: 0.6442
X-DSPAM-Probability: 0.0000
Date: Thu, 19 Feb 2009 11:14:29 +1300

Should I just continue to delete these emails, and otherwise not worry about them?


{EDIT MOD (RC):removed IP address}

488 posts

Ultimate Geek


  # 196686 19-Feb-2009 12:31
Send private message

I'd say that you set up the email notification yourself, the email is from an orcon ip address and if you look on

http://support.3com.com/infodeli/tools/wireless/3crwdr101a75/3CRWDR101A75_User-Guide.pdf


page 70 of the pdf (page 68 in the top left corner) there is an option to turn on email notifications for suspicious network activity.




pɐǝɥ sıɥ uo ƃuıpuɐʇs



31 posts

Geek


# 196713 19-Feb-2009 14:54
Send private message

Hi Filterer

Yes, it appears that the emails were sent to advise suspicious network activity, and that the router had been set up to do this.

So if I disable this, I would not get further "Alert Message!",but my network is still protected?

488 posts

Ultimate Geek


  # 196782 19-Feb-2009 20:55
Send private message

Correct, these are only "notifications" that your router is doing it's job properly!




pɐǝɥ sıɥ uo ƃuıpuɐʇs

BDFL - Memuneh
64658 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

# 196794 19-Feb-2009 21:45
Send private message

Ok, so it's clear now this is an option in the router, and you had it configured this way. I think everyone else were thrown out of the way because this wasn't disclosed.

As said the router is doing its job. Every day millions of packets will go around - some malicious, some just "background noise".

Receiving an email notification for each time there's one such packet would be irritating (as you found out) since there isn't really any reason to be notified that "hey I am your router and I have just protected you"... Because there isn't anything you can do really to avoid those packets so notifications wouldn't be any more effective than not receiving any notification at all.




3403 posts

Uber Geek

Trusted

  # 196819 19-Feb-2009 23:14
Send private message

I get this typically 3-5 times a day although my router alerts me through log files. Usually its just a port scan.




Ray Taylor
Taylor Broadband (rural hawkes bay)
www.ruralkiwi.com

There is no place like localhost
For my general guide to extending your wireless network Click Here






31 posts

Geek


# 196906 20-Feb-2009 13:27
Send private message

Thanks a lot guys!

That clears the mystery up for me.

It is good to have you guys to turn to.

Much Appreciated.

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Logitech introduces new Made for Google keyboard and mouse devices
Posted 16-Oct-2019 13:36


MATTR launches to accelerate decentralised identity
Posted 16-Oct-2019 10:28


Vodafone X-Squad powers up for customers
Posted 16-Oct-2019 08:15


D Link ANZ launches EXO Smart Mesh Wi Fi Routers with McAfee protection
Posted 15-Oct-2019 11:31


Major Japanese retailer partners with smart New Zealand technology IMAGR
Posted 14-Oct-2019 10:29


Ola pioneers one-time passcode feature to fight rideshare fraud
Posted 14-Oct-2019 10:24


Spark Sport new home of NZC matches from 2020
Posted 10-Oct-2019 09:59


Meet Nola, Noel Leeming's new digital employee
Posted 4-Oct-2019 08:07


Registrations for Sprout Accelerator open for 2020 season
Posted 4-Oct-2019 08:02


Teletrac Navman welcomes AI tech leader Jens Meggers as new President
Posted 4-Oct-2019 07:41


Vodafone makes voice of 4G (VoLTE) official
Posted 4-Oct-2019 07:36


2degrees Reaches Milestone of 100,000 Broadband Customers
Posted 1-Oct-2019 09:17


Nokia 1 Plus available in New Zealand from 2nd October
Posted 30-Sep-2019 17:46


Ola integrates Apple Pay as payment method in New Zealand
Posted 25-Sep-2019 09:51


Facebook Portal to land in New Zealand
Posted 19-Sep-2019 18:35



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.