unknown device on network

Hello,

I use WiFi Guard to monitor my network devices, and have a device showing up on the network that I cannot account for. The network belongs to my roommate, and in addition to my devices, I've identified all her devices on the network. But this one device shows up at 10.0.0.11 and I have no idea what it is.

Today I was home alone, talking on the phone with my computer open in front of me, when WiFi Guard popped up an alert (I've got it set to scan every 10 minutes until I get this figured out), after having been "quiet" all morning. Since my roommate wasn't home and I activated no devices before the alert, I can only assume we have an interloper.

Is there any way I can use the MAC address to track down this device? Or can someone suggest something else I can do to ID it?

Win 10 ver 1909

There are a few things you can do:

1) Ping the address with a "-a". That may possibly give you a host name that you might recognize:

Example:

C:\>ping -a 192.168.50.1

Pinging RT-AX92U-2020 [192.168.50.1] with 32 bytes of data:
Reply from 192.168.50.1: bytes=32 time=3ms TTL=64
Reply from 192.168.50.1: bytes=32 time=1ms TTL=64
Reply from 192.168.50.1: bytes=32 time=4ms TTL=64
Reply from 192.168.50.1: bytes=32 time=1ms TTL=64

Ping statistics for 192.168.50.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 1ms, Maximum = 4ms, Average = 2ms


In the above example, that device has a name of "RT-AX92U-2020" which I recognize as my router.

2) After pinging the address, run an arp command like this:

C:\>arp -a 192.168.50.1

Interface: 192.168.50.161 --- 0x15
Internet Address Physical Address Type
192.168.50.1 04-d9-f5-28-20-20 dynamic

Now, you have the MAC address (listed as the physical address above).

Take the first 6 digits of the MAC address and plug it into this web site:

MAC Manufacturer Search - ipchecktool.com

This should tell you the manufacturer of the device.

Hopefully this will be enough to tell you what the device is.

Thank you, that is very helpful. The manufacturer is Shenzhen TCL Technology, who makes wireless telecom equipment, network set top boxes, & other digital comm equipment. But that doesn't solve the mystery, as I've identified every piece of equipment in the apartment. Is there any way to get more info?

Nothing much else comes to mind unless that device has a built in web server or somehow responds if you try to connect to its IP address.

Do you have any light switches or sockets, WiFi connected power strips, etc.? There are so many devices that connect to the internet these days.

hsehestedt said:

Do you have any light switches or sockets, WiFi connected power strips, etc.? There are so many devices that connect to the internet these days.

Yes, but all such devices have been identified.

Is there a way to block access to that IP address?

Ztruker said:

You should be able to block the MAC address in the router I think.

Well, my roommate is unsure of her login and unlikely to give it to me even if she knew it (Comcast set everything up and apparently didn't tell her much of anything). So my last question will be: should I be worried?