Abnormal Traffic

Abnormal Traffic

Abnormal Traffic
Abnormal Traffic
2025-11-29 09:35:37 - last edited 2025-12-07 09:53:58
Model: Archer BE220  
Hardware Version: V1
Firmware Version: 1.1.0 Build 20250718 rel.16043(4555)

Good morning. In the Tether app, I'm concerned to note an UNKNOW in the list of connected clients, which is generating abnormal traffic every day. My router is connected to a carrier modem via WAN-LAN. My 1GB FTTH connection doesn't seem to be slowing down at all, as I still get speeds of around 900Mbps. I can't figure it out, since I can't even trace the MAC address and IP address.

Good morning. In the Tether app, I'm concerned to note an UNKNOW in the list of connected clients, which is generating abnormal traffic every day. My router is connected to a carrier modem via WAN-LAN. My 1GB FTTH connection doesn't seem to be slowing down at all, as I still get speeds of around 900Mbps. I can't figure it out, since I can't even trace the MAC address and IP address.
Can you explain, please?
Thanks

 

  1      
  1      
#1
Options
1 Accepted Solution
Re:Abnormal Traffic-Solution
2025-12-01 07:53:02 - last edited 2025-12-07 09:53:58

Hello @Gianluca28 ,

Welcome to our community.

 

Would you mind trying a hard reset for the Archer BE220? Press and hold this button for about 10 seconds until the Power LED blinks to reset the router to its factory default settings.

For the sake of insurance, it's always recommended to save a copy of the router's Backup Config file before a hard reset.

How to create and restore from a backup file on your TP-Link Router

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: △New Firmware Update for Archer BE260/Archer BE400 to Support VPN Merge, New ECO Mode, and More △Connect TP-Link Archer BE550 to Germany's DS-Lite (Dual Stack Lite) Internet via WAN △Tether KidShield Test Recruitment - Safeguarding Children's Online Experience If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
Recommended Solution
  0  
  0  
#2
Options
4 Reply
Re:Abnormal Traffic-Solution
2025-12-01 07:53:02 - last edited 2025-12-07 09:53:58

Hello @Gianluca28 ,

Welcome to our community.

 

Would you mind trying a hard reset for the Archer BE220? Press and hold this button for about 10 seconds until the Power LED blinks to reset the router to its factory default settings.

For the sake of insurance, it's always recommended to save a copy of the router's Backup Config file before a hard reset.

How to create and restore from a backup file on your TP-Link Router

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: △New Firmware Update for Archer BE260/Archer BE400 to Support VPN Merge, New ECO Mode, and More △Connect TP-Link Archer BE550 to Germany's DS-Lite (Dual Stack Lite) Internet via WAN △Tether KidShield Test Recruitment - Safeguarding Children's Online Experience If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
Recommended Solution
  0  
  0  
#2
Options
Re:Abnormal Traffic
Friday

I'm seeing something similar in Tether. In my case there are two devices, "unknow" and "network device" that are reporting many terabytes of traffic, but looking at my ISP's usage reports this doesn't seem to be true--I don't have anywhere near that amount of traffic on the days in question.

Also, though I can't find "unknow" in the list of clients, that "network device" does show up with some inconsistent metrics. It shows high traffic downloaded/uploaded in the terabyte scale, but below that it reports "total traffic usage" under 3 MB.

It looks like a glitch in the firmware or app that is reporting a consistent (and very high) amount of traffic every hour for these two clients. This is happening with an Archer BE230 (firmware 1.0.4 build 20250519 rel.47087) and the Android Tether app (version 4.12.124).

  0  
  0  
#3
Options
Re:Abnormal Traffic
Monday

Hello @mttsndrs ,

Welcome to our community.

 

Have you checked what specific models of these two devices are?

Please try different phones to log in to the Tether App for comparison. If it doesn't help, please save the backup file and App log of the router: 

How to create and restore from a backup file on your TP-Link Router

How to collect system log of Tether App

 

We recommend sending an email to local support email  with the following information:

Subject: [Forum Escalation][ID 849800]Abnormal Traffic

Forum Nickname: mttsndrs

Thread URL: https://community.tp-link.com/en/home/forum/topic/849800

Model&Version: Archer BE230-v1-1.0.4

Description:  

Any Other Relevant Information: Tether App log file, backup file. 

 

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: △New Firmware Update for Archer BE260/Archer BE400 to Support VPN Merge, New ECO Mode, and More △Connect TP-Link Archer BE550 to Germany's DS-Lite (Dual Stack Lite) Internet via WAN △Tether KidShield Test Recruitment - Safeguarding Children's Online Experience If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  1  
  1  
#4
Options
Re:Abnormal Traffic
Yesterday

Thanks @Joseph-TP, that's a good suggestion. I tested it using the Tether app on a different device (an iOS device, since I was testing with Android before) and I do see the same high traffic reported there. It started around midday on Jan 1 and continued until midnight yesterday, Jan 4. Then today that traffic disappeared, the "unknow" and the "network device" are still on the list but not reporting any significant traffic since midnight.

I have no idea what the "unknow" device is since it doesn't appear in the list of clients, but I figured out that the "network device" is a family member's iPhone--which wasn't even in the house for some of the periods of time when that traffic was being reported.

I'll go ahead and send those details to support, thanks for your help!

  1  
  1  
#5
Options