Reveiving these notifications in e-mail "System: Detected an unauthorized "

[BillP]

We use APC SmartUPSs with network management cards and Mangaged Switched PDUs. Frequently, I get these messages in my e-mail. I cant seem to find the root cause for these notifications so we can stop them.
-
----Original Message-----
From: TXHOUPS1@COMPANY.com
Sent: Thursday, December 20, 2007 10:10 AM
To: Andy Wazir
Subject: System: Detected an unauthorized user attempting to access the SNMP interface f

v1
Name : TX-UPS1
Location :
Contact : Andy Wazir
http://

Serial # :
UPS Ser #:
Date: 12/20/2007
Time: 12:10:43
Code: 0x0004

Informational - System: Detected an unauthorized user attempting to access the SNMP interface from x.x.x.174.

The x.x.x.174 is a Windows XP user workstation. User is performing her regular duties. Nothing out of the ordinary. Has anyone seen this?



Thanks in advance...


Andy

[Anonymous user]

We have a couple of APC units on our LAN. The guy who runs them reports getting these messages
occasionally about access from a multiuser Windows server. As security manager I have no problem
with processes onsite scanning with the default SNMP community "public", but attempts to guess the password for a non-default write community string would be an issue.

The message does not give much useful detail:
Informational - System: Detected an unauthorized user attempting to access the SNMP interface from
a.b.c.d
Date: 04/02/2008
Time: 17:53:43
Code: 0x0004

We have no management console so AFAIK the problem is not a misconfigured NMS

Does anyone know what exactly these messages mean ?
Is it possible to ignore read requests and report only write requests, or ignore requests from particular
machines or net blocks ?

Andrew

[BillP · Accepted solution]

We use APC SmartUPSs with network management cards and Mangaged Switched PDUs. Frequently, I get these messages in my e-mail. I cant seem to find the root cause for these notifications so we can stop them.
-
----Original Message-----
From: TXHOUPS1@COMPANY.com
Sent: Thursday, December 20, 2007 10:10 AM
To: Andy Wazir
Subject: System: Detected an unauthorized user attempting to access the SNMP interface f

v1
Name : TX-UPS1
Location :
Contact : Andy Wazir
http://

Serial # :
UPS Ser #:
Date: 12/20/2007
Time: 12:10:43
Code: 0x0004

Informational - System: Detected an unauthorized user attempting to access the SNMP interface from x.x.x.174.

The x.x.x.174 is a Windows XP user workstation. User is performing her regular duties. Nothing out of the ordinary. Has anyone seen this?



Thanks in advance...


Andy