Welcome to the community! Read our posting tips, and learn how to earn ranks, levels and badges to get started.
Ask any devices or smart home question in the Devices/Security or Network Troubleshooting Categories.
Happy posting!
Ask any devices or smart home question in the Devices/Security or Network Troubleshooting Categories.
Happy posting!
Why does my Amazon Smart Plug cause FingBox to alarm?
I have two Amazon Smart Plugs which I tried a year ago but set aside due to this problem. Just tried again with same result: FingBox alarms periodically with a Network Gateway Changed alert. Why would a smart plug be trying to act as the network gateway? Is this a malicious piece of hardware?
2
Answers
If the smart plugs that are connected are able to connect to internet that means they have an ethernet card (NIC) card in them. So, any device which has ethernet card in them has the ability to direct traffic through them and it might cause the gateway change alerts.
A gateway is a device that routes traffic between two separate networks. The best example of a gateway within your home network is your router. This acts as a gateway between your own personal network and your broadband provider’s network.
So when you receive an alert from your Fingbox that a new gateway has appeared on your network it means that a device has become a gateway. This could be something usual (e.g. some triband routers have an interchangeable pool of addresses that change a lot), or could be coming from a device which redirects everything to itself (e.g. a hardware firewall), or could be a device that has been attached to your network that you weren’t aware is redirecting all the data.
Fingbox will alert you when it notices a new gateway so you can investigate if it is coming from a trusted or malicious source.
When a new device joins a network, then it tends to distribute traffic through itself. If you do not know what the new gateway is, check to see if a new device has recently joined your network – this most likely will be the source of the new gateway. If it is a device you do not recognize then block it straight away.
Community Manager at Fing
-Warden Anastasia Luccio, Captain
It shows the MAC of the plug. Here is the complete alert email:
Network Security Alert
Network Gateway changed to C4:95:00:19:76:0C
The network gateway changed. If it’s your new router you should set it as ‘trusted’ in the mobile app by tapping on this alert from the Network tab.
In other cases a Man In The Middle attack is occurring on your network: an unauthorized device is redirecting your device's traffic to intercept and try to steal information and sensitive data.
If the gateway has changed then Fingbox is doing its job and alerting you. Did you trust the new gateway?
Community Manager at Fing
The question is should I trust the new gateway? This seems peculiar for a smart plug. Even when I have run multiple WiFi routers in my house, I never saw similar alerts.
And if its needed for your network - then you could unblock it later.
Community Manager at Fing