NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
rsdavis1
May 21, 2020Aspirant
R6250 WiFi Clients are not identified
I have both wired and wireless clients served by this R6250 router. Wireless security is WPA2-PSK [AES]. All seem to be functioning normally. However, the list of wireless clients always includes ...
- Jun 12, 2020
> [...] Any ideas?
I can offer some clues.
Names which begin with "HP", like "HPA08CFD6E31EC" ("6") and
"HPFA0C87" ("9") suggest Hewlett Packard. The last six characters of
those names match the low six (hexadecimal) digits of the MAC address,
which is typical for such automatically generated names.On "9", the OUI ("64:51:06") is registered to HP. See, for example,
a Web site like: https://aruljohn.com/mac.plMy quick Web search suggested that "02:0F:B5" ("6") is a virtual OUI,
typically used by devices like wireless extenders.In "10", the OUI ("20:EE:28") is registered to Apple, which is, at
least, suggestive."7" and "8" remains mysteries.
In general, if a device didn't get an IP address, then calling it a
"connection" might be over-stating things. Without an IP address, I'd
say that there's a limit to how much trouble it can cause. Those could
be wireless devices which tried to connect using bad credentials, for
example.If a device did get an IP address (like, say, "8"), then I might try
pointing a web browser at that address, to see if it's willing to talk
that way. (Many types of devices do that these days.)You might run an experiment or two, too. For example, introduce a
novel wireless device, intentionally specify a bad passphrase, and
observe the (changed?) results. Or, power down your whole dwelling,
then bring back the router, and then add other devices or power circuits
and watch the changes.Beyond that, tools exist to monitor/trace network traffic, but I
don't use them enough to make any recommendations.
rsdavis1
Jun 12, 2020Aspirant
Taking the advice of an earlier responder to cut and paste, I've copied below an excerpt from the router's attached devices list. Lines 6 and 9 show known devices on my network. I have no idea what lines 7, 8,and 10 are. Any ideas?
| 6 | 192.168.1.250 | HPA08CFD6E31EC | 02:0F:B5:6E:31:EC |
| 7 | -- | -- | 2A:80:88:34:25:27 |
| 8 | 192.168.1.5 | -- | EE:13:FC:14:FC:A5 |
| 9 | 192.168.1.15 | HPFA0C87 | 64:51:06:FA:0C:87 |
| 10 | -- | -- | 20:EE:28:9B:A2:90 |
antinode
Jun 12, 2020Guru
> [...] Any ideas?
I can offer some clues.
Names which begin with "HP", like "HPA08CFD6E31EC" ("6") and
"HPFA0C87" ("9") suggest Hewlett Packard. The last six characters of
those names match the low six (hexadecimal) digits of the MAC address,
which is typical for such automatically generated names.
On "9", the OUI ("64:51:06") is registered to HP. See, for example,
a Web site like: https://aruljohn.com/mac.pl
My quick Web search suggested that "02:0F:B5" ("6") is a virtual OUI,
typically used by devices like wireless extenders.
In "10", the OUI ("20:EE:28") is registered to Apple, which is, at
least, suggestive.
"7" and "8" remains mysteries.
In general, if a device didn't get an IP address, then calling it a
"connection" might be over-stating things. Without an IP address, I'd
say that there's a limit to how much trouble it can cause. Those could
be wireless devices which tried to connect using bad credentials, for
example.
If a device did get an IP address (like, say, "8"), then I might try
pointing a web browser at that address, to see if it's willing to talk
that way. (Many types of devices do that these days.)
You might run an experiment or two, too. For example, introduce a
novel wireless device, intentionally specify a bad passphrase, and
observe the (changed?) results. Or, power down your whole dwelling,
then bring back the router, and then add other devices or power circuits
and watch the changes.
Beyond that, tools exist to monitor/trace network traffic, but I
don't use them enough to make any recommendations.
- rsdavis1Jun 12, 2020Aspirant
Thanks! This is a big help. I've been able to track all but one of the "mystery" links to devices in my home. I don't know what they are, but they disappeared when I disabled specific devices. The one unknown is;
9 192.168.1.5 -- EE:13:FC:14:FC:A5 Don't have a cluse what it is, but it keeps popping up on the "connected devices" list