Is there some log to know if an unwanted IP address connected

to our network via the wifi ?

1 Like

you can look into inside the gl web page, and then under clients.

however many devices with android use random mac addresses so keep in mind that this can give you false positive, you can better disable the settings on these devices.

then if a unknown device connects you know enough.

^ note that it is still not a full indication, a smart person can also abuse the mac address from a existing device on your wifi and de-auth it.

Afaik the GL GUI will only list devices with DHCP IPs.

So if someone just connects with a static IP, the device won't even show.

OK, but how this person could know such mac addresses ? He must know my GL password, no ?
And if he can do this, can he set some scheduled wifi activation ? meaning if the wifi is off, he can use it and connect to any IP address ?

I worry about this because I had some signs that my phone was hacked and if it is with android 10, so vulnerable, I consider that someone hacked my routeur, or it is not possible, because I know perfectly the list of the risks and what not to do in that case.
So I am even thinking about to stop using the wifi and replace it by an ethernet cable.

Well if you use wireless, then it is easy to get the mac of the access point and from there they scan to the mac addresses which connect to the ap, they don't have to be authenticated to do that.

Though @admon said something interesting here, i thought the client function might follow arp but i guess im wrong and it makes sense because if i use vlans it is not compatible, it just reads the dhcp clients.

If you are afraid of a hacked router the most important key is strong passwords, especially those from a password manager and if you want to step this up you use key authentication that is litterly enough to prevent it, most malware targeting routers are after weak passwords but rarely exploits, if that is the case you could always choose to disable the ui for that client with a firewall rule.

Hello.....

As per my knowledge... You just need to restart your laptop. and reconnect wifi.

I hope this will be helpful for you.

If you suspect someone is using your Wi-Fi without permission, then step one is: change the password.

How about using arp table to discover all devices? Then diff these against dhcp devices and display them as sort of "other connected devices" in the table?