Question Unrecognized devices signed into my network

[Eddaman3]

Hi Forum,

I'm a brand new member and pretty new to networking. I've got a home network with only one computer a PS4 and 4 Amazon Fire sticks. They are all connected to the wireless network from my T3260 router. I also have my Apple TV 4K connected via ethernet. However, when I sign onto the router and view the devices it shows my Apple TV plus 2 more devices connected to ethernet. Can someone explain to me what that could be? My paranoia suggests I've been hacked somehow but I decided to ask on her to see if there was something I just didn't know about that could cause this. Thanks in advance!....

the 2 connections info below

1). IP: 192.168.254.91
MAC: ae:58:4b:cb:78:4c
Host name: UnKnown
Manufacturer: Unknown

2) IP: 192.168.254.89
MAC: b2:01:dc:13:04:55
Host name: UnKnown
Manufacturer: Unknown

Btw, when they appeared initially I disconnected my AppleTV and restarted the router but they still showed as connected thru ethernet but my AppleTV was shown as disconnected. They also aren’t always there. They appeared in the late night. I received an alert from an app I have on my phone called Fing telling me 2 new devices were connected.

 

[Ralston18]

What are those "plus 2 more devices"?

I.e., IP addresses, MACs etc,?

Many devices offer both wired and wireless MACs plus IPv4 and IPv6 connectivity.

Update your post to include specific information about both the devices you have and those 2 unknown devices that appear to be connected.

The key is to identify each device you have along with the unique MAC associated with that device.

 

[Deleted member 14196]

It’s probably the Apple TV. My iPhone makes two connections to my net work

 

[Eddaman3]

What are those "plus 2 more devices"?

I.e., IP addresses, MACs etc,?

Many devices offer both wired and wireless MACs plus IPv4 and IPv6 connectivity.

Update your post to include specific information about both the devices you have and those 2 unknown devices that appear to be connected.

The key is to identify each device you have along with the unique MAC associated with that device.

Thanks! I updated the my original post. Let me know what else I can let you guys know about the network to help.

 

[Ralston18]

This router?

https://www.actiontec.com/wp-content/uploads/2020/09/T3260ws_UserManual_PN0535_0137_0002.pdf

[Do verify that I found the applicable T3260 router User Manual.]

Read/review the entire User Manual. However take an initial look at the various tables beginning on physically numbered Page 16.

Overall, you should be able to find and identify every device connected to the network.

One thing you can do is to take screenshots (print screen) of the tables and lists. Print the screenshot out and then use the printout as you check each device for name, IP address, MAC, etc..

And if you find an unknown MAC then you can go to

https://macvendors.com/

to help identify the device. And there are other similar websites available.

Using "ipconfig /all" and "arp -a" via the command prompt will provide additional information as well.

Sketch out a simple diagram of your network and devices. The diagram does not need to be a work of art. Just clear enough to present an overall presentation of what is what.

Likely the sketch and screen captures will come in very handy for future troubleshooting.

 

[Eddaman3]

This router?

https://www.actiontec.com/wp-content/uploads/2020/09/T3260ws_UserManual_PN0535_0137_0002.pdf

[Do verify that I found the applicable T3260 router User Manual.]

Read/review the entire User Manual. However take an initial look at the various tables beginning on physically numbered Page 16.

Overall, you should be able to find and identify every device connected to the network.

One thing you can do is to take screenshots (print screen) of the tables and lists. Print the screenshot out and then use the printout as you check each device for name, IP address, MAC, etc..

And if you find an unknown MAC then you can go to

https://macvendors.com/

to help identify the device. And there are other similar websites available.

Using "ipconfig /all" and "arp -a" via the command prompt will provide additional information as well.

Sketch out a simple diagram of your network and devices. The diagram does not need to be a work of art. Just clear enough to present an overall presentation of what is what.

Likely the sketch and screen captures will come in very handy for future troubleshooting.

Thanks so much Ralston! I’ll do that. Enjoy your weekend!

 

[Eddaman3]

I have a couple more quick questions if its ok. I only have a MacBook. Its the only computer in the house so don't have a Command prompt. Can someone suggest an MacOS equivalent? If so, then I'll try to find out what the commands for ipconfig/all would be.

Another quick mention. I ran a Port Scan on one of the devices that claims to be connected via ethernet. Does this look normal?.... I fully intend to read through the User Manual for my router but my family is concerned with our slow internet and thinks someone is connected. I want to put their minds at ease as soon as possible while I try to become as comfortable as possible with the features of my router.

 

[Eddaman3]

Hey if anyone has a moment to tell me if this is something I i need to be concerned about then please let me know. I'm hoping that this is just a simple logging event that commonly occurs so I will not give it another thought.

I logged into my router (T2380-31) and found this in the System Logs. Its occurring every 5mins and was hoping one of you might be able to tell me if its normal? Thanks in advance.

(if I don't hear back then I will probably create another Newb thread asking about this. Please see below:


TIME System Action

2021/11/06 Kernal event

Intrusion -> IN=ewan0.1 OUT= MAC=12:3x:45:6x:x1:12:00:00:xx:00:01:01:00:34:00:39:4x:70:00:11:x1:03:00:x2c:24:32​

SRC:=183:139.74.34 DST: 77.130.272.11 LEN= 40 TOS= 1x.11 PREC=1x.11 TTL-143 ID=14522

PROTO= TCP SPT= 43980 DPT = 33​

(all the info was changed to avoid sharing sensitive data of any kind but the format is the same)