Mystery device wifi data sucker

[ConnerTW]

Ok so I am using ubiquity to show this and I keep banning the device you see on my network. Every day it reappears under a new mac address. If I did not have a data cap this would be fine but because I have starlink this is a big problem. How do I find this "mystery device?" Its using 25gb a day and starlink caps us at 1tb. Everyone at my house says I did not kick them off when I do this, so its not one of the major devices. Our security cameras are hardlined into the network switch so I know it is not that. Please help, I want to desperately find the mystery sucker

[Donut417]

4 minutes ago, ConnerTW said:

Ok so I am using ubiquity to show this and I keep banning the device you see on my network. Every day it reappears under a new mac address. If I did not have a data cap this would be fine but because I have starlink this is a big problem. How do I find this "mystery device?" Its using 25gb a day and starlink caps us at 1tb. Everyone at my house says I did not kick them off when I do this, so its not one of the major devices. Our security cameras are hardlined into the network switch so I know it is not that. Please help, I want to desperately find the mystery sucker

I noticed on my iPhone that there is an option in the WiFi settings for Private WiFi Address. It seems that what it does it roll your MAC address each time it connects to a network. It's suppose to be for when connecting to Public WiFi it reduces the ability tracking. So if you have an iOS device that could be it. Otherwise similar options could exist on other products. 

[Skiiwee29]

I would update your network name and password first. Then if it continues to get on I would setup a MAC filter whitelist and only devices with MAC's that are whitelisted will be able to connect. 

[Monkeylol]

Have you done a vendor search to try to find out what the device might be? If you are really worried about it you could enable MAC filtering if starlink allows that.

[da na]

I'd say use a program like Advanced IP Scanner to see the device manufacturer as aforementioned, to get a clue on what the device is.

[ConnerTW]

the device ramped up to a staggering 90 mbps download when i scanned the network with advanced Ip

[da na]

1 minute ago, ConnerTW said:

the device ramped up to a staggering 90 mbps download when i scanned the network with advanced Ip

Are you sure it's not your own computer? Or a switch?

[ConnerTW]

Its not my device but how would I know if it is a switch? @da na

[da na]

3 minutes ago, ConnerTW said:

Its not my device but how would I know if it is a switch? @da na

Switch, access point, or router seems like what it is if it keeps changing MAC address and increases throughput when more load is put on the network.

Finished the scan? Check the manufacturer.

[ConnerTW]

3 minutes ago, da na said:

Switch, access point, or router seems like what it is if it keeps changing MAC address and increases throughput when more load is put on the network.

Finished the scan? Check the manufacturer.

No manufacturer listed

[ConnerTW]

it also seems that exactly every 24 hours it either turns off or switches its mac address. It would be a device that is at home all the time, using data all the time. Also every few mins it will spike up in download speeds 

 

[ConnerTW]

i have also figured out that it is closer to the upstairs access point. It also must be new because it is using wifi 6 unlike most of the other devices

[ConnerTW]

I started going around the house to find it, i did

[Donut417]

Just now, ConnerTW said:

I started going around the house to find it, i did

May we ask what kind of device? Just wondering since the Mac address kept changing. 

[Monkeylol]

1 minute ago, ConnerTW said:

I started going around the house to find it, i did

what was it?

[da na]

19 minutes ago, ConnerTW said:

I started going around the house to find it, i did

What was it? Don't leave us hanging like this!

[Needfuldoer]

Well?! Don't keep us in suspense after teeing up that mystery!