Vast quantity of random MAC Addresses showing-up since last Firmware Update

[Gelert5]

Hi all - I'm hoping someone can advise me on what's now occuring, chez moi.

I have an SH32B, connected to FTTP.
The latest Firmware was installed on 25th June 2025.
r3.8.11-R-1414606-PROD-83002, with the GUI now at 2.36.9.

Since that FW update, the Technical Event Logs (viewable / downloadable from the SH32B via the PC Browser Webpage) are recording some rather alarming activity.
Between 2nd July and just now, there are circa 1000 'Device Xx:Xx:Xx:Xx:Xx:Xx connected over Wi-Fi'  Log Entries (= circa 175 per 24hr period), 99.5% of which are random MAC Addresses.
And each MAC Address with a 'Private IP Address' of 0.0.0.0 (as shown on the Home->Advanced settings->Advanced Wireless->Show Disconnected page).

Rebooting the SH32B has had no effect.
And I powered-off the three EE Wi-Fi Discs and also the EE Hybrid Connect Back-Up device we have, for 24hrs - all of which has had zero impact on this phenomena.

Some of these random MAC Address 'Log Entries' seem to appear only once.
But others are allegedly 'connected over Wi-Fi' multiple times in succession - the Log Entries seem to be at a sample rate of once-per-minute, with one MAC Address showing as having been connected nine times over a ten minute period.
To confirm, these MAC Addresses are nothing to do with any of the devices that we own and operate on our network(s).

Before I go all paranoid, is this perhaps something to do with my EE Wi-Fi now being 'loaned-out' by EE to other EE customers (as BT used to do), since the new Firmware was installed...?
In which case it would be nice to have been informed of this...

Or is this something more sinister?

Thanks in advance for any guidance / clarification / enlightenment that can be given,

Louis.

[XRaySpeX]

In your online MyEE account near the bottom you'll find the options for EE WiFi dis/enablement. 

[Gelert5]

@JimM11 Thanks for that link...!
VERY informative...!!!
EE Wifi showing as open network - The EE Community

No, even with a Speedtest (using Thinkbroadband's Test Engine), my Tablet's MAC Address didn't appear in MY Technical Log File. But it might be in my neighbour's Log File... LOL!

@XRaySpeX Thanks for your input.
But I've searched in my EE Account (via the EE App and via the EE Webpage), and that 'EE SSID Enable/Disable' option isn't showing-up anywhere.
In addition, it's not available in the SH32B's GUI either - unlike how it used to appear in the old BT Smarthub 2's Management Webpage.

I'll keep monitoring that 'EE Wifi showing as open network'  page, and await further input from @bobpullen 

I feel an email to EE coming on...! 🙄

Ciao,

Louis.

[XRaySpeX]

Have you looked in your online account under Plans and Subs > Manage BB? Does your BB plan appear there at all? Maybe you've not linked it.

It won't be in the router's GUI at all. 

[Gelert5]

@XRaySpeX 
Yes, I have looked under Plans & Subs>Manage Broadband.
Yes, my Broadband Plan appears there - along with my Digital Voice and Mobile Phone Plans.
And all of the above is true when viewing my EE Account either via Firefox on Windows 10, or via the EE App on Android 14.

No, the specific option you describe is not visible to me, even if it is there.
Yes, I can disable ALL of my WiFi Network from those pages.
But I cannot disable just the EE SSID Broadcast.

[XRaySpeX]

You need to scroll right down on that Manage BB page & click on Learn more about EE WiFi :

[XRaySpeX]

@Gelert5 : You may notice from that other linked thread that I have a SH+ at the 3.8.11 firmware level that does not emit an EE WiFi SSID, yet I am opted in for public EE WiFi. I believe I have achieved such a state by a judicious sequence of settings. However I am awaiting the result of a test by @bobpullen before I publish my findings.

[Gelert5]

@JimM11 LOL...!
I had my Tablet connected to the EE SSID for about an hour, starting at about 1445hrs today.
I ran a couple of Speedtests, with circa 100Mbps Up and circa 45Mbps down, so the speed wasn't stellar (throttled?).
I also used the Tablet to logon to BBC Weather, and to investigate my EE Account for that 'EE SSID Enable/Disable' function.

As I posted above (at circa 1630hrs), my Tablet's MAC Address hadn't shown-up in the Technical Event Log when I logged-off at ~1545hrs, even though there were other 'Events' logged in there at/from ~1600hrs onwards.

Yet - when I looked again just now, there was my Tablet's MAC Address - a single entry at 1545hrs - at the time of disconnection...?!
And an entry which wasn't present earlier in the Log File when I looked at ~1620hrs.

Which raises some observations, chez moi:
a) If my single connection only raised one single 'Log Event' (despite that connection duration being about one hour), why are other singular MAC Addresses showing-up as multiple 'Connection Events', recorded every one minute or so?
b) The Log Events therefore cannot be used to ascertain 'duration of connection' in any way.
c) If someone were to connect to my EE Open Network and then carried-out 'nefarious activities', what possible defence could I offer GCHQ et al that 'it wasn't me, guv'...
d) I'm going to link this thread (and a couple of others) in my email to EE tomorrow.

Right - enough already - I'm off for a beer in the sunshine...! 😎

[JimM11]

@Gelert5 Will read it all shortly, enjoy the beer!

[Gelert5]

@XRaySpeX Now, THAT salient piece of information was extremely useful....!

Thank you.
I've now 'opted-out' (as of 1810hrs 08/07/25).
And I'll monitor the Technical Log Files to see if and when the random MAC Address entries subside (if they do...?)

Cheers,

Louis.

[XRaySpeX]

Like the others does the tablet's MAC Address have a 'Private IP Address' of 0.0.0.0?

a) There have often been reports of EE WiFi connections going down often & having to login again. Not surprising when the 2 EE WiFi in my neighbourhood. have v. weak strengths. Your own router's EE WiFi will be strong for you.

c) There should be AP Isolation between your normal SSID & EE WiFi. Also by virtue of the login EE will be able to report to the authorities who did what to whom.