RiverDelta Ghost Device

popkevin1234 · November 8, 2015

Hello you see i have a Cisco router and my Internet distributor is Claro Chile (also know telmex as Mexico) and i tried to go to my router Configs typing 190.168.0.1 the normal way to get in but i cannot do it so i downloaded a program called Wnetwacher that sees pepole conected to the network and the router itself but this appears iin my pc (im connected by lan)

so i check the wnet wacher of my principal pc and this is what i got

Any idea wtf is happening to my network?

Trogdor · November 8, 2015

Well, RiverDelta Networks does network devices. Since it's the same MAC address every time and it doesn't look like theirs a WAP on your network I'm going to say it's an interface on the router. Without knowing what's in the running config of the router, your router model or really anything else, helping with anything else will be difficult.

190.168.0.1 is not a private address, your LAN addressing scheme should be a private subnet but it's not. Your address scheme looks like 186.36.0.0/16 or something subneting in the third octet. Your router IP looks to be 186.36.55.1.

You don't need to mask your MAC address, especially if you're going to be inconsistent in doing so.

You should mask your public IP address though.

Also something to note is the Sonic Systems inc device on your network....the OUI 00:40:10 returns to a company that makes ultrasonic cleaning equipment. Are you spoofing a MAC address or do you have something connected that was manufactured by them?