@ComcastBrittany -- You're right. I did have an Apple Time Capsule (and an Apple Airport Extreme) on my network.
However they were not used as a Router or WiFi Access Point. Their settings, in Airport Utility, were:
Wireless > Network Mode = Off
Network > Router Mode = Off (Bridge Mode)
But at your suggestion, I entirely removed both Apple "routers" from my network, by unplugging their power.
And I can report that, in the 2 weeks since then, I've seen ZERO phantom / unknown / intruder "new device" alerts in xFi.
To confirm this, today I powered up the Time Capsule again, retaining the Airport Utility settings noted above (Network Mode = Off; Router Mode = Off / Bridge-mode). And within 7 minutes, I got another dreaded New Device alert.
So it does seem that they're somehow coming from Apple's router -- despite the software settings that, I would expect, should have disabled their Router / Access Point functionality.
That said, this particular alert (and many others) were reported as "wired", "connected with a cable" and "connection type: ethernet" -- and that's how my Time Capsule is indeed connected.
By the way, the reason I want my Time Capsule on the network is as a Time Machine destination for my MacBook Pro.
But I SHOULD be free to use third-party Access Points to extend my WiFi coverage, without this whole "new device" problem.
My immediate primary concern is -- I want to know if these "new devices" really are intruders, such that I have a major security issue on my network. Or, if they are just improperly reported legit devices, which are annoying but not concerning.
... View more
Hi. I have that problem -- my xFi has reported dozens of "new device connected" alerts over the past month, and they are NOT my devices.
However, I do NOT have an extender, or other wifi access points, or side-car routers on my network. My only active router is the XB6 (Arris TG3482G) from Xfinity, and my xfinitywifi is disabled.
For many of these Phantom / Intruder Devices, xFi says:
is connected to MyCoolNetwork <-- connected to my WiFi
connected with a cable <-- yet not connecting by WiFi
connected to your Gateway with a cable
Connection Type: Ethernet
Access Point: Wireless Gateway
See screenshots below.
These devices never get an IP Address, and do not appear on a LAN scan.
They always disconnect within a minute or so, yet remain on my Devices list, under "Not Connected".
Some have no Manufacturer.
Some have very strange MAC addresses (000100000000, 000000000032, 0000000001D0).
Changing my WiFi password did not block these phantom/intruder devices.
Of course this is all very annoying. But it's also extremely concerning -- I want to know if my netowrk has been hacked. What is going on here??
... View more
I have the same problem, so instead of starting a new post, i'm adding it here. Also, this issue started for me on 1/22, almost the same time as the OP here.
A few weeks ago I got a new Arris TG3482G (XB6) gateway (modem/router) from Xfinity. This is the ONLY router on my network. Then last Monday, I began getting a series of very strange alerts from Xfinity, saying "A new device connected to your home network".
I'm sure they're NOT my devices -- unless my devices have been hacked, but a MalwareBytes scan of my mac was clean.
Also, my xfinitywifi network is DISABLED, so I assume they're not somehow slipping onto my personal network from there.
Reviewing the Notifications screen in xFi, I compiled a complete list -- see attached screenshot.
27 in a week, starting Mon 1/22.
The very high volume on Friday.
Some are overnight (3:23am, 3:26am, 4:02am).
Most do not show a Manufacturer.
Some MAC addrs seem to have a very odd format (in red).
The strange MAC addrs are (almost always) the only ones with a Manufacturer.
None were assigned an IP.
For comparison, the last row of the log shows a legit/normal alert, for my friend's iphone (which did get an IP).
What is going on here? Have I been hacked (such that MalwareBytes can't see it)? Is this some kind of malware on my router? What can explain these oddly formed MAC addresses? Why do they not get an IP?
... View more