What's new

Asus RT-ac68u - Unknow devices

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Sxm-Gag

New Around Here
Hello,

Hello everyone, first post here, just found this forum witch seem to be a great source of informations.

I own a Asus RT-ac68u, I really like the App on my phone to control the WIFI for kids, I often look at the list of device on my network.

Yesterday I realise that they were lots of new device there that I did not knew. The other strange thing, their MAC address all start with the same 6 caracters but different names of device. 00:08:22, my research showed that this InPro Comm.

This list is from the web interface on my laptop:
upload_2019-7-25_10-35-36.png


From the phone app:
upload_2019-7-25_10-37-15.png


Since I realise this I changed my SSID and password for wireless connections.
My quesitons is:
  1. When there is a device in the list, does it mean that it connected to my wireless?(wondering if I should start to suspect neighbors)
  2. Can a device be on the list if it reach the router through the cabling ?
  3. Look like some attack on my router but from physical location near me or China ?

regards,

Msx
 

Attachments

  • upload_2019-7-25_10-33-24.png
    upload_2019-7-25_10-33-24.png
    9.9 KB · Views: 365
My quesitons is:
  1. When there is a device in the list, does it mean that it connected to my wireless?(wondering if I should start to suspect neighbors)
  2. Can a device be on the list if it reach the router through the cabling ?
  3. Look like some attack on my router but from physical location near me or China ?
Answers based on my experience but assuming that your laptop and phone apps do not retain information from being logged in to other networks:
  1. Yes. Each MAC address beginning with 00:08:22 is from a different communications chip from the same manufacturer
  2. Yes, assuming the manufacturer also makes Ethernet chips
  3. Don't panic. You need to take inventory of all your devices and make sure your count is the same as the number of MACs being reported.
Realize that reported MACs may not currently present on your network but that is dependent on how your apps obtain and retain that information.
 
Answers based on my experience but assuming that your laptop and phone apps do not retain information from being logged in to other networks:
  1. Yes. Each MAC address beginning with 00:08:22 is from a different communications chip from the same manufacturer
  2. Yes, assuming the manufacturer also makes Ethernet chips
  3. Don't panic. You need to take inventory of all your devices and make sure your count is the same as the number of MACs being reported.
Realize that reported MACs may not currently present on your network but that is dependent on how your apps obtain and retain that information.
Good advice. Also, check the Wireless Log to see what's currently connected (and for how long). Signal RSSI might give a hint on the client's distance.
 
Good advice. Also, check the Wireless Log to see what's currently connected (and for how long). Signal RSSI might give a hint on the client's distance.

Thanks for the advice, I look at active connection, none of the suspect were there. It is really suspicious same vendor MAC with different names like Xerox, Iphone and IZT GmbH.
 
Searching the internet reveals that there are certain devices that use that manufacturer's chipset (00:08:22) which randomise the last three octets each time they connect. Most of the reports are for cheap Chinese mobile phones. So you're probably looking for one device rather than many.
 
00:08:22 = InproCom InPro. They manufacture wifi interfaces, so it's probably used by some low-end IoT device.
 
Searching the internet reveals that there are certain devices that use that manufacturer's chipset (00:08:22) which randomise the last three octets each time they connect.
Also quite common is some of the android media players. Drove me nuts when I was trying to set one up about 3 years ago as I always use the DHCP server to assign fixed addresses. Hard to do when the MAC changes all the time :)
 
Hello,

So I found the problem it is a new smart phone, cheap china, UMIDIGI A3 Pro. Still dont understand why it creat multiple name like Xerox, will ask their support.

regards
 

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top