Asus RT-ac68u - Unknow devices

[Sxm-Gag]

Hello,

Hello everyone, first post here, just found this forum witch seem to be a great source of informations.

I own a Asus RT-ac68u, I really like the App on my phone to control the WIFI for kids, I often look at the list of device on my network.

Yesterday I realise that they were lots of new device there that I did not knew. The other strange thing, their MAC address all start with the same 6 caracters but different names of device. 00:08:22, my research showed that this InPro Comm.

This list is from the web interface on my laptop:

From the phone app:

Since I realise this I changed my SSID and password for wireless connections.
My quesitons is:

1. When there is a device in the list, does it mean that it connected to my wireless?(wondering if I should start to suspect neighbors)
   
2. Can a device be on the list if it reach the router through the cabling ?
3. Look like some attack on my router but from physical location near me or China ?

regards,

Msx

 

[ApexRon]

My quesitons is:

1. When there is a device in the list, does it mean that it connected to my wireless?(wondering if I should start to suspect neighbors)
   
2. Can a device be on the list if it reach the router through the cabling ?
3. Look like some attack on my router but from physical location near me or China ?

Answers based on my experience but assuming that your laptop and phone apps do not retain information from being logged in to other networks:

1. Yes. Each MAC address beginning with 00:08:22 is from a different communications chip from the same manufacturer
2. Yes, assuming the manufacturer also makes Ethernet chips
3. Don't panic. You need to take inventory of all your devices and make sure your count is the same as the number of MACs being reported.

Realize that reported MACs may not currently present on your network but that is dependent on how your apps obtain and retain that information.

 

[Ronald Schwerer]

Answers based on my experience but assuming that your laptop and phone apps do not retain information from being logged in to other networks:

1. Yes. Each MAC address beginning with 00:08:22 is from a different communications chip from the same manufacturer
2. Yes, assuming the manufacturer also makes Ethernet chips
3. Don't panic. You need to take inventory of all your devices and make sure your count is the same as the number of MACs being reported.

Realize that reported MACs may not currently present on your network but that is dependent on how your apps obtain and retain that information.

Good advice. Also, check the Wireless Log to see what's currently connected (and for how long). Signal RSSI might give a hint on the client's distance.

 

[Sxm-Gag]

Good advice. Also, check the Wireless Log to see what's currently connected (and for how long). Signal RSSI might give a hint on the client's distance.

Thanks for the advice, I look at active connection, none of the suspect were there. It is really suspicious same vendor MAC with different names like Xerox, Iphone and IZT GmbH.

 

[ColinTaylor]

Searching the internet reveals that there are certain devices that use that manufacturer's chipset (00:08:22) which randomise the last three octets each time they connect. Most of the reports are for cheap Chinese mobile phones. So you're probably looking for one device rather than many.

 

[RMerlin]

00:08:22 = InproCom InPro. They manufacture wifi interfaces, so it's probably used by some low-end IoT device.

 

[dosborne]

Searching the internet reveals that there are certain devices that use that manufacturer's chipset (00:08:22) which randomise the last three octets each time they connect.

Also quite common is some of the android media players. Drove me nuts when I was trying to set one up about 3 years ago as I always use the DHCP server to assign fixed addresses. Hard to do when the MAC changes all the time

 

[KevTech]

Turning off WPS helps.

 

[Sxm-Gag]

Hello,

So I found the problem it is a new smart phone, cheap china, UMIDIGI A3 Pro. Still dont understand why it creat multiple name like Xerox, will ask their support.

regards