Network - Wireless & Wired Connections

Help & troubleshooting for network issues, including connecting your device to your home Wi-Fi network, connecting to public networks, troubleshooting wireless issues & ethernet connections, and optimizing streaming performance.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
stevewi
Level 7

Phishing activity

I have a Roku Ultra that I bought in 2018.  I also have an Eero router with a subscription to Eero Secure.  The Roku is hardwired to the network...no wi-fi.

Lately, my Eero has been blocking phishing/deception threats to my Roku Ultra.  Attached are the threat blocks graphs my router gives me for the last two weeks and for this week (so far).  I've never seen this before.

Are other people seeing this?  Is this something Roku knows about?  If not, how can I report it?  This doesn't affect my wi-fi connected Roku streaming stick.

Thanks in advance...

-- sw

Threat blocks - May 2-8, 2021

 

Threat blocks - May 9-15, 2021

 

Threat blocks - May 16-22, 2021

0 Kudos
2 Replies
StreamerUser
Level 17

Re: Phishing activity

Not that much can be known from your pics (first pic mentions a Windows laptop, not a Roku) , but this is most likely false positives/over aggressive reporting based on normal HTTP/SSDP/SOAP/etc traffic for the Roku (checking for firmware/app updates, announcing itself to other devices on the LAN, etc).

Such services are notorious for being "too sensitive" by default and flagging anything and everything in terms of packet/connection traffic.

If you can't reduce the triggering/reporting level (and get detailed information about each and every supposed "phishing attempt" or "threat blocked"), id either ignore it, or unsubscribe.

0 Kudos
stevewi
Level 7

Re: Phishing activity

You write:

first pic mentions a Windows laptop, not a Roku

That was the week I wasn't seeing the activity...the week before it started..posted for comparison.

Such services are notorious for being "too sensitive" by default and flagging anything and everything in terms of packet/connection traffic.

I agree...I'll inquire of Eero and see if I can get more specific information.  It could be that Eero introduced some new AI thingie during the week of 5/18-15/2021 and it was learning.  The ongoing report for this week shows much less suspect activity.

-- sw

0 Kudos