D-Link Forums

D-Link IP Cameras for Home => mydlink.com (Portal) => Topic started by: Blueyed1 on April 16, 2016, 11:47:40 AM

Title: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on April 16, 2016, 11:47:40 AM
I got this mail today:

Dear Administrator :
An unwelcomed user " 00-1c-bf-85-d9-59 " attempts to access your home network! If you want to learn more detailed information, please login mydlink App to block the device immediately.
mydlink Service

I dont know what this means.
When does a device/user unwelcome? I can see the macadress, but I can not see more detailed information on mydlink app about the device or what it has done?. I can block the device, thats it. 
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on April 17, 2016, 07:25:57 AM
Is this from your ISP?
Is that MAC address something that belongs to you?
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on April 29, 2016, 04:40:14 AM
Is this from your ISP?
Is that MAC address something that belongs to you?

What do you mean with, is this from yor ISP ?
It is heart fo say if the MAS addresse is one that belongs to me, I mean how do you determine this? I would have to check every device on my network and I could be a guest as well...
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on April 29, 2016, 07:23:08 AM
It's been a while, are you still seeing this?

We are trying to confirm where this MAC address comes from and you'll need to check each device physically you have that is on your network to be sure. Disable Guest Zone on the main host router to help you narrow this down. Check your guests devices as well when they are connected to see if this MAC address is on there devices. If you don't find this MAC address on any of your devices, then it's coming from an external source on the WAN side or your guest zone connection.

Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: RYAT3 on April 29, 2016, 08:45:07 AM
Is this from your ISP?
Is that MAC address something that belongs to you?

What do you mean with, is this from yor ISP ?
It is heart fo say if the MAS addresse is one that belongs to me, I mean how do you determine this? I would have to check every device on my network and I could be a guest as well...

Log into your router. Mac id's should be listed there. See if it is one of yours
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on April 30, 2016, 12:05:06 AM
It's been a while, are you still seeing this?

We are trying to confirm where this MAC address comes from and you'll need to check each device physically you have that is on your network to be sure. Disable Guest Zone on the main host router to help you narrow this down. Check your guests devices as well when they are connected to see if this MAC address is on there devices. If you don't find this MAC address on any of your devices, then it's coming from an external source on the WAN side or your guest zone connection.

Yes I just read this. I'll try to see if any of the MAC ID listed in the router are the one on the suspected list. If not I just wonder, when does a device/MAC ID becomes unwanted? Typing in the wrong password for SSID does not put a device on a suspected list I think, or am I wrong.
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on April 30, 2016, 12:05:50 AM
Is this from your ISP?
Is that MAC address something that belongs to you?

What do you mean with, is this from yor ISP ?
It is heart fo say if the MAS addresse is one that belongs to me, I mean how do you determine this? I would have to check every device on my network and I could be a guest as well...

Log into your router. Mac id's should be listed there. See if it is one of yours

I will try that
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on April 30, 2016, 10:49:26 AM
Possible that there was some attempts by some device to gain access and tried to many times.
Just need to make sure that where the device is and if it's one of yours and or rule it out being one of yours. Then we can go from there.
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on April 30, 2016, 11:05:15 AM
Possible that there was some attempts by some device to gain access and tried to many times.
Just need to make sure that where the device is and if it's one of yours and or rule it out being one of yours. Then we can go from there.
Thanks... I rebooted the router today, now the supectlist is emty, so I'll not be able to find out what device is was. I'll remember your advice if it happens again, thank you.  :)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on April 30, 2016, 11:06:56 AM
 ;)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: RYAT3 on April 30, 2016, 02:41:24 PM
Possible that there was some attempts by some device to gain access and tried to many times.
Just need to make sure that where the device is and if it's one of yours and or rule it out being one of yours. Then we can go from there.
Thanks... I rebooted the router today, now the supectlist is emty, so I'll not be able to find out what device is was. I'll remember your advice if it happens again, thank you.  :)

It was in your first post?

Event Notice from mydlink Service - Wireless Intrusion Detected!
on: April 16, 2016, 02:47:40 PM
ReplyQuote
I got this mail today:

Dear Administrator :
An unwelcomed user " 00-1c-bf-85-d9-59 "
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on June 28, 2016, 09:57:30 AM
Hi Ryat3

Yes I know that " 00-1c-bf-85-d9-59 " is the mac address of the intruder, but I miss a status page in DLINK 890L like found on the old routers eg DIR655, a page like the one found under >setup>networks settings where you can see a list of all connected clients MAC, IP and hostnames.

(https://dl.dropboxusercontent.com/u/18099693/Dlink/DIR655%20setup.JPG)

Or a status page
(https://dl.dropboxusercontent.com/u/18099693/Dlink/Status.JPG)

This way it is easy to identify the owner of the mac address.
The mac could be a ouside guest or guest inside the house, but it is difficult to find out.

I do belive that " 00-1c-bf-85-d9-59 " is a PC client within the house, it happens all the time, dont know why, but now I am not so worried anymore  :)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on June 28, 2016, 10:00:20 AM
You can find the MAC address on the Clients page on the router.

Since you know of the MAC address, you'll need to do a physical search on each device in the house to see where it maybe.
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on June 28, 2016, 10:16:09 AM
You can find the MAC address on the Clients page on the router.

Since you know of the MAC address, you'll need to do a physical search on each device in the house to see where it maybe.

Yes I know I can find the MAC on the Clients page, but you have to click on each client, why not add it to the page like this.
(https://dl.dropboxusercontent.com/u/18099693/Dlink/mac.JPG)

I can be difficult to do a physical search on each device, let say the device is an intruder not located in your house. But I have found the client.
A proposal could be a little update of the user interface on the Clients page  :)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on June 28, 2016, 10:17:59 AM
Ya I know. I miss the old UI too.  ::)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on June 28, 2016, 10:23:52 AM
 
Ya I know. I miss the old UI too.  ::)

 ;)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on June 28, 2016, 10:31:33 AM
So let us know if you find the offending device.  ;)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on June 28, 2016, 10:36:35 AM
So let us know if you find the offending device.  ;)

I have found it, but it took a wile, it is a laptop in the house, but I don't know why it does do that. 
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on June 28, 2016, 10:42:35 AM
Does this LT cause these messages if you disable the wireless on the LT and use the LAN wire connection?
What OS Platform is loaded?
What wireless and wired Mfr chip set does this LT have? Drivers up to date?
Might do a reboot to Safe Mode with Networking and see if you notice any differences.

Scan the LT for malware.
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: Blueyed1 on June 30, 2016, 03:25:47 AM
Does this LT cause these messages if you disable the wireless on the LT and use the LAN wire connection?
What OS Platform is loaded?
What wireless and wired Mfr chip set does this LT have? Drivers up to date?
Might do a reboot to Safe Mode with Networking and see if you notice any differences.

Scan the LT for malware.

Dont know about wired connection, never use it. Its a old LT with Lenovo R61 with Windows 10, I'll scan for malware later, but maybe I'll go back to Windows 7 as well... As long as I know what client it is that creates the event notice, I'm not to worried  :)
Title: Re: Event Notice from mydlink Service - Wireless Intrusion Detected!
Post by: FurryNutz on June 30, 2016, 06:22:13 AM
Ok.  ::)