topic Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update in Broadband & Landline

Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 12:21:01 GMT

Hi all - I'm hoping someone can advise me on what's now occuring, chez moi.

I have an SH32B, connected to FTTP.
The latest Firmware was installed on 25th June 2025.
r3.8.11-R-1414606-PROD-83002, with the GUI now at 2.36.9.

Since that FW update, the Technical Event Logs (viewable / downloadable from the SH32B via the PC Browser Webpage) are recording some rather alarming activity.
Between 2nd July and just now, there are circa 1000 'Device Xx:Xx:Xx:Xx:Xx:Xx connected over Wi-Fi' Log Entries (= circa 175 per 24hr period), 99.5% of which are random MAC Addresses.
And each MAC Address with a 'Private IP Address' of 0.0.0.0 (as shown on the Home->Advanced settings->Advanced Wireless->Show Disconnected page).

Rebooting the SH32B has had no effect.
And I powered-off the three EE Wi-Fi Discs and also the EE Hybrid Connect Back-Up device we have, for 24hrs - all of which has had zero impact on this phenomena.

Some of these random MAC Address 'Log Entries' seem to appear only once.
But others are allegedly 'connected over Wi-Fi' multiple times in succession - the Log Entries seem to be at a sample rate of once-per-minute, with one MAC Address showing as having been connected nine times over a ten minute period.
To confirm, these MAC Addresses are nothing to do with any of the devices that we own and operate on our network(s).

Before I go all paranoid, is this perhaps something to do with my EE Wi-Fi now being 'loaned-out' by EE to other EE customers (as BT used to do), since the new Firmware was installed...?
In which case it would be nice to have been informed of this...

Or is this something more sinister?

Thanks in advance for any guidance / clarification / enlightenment that can be given,

Louis.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

JimM11 — Tue, 08 Jul 2025 12:40:18 GMT

@Gelert5 Does the log file get cleared when you power down the EE Smarthub+ router or do a reset on it, or are all the pages in the log file retained!

Are you near any other wireless transmitted wi-fi signals that you can see around you!

Have one off the other experienced user's take a look see on there Router, would do but gone from EE now!

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 12:43:18 GMT

They could be other BT and New EE BB users nearby connecting to your EE WiFi SSID that was activated with the 3.8.11 firmware. You could opt-out of this in your EE account but then you won't be able to use EE WiFi yourself.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 13:01:50 GMT

Hi @JimM11

The current Log File is deleted on any SH32B Reboot (soft or hard), and a new Log File is automatically started after the reboot.
FYI: I always download and save the Log File before I manually reboot the Hub.
And I always download the Log File once-per-week minimum, so that when a Firmware Update is rolled-out (always without any warning!), I'm only going to be missing a few days-worth of Log Entries at worst.

Our neighbours obviously have their own Wi-Fi Devices and Networks.
BUT - their equipment has never 'interferred' with our stuff before.
As proven by the historical Log Files that I've already archived.

In fact, looking at the last Log File from the previous Firmware, it has a total of 1315 Log File entries, from 11th April through to 17th June = 67 days = a 91KB .csv file. And ALL of those recorded MAC Addresses belong to our Devices.
Compare that to the latest Log File from the latest Firmware, and there is already a total of over 1000 Log File entries from 2nd to 8th July = 6 (SIX!) days... = a 70KB.csv file.
And the previous Log File (the first one I downloaded after the latest Firmware was installed at 0200hrs on 25th June, but before my manual reboot on 2nd July), shows 1200 Log File entries between 25th June and 2nd July = 8 days = an 83KB .csv file.

So unless something Wi-Fi-ey has been installed near to me, at the exact time that the new Firmware was also installed on our Hub, I suspect that the new Firmware is at, or at least toward the root of this phenomena.

Question: Do you know if domestic customers' EE Wi-Fi is 'loaned-out' by EE to other EE customers (as BT used to do)...?

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 13:12:54 GMT

Yes, as I said, New EE BB users can use it. Are you reading me?

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

JimM11 — Tue, 08 Jul 2025 13:13:07 GMT

@Gelert5 That's the unknown currently, you should try to connect on the EE WiFi ssid that you see, if you manage and it is yours would surely be caught in the log file also, and if you get Internet access then for sure you are pathed through your hub!

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 13:32:35 GMT

@XRaySpeX 'Yes, as I said, New EE BB users can use it. Are you reading me?'
I'm not sure that I fully understand.
My SSID is unique, as is my WiFi Password.
Are you saying that any EE Customer (including EE Mobile?) can access the internet via my WiFi, by simply being on the EE WiFi SSID?

@JimM11 Good Idea! I'll give that a try with my Tablet...!

FYI: the Log File for 2nd July to today (8th) shows a total of 325 Different MAC Addresses that have 'connected over Wi-Fi' in the past 6 days. Take off the ~25 devices that are ours, and 300 is a hefty number of unique MAC Addresses (and therefore Devices) that are NOT ours...

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 13:39:07 GMT

Not your own SSID but the SSID "EE WiFi" that your router is now broadcasting as a result of that firmware update.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 14:05:44 GMT

@XRaySpeX Ah... THAT probably explains it all....

OK, so when are EE going to send out some information about this new 'feature'...?
And how / where to disable it, to stop my Technical Logs getting 'spammed' with random MAC Addresses...?

@JimM11 My Tablet is now connected to EE Wi-Fi, and yet its MAC Address hasn't shown-up in my Technical Log, er, yet...

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

JimM11 — Tue, 08 Jul 2025 14:17:41 GMT

@Gelert5 Did you get full Internet access on it? Speed test may also show what and how much you can pull data wise or if EE Have a restriction on it! Just real naughty off them to push it out! Logging or not, if not and it all works then oops you have no idea who joined did what your end, even more naughty! Your the person up front and centre testing now, think Bob Pullen disabled his rapid as soon as it appeared, posted some info the other day on it! Link on that post is below!

EE Wifi showing as open network - The EE Community

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 14:14:54 GMT

In your online MyEE account near the bottom you'll find the options for EE WiFi dis/enablement.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 15:34:03 GMT

@JimM11 Thanks for that link...!
VERY informative...!!!
EE Wifi showing as open network - The EE Community

No, even with a Speedtest (using Thinkbroadband's Test Engine), my Tablet's MAC Address didn't appear in MY Technical Log File. But it might be in my neighbour's Log File... LOL!

@XRaySpeX Thanks for your input.
But I've searched in my EE Account (via the EE App and via the EE Webpage), and that 'EE SSID Enable/Disable' option isn't showing-up anywhere.
In addition, it's not available in the SH32B's GUI either - unlike how it used to appear in the old BT Smarthub 2's Management Webpage.

I'll keep monitoring that 'EE Wifi showing as open network' page, and await further input from @bobpullen

I feel an email to EE coming on...! 🙄

Ciao,

Louis.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 15:44:04 GMT

Have you looked in your online account under Plans and Subs > Manage BB? Does your BB plan appear there at all? Maybe you've not linked it.

It won't be in the router's GUI at all.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 16:11:53 GMT

@XRaySpeX
Yes, I have looked under Plans & Subs>Manage Broadband.
Yes, my Broadband Plan appears there - along with my Digital Voice and Mobile Phone Plans.
And all of the above is true when viewing my EE Account either via Firefox on Windows 10, or via the EE App on Android 14.

No, the specific option you describe is not visible to me, even if it is there.
Yes, I can disable ALL of my WiFi Network from those pages.
But I cannot disable just the EE SSID Broadcast.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 16:48:27 GMT

You need to scroll right down on that Manage BB page & click on Learn more about EE WiFi :

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 17:34:19 GMT

@Gelert5 : You may notice from that other linked thread that I have a SH+ at the 3.8.11 firmware level that does not emit an EE WiFi SSID, yet I am opted in for public EE WiFi. I believe I have achieved such a state by a judicious sequence of settings. However I am awaiting the result of a test by @bobpullen before I publish my findings.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 17:05:21 GMT

@JimM11 LOL...!
I had my Tablet connected to the EE SSID for about an hour, starting at about 1445hrs today.
I ran a couple of Speedtests, with circa 100Mbps Up and circa 45Mbps down, so the speed wasn't stellar (throttled?).
I also used the Tablet to logon to BBC Weather, and to investigate my EE Account for that 'EE SSID Enable/Disable' function.

As I posted above (at circa 1630hrs), my Tablet's MAC Address hadn't shown-up in the Technical Event Log when I logged-off at ~1545hrs, even though there were other 'Events' logged in there at/from ~1600hrs onwards.

Yet - when I looked again just now, there was my Tablet's MAC Address - a single entry at 1545hrs - at the time of disconnection...?!
And an entry which wasn't present earlier in the Log File when I looked at ~1620hrs.

Which raises some observations, chez moi:
a) If my single connection only raised one single 'Log Event' (despite that connection duration being about one hour), why are other singular MAC Addresses showing-up as multiple 'Connection Events', recorded every one minute or so?
b) The Log Events therefore cannot be used to ascertain 'duration of connection' in any way.
c) If someone were to connect to my EE Open Network and then carried-out 'nefarious activities', what possible defence could I offer GCHQ et al that 'it wasn't me, guv'...
d) I'm going to link this thread (and a couple of others) in my email to EE tomorrow.

Right - enough already - I'm off for a beer in the sunshine...! 😎

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

JimM11 — Tue, 08 Jul 2025 17:07:48 GMT

@Gelert5 Will read it all shortly, enjoy the beer!

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

Gelert5 — Tue, 08 Jul 2025 17:15:06 GMT

@XRaySpeX Now, THAT salient piece of information was extremely useful....!

Thank you.
I've now 'opted-out' (as of 1810hrs 08/07/25).
And I'll monitor the Technical Log Files to see if and when the random MAC Address entries subside (if they do...?)

Cheers,

Louis.

Re: Vast quantity of random MAC Addresses showing-up since last Firmware Update

XRaySpeX — Tue, 08 Jul 2025 17:24:04 GMT

Like the others does the tablet's MAC Address have a 'Private IP Address' of 0.0.0.0?

a) There have often been reports of EE WiFi connections going down often & having to login again. Not surprising when the 2 EE WiFi in my neighbourhood. have v. weak strengths. Your own router's EE WiFi will be strong for you.

c) There should be AP Isolation between your normal SSID & EE WiFi. Also by virtue of the login EE will be able to report to the authorities who did what to whom.