How to identify Wi-Fi connected devices from a tablet

NoZen -  
brupala Posted messages 111955 Registration date   Status Membre Last intervention   -

How to identify Wi-Fi connected devices from a tablet?

I read the article on the subject, but it doesn't provide instructions for doing the exercise from a tablet (Samsung/Android). My antivirus on my tablet currently indicates that someone is connected to my Wi-Fi network, while no unknown connection is shown in my provider profile checked on my PC, nor after verification with my provider. Apparently, it could be an application installed on my tablet, but nothing seems strange regarding the applications. So I don't know how to disconnect this intruder that my antivirus/tablet seems to indicate (giving me its IP and MAC address, and even its name, which is Quantenna...).

9 réponses

Pierr10 Posted messages 13777 Registration date   Status Modérateur Last intervention   5 815
 

Good evening,

It's probably nonsense! The tablet's antivirus is not reliable. Is it the role of an antivirus to analyze wifi connections?

If you have any doubts, change the wifi password and make it something strong, at least fifteen characters long, with special characters.


What is well conceived is clearly expressed,
And the words to say it come easily.
(Boileau)

1
NoZen
 

Pipe dream? I never frequent forums or social networks, so I don't understand this language. But for additional information, here it is.

I have had the same antivirus for years on my 4 devices, which is Kaspersky, which has indeed reported the presence of this intruder on my network. But my provider, Bell, says there is no such activity on my network.

Although I don't really understand much, my first instinct was indeed to change the password of my wifi. But this connection still appears in the analysis that Kaspersky performs on my tablet, but not on my 3 other devices.

I really don't know how to remove it from my tablet, if it is indeed hidden in my network... Kaspersky has even identified the IP and MAC addresses of this intruder Quantenna!!! ???????????? By entering this MAC number into Google, I saw that many others were dealing with the same intruder, with no solutions to fix the problem, i.e. disconnect it.

Do you have another solution in mind?

0
Pierr10 Posted messages 13777 Registration date   Status Modérateur Last intervention   5 815
 

One thing is certain:

If you have changed your Wifi password to something quite complicated and if your network is normally secured (WPA2), no one can connect to your wifi.

Moreover, I see that Quantenna is a company specializing in wifi. They notably provide mesh networks. Do you have a repeater from this brand at your home?

I really think your antivirus is mistaken and triggering a false alarm.


What is well conceived is clearly stated,
And the words to express it come easily.
(Boileau)

0
bazfile Posted messages 58432 Registration date   Status Modérateur Last intervention   20 245
 

Hello.

Identify the IP and MAC addresses of this Quantenna intruder

Quantenna is a well-known brand that sells WiFi solutions found in some boxes and repeaters; this connection is likely coming from a device you own.

There's no need to be afraid of something normal, so stop freaking out for no reason.

I'm redirecting your post to the WiFi forum.


bazfile
Moderator/Security Contributor.
A hello, a reply, a thank you are always appreciated.

0
NoZen
 

HELLO... bazfile...

I have no experience with forums, which I'm using for the first time, so thank you for your "indulgence" in the absence of the introductory "Hello"!...

However, even though I'm not a tech pro, I can still identify an intruder on my network (especially with the help of my antivirus that confirms it), as I know all my devices that are connected as well as the identity of my network.

Since I can also submit the MAC to a Chrome search, I have also discovered that it indeed is an intruder that several other people have reported (and not a "normal" thing) and they are unable to get rid of it, just like me.

As for "flipping out" for nothing, thanks for the advice, but I'm taking care of that aspect of my cautious personality.

Thank you for your help, even though the question remains.

0
NoZen
 

Hello again Pierr10,

"WPA2", "repeater", it's all Chinese to me, a senior just doing her best!

All I can say (and what I can handle) is that I have a very simple setup, done by Bell, my provider, which indeed installed 2 devices in my home 4 years ago, namely a modem and a 4K recorder, neither of which are branded Quantenna, and I have 4 simple connected devices (3 computers and a tablet), each with a code to access them. Bell tells me they don't see this Quantenna connected to my network, while Kaspersky on my tablet continues to indicate it as being connected to my Bell network. And Kaspersky's alerts in the past have always been reliable and easy to resolve, except this time.

Anyway, it's exhausting me, I give up. Thank you.

0
brupala Posted messages 111955 Registration date   Status Membre Last intervention   14 422
 

Hello,

If it's an Android tablet, you can install the network analyser app.

And lan scan ...


And there you go ....

But goodness, those line spaces are so annoying!!

0
Pierr10 Posted messages 13777 Registration date   Status Modérateur Last intervention   5 815
 

WPA2 is the protection mechanism for your wifi network (Wifi Protected Access). It is the most common and provides good protection. It is of course used by Bell:
https://soutien.bell.ca/services-internet/aide-connexion/que-signifient-ssid-et-wpa2

If the WPA2 wifi key is complicated enough, it is practically impossible to connect to your network.
And Bell has confirmed that there is no intrusion.

Knowing that Quantenna is a company specialized in Wifi, I thought you might have a repeater (not a repetitor) from this brand: it is a device that replicates the Wifi signal, thus increasing the wifi coverage in a house.
bazfile had the same idea.

You know better than I do what is connected and how your network is set up. So my idea was not good.


For me, the problem is with your tablet.

1) I don’t understand why Kaspersky is interested in what is connected to your wifi network. That is not its role.

2) There is something else that stands out to me: you wrote

Since I am also able to submit the MAC to a Chrome search, I also discovered that it was indeed an intruder that several other people report (and not a "normal" thing) and cannot get rid of, like me.

You submitted the MAC address to a search. However, a MAC address is unique and specific to a device. Your search should not have yielded anything, unless all the people who reported it received the same message, probably a fake.

I doubt that Kaspersky is behind the alert.

I already advise you to clear the cache of Chrome.
Settings => Applications => Chrome => Storage

There is normally no virus.


What is well conceived is clearly stated,
And the words to say it come easily.
(Boileau)

0
brupala Posted messages 111955 Registration date   Status Membre Last intervention   14 422
 

Attention,

MAC addresses are no longer unique today and can change freely, especially on Wi-Fi cards:

random address settings Wi-Fi card © coipe ecran brupala
0
Pierr10 Posted messages 13777 Registration date   Status Modérateur Last intervention   5 815 > brupala Posted messages 111955 Registration date   Status Membre Last intervention  
 

Thank you for the information. However, I think that the internet search should have yielded nothing.

0
NoZen
 

Thank you Pierr10 for your clear explanations.

In response to your last observations, Kaspersky on my tablet analyzes many items, including one titled "Devices on my network: detect unwanted devices on my home network," which I appreciate... It's on this alert that I found what I call "my intruder," namely Quantenna, for which Kaspersky indicates both the IP 1.1.1.2 and the MAC 00:26:86:00:00:00, which I then submitted to Chrome and where I discovered that I was not the only one trying to solve this problem...

Moreover, indeed, this IP address has nothing to do with the other 4 addresses, of course all similar and different from Quantenna, that Kaspersky has identified on my network and that I do indeed recognize as my devices.

I will at least clear the Chrome cache, which I do occasionally, but not systematically.

Phew.

0
brupala Posted messages 111955 Registration date   Status Membre Last intervention   14 422
 

Hello,

I think Kaspersky, who would do better to mind his own business, as already mentioned by pierr10, is completely off base here:

1.1.1.2 is an address assigned to Cloudflare, just like their DNS 1.1.1.1

As for the MAC address, it is indeed assigned to Quantenna, but it looks totally fake with its 4 octets of zero at the end.

0