A New Thing?

I’ve been out of town all week and today when i got home i noticed a new device was added while i was gone. I know it is very easy to delete the device, but i was curious if there was a way to track the device down or figure out what the device is. Also and this is way more important… I am the only user that has access to my environment, how is this possible if i’m not home? Also i don’t see a “Z-Wave include search started” or “Z-Wave include search ended” in the logs as this would indicate the add was initiated from the app.

I have already opened a support case, but due to my comfort level with is i’m also posting this to the community for help and feed back. I’m am unsure if this is a security issue or some zigbee device i forgot to add back into my my ST setup. I am hoping for the latter.

Any assistance is greatly appreciated.

Device:

Name Thing
Label
Type Unknown
Version Published
Zigbee Id 00137A000001388A
Device Network Id 165E
Status ACTIVE
Hub Condo Hub
Last Activity At 2016-02-04 5:09 AM CST
Date Created 2016-02-04 5:09 AM CST
Last Updated 2016-02-04 5:09 AM CST

Hub Logs:

2016-02-04 5:09:06.519 AM CST
2 days ago	HUB		desc	165E		desc: 02 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.448 AM CST
2 days ago	HUB		desc	165E		desc: 03 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.270 AM CST
2 days ago	HUB		desc	165E		desc: 02 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.256 AM CST
2 days ago	HUB		desc	165E		desc: 03 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.216 AM CST
2 days ago	HUB		desc	165E		desc: 02 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.212 AM CST
2 days ago	HUB		desc	165E		desc: 03 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.161 AM CST
2 days ago	HUB		desc	165E		desc: 02 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.152 AM CST
2 days ago	HUB		desc	165E		desc: 01 0104 0000 00 06 0000 0001 0003 0015 0020 0B05 01 0006
2016-02-04 5:09:06.094 AM CST
2 days ago	HUB		desc	165E		desc: 02 0104 0000 00 04 0000 0001 0003 0B05 01 0006
2016-02-04 5:09:06.023 AM CST
2 days ago	HUB		desc	165E		desc: 01 0104 0000 00 06 0000 0001 0003 0015 0020 0B05 01 0006
2016-02-04 5:09:05.975 AM CST
2 days ago	HUB		desc	165E		desc: 01 0104 0000 00 06 0000 0001 0003 0015 0020 0B05 01 0006
2016-02-04 5:09:05.930 AM CST
2 days ago	HUB		desc	165E		desc: 01 0104 0000 00 06 0000 0001 0003 0015 0020 0B05 01 0006
2016-02-04 5:09:03.955 AM CST
2 days ago	HUB		ep_cnt:3, ep:01 02 03 	ep_cnt:3, ep:01 02 03 		ep_cnt:3, ep:01 02 03
2016-02-04 5:09:03.934 AM CST
2 days ago	HUB		ep_cnt:3, ep:01 02 03 	ep_cnt:3, ep:01 02 03 		ep_cnt:3, ep:01 02 03
2016-02-04 5:09:03.884 AM CST
2 days ago	HUB		ep_cnt:3, ep:01 02 03 	ep_cnt:3, ep:01 02 03 		ep_cnt:3, ep:01 02 03
2016-02-04 5:09:03.826 AM CST
2 days ago	HUB		ep_cnt:3, ep:01 02 03 	ep_cnt:3, ep:01 02 03 		ep_cnt:3, ep:01 02 03
2016-02-04 5:09:01.984 AM CST
2 days ago	HUB		deviceAdd	deviceAdd		Thing added
2016-02-04 5:09:01.834 AM CST
2 days ago	HUB		join	join		join
2016-02-04 5:09:01.781 AM CST
2 days ago	HUB		join	join		join

Same thing happened to me a couple of months ago. Support never figured it out.

Yep! Something that has been going on sporadically for well over a year and a half. Support had no clue. Their suggestion was to delete it and hope it doesn’t happen again. It has happened 4 times to me since the beginning.

I guess SmartThings is quickly approaching the same level of self-awareness as SkyNet and will soon start exterminating humans. :scream:

5 Likes

@bago and @an39511 would you guys happen to have the details of the device that auto joined on hand still? I’m hoping there is a pattern… or actually that there is not a pattern. :wink:

ST has to get scheduling to fire consistently first, with out that the invasion will be very short :slight_smile:

3 Likes

It has been awhile but as I remember they were all light switches GE/Jasco in wall light switches. I don’t have the device details anymore.

Those logs look like a 3 button zigbee remote of some sort. Very similar to the Smartenit 3 button toggle switch.

Do you have a device similar to that one that may have reconnected itself or something?

I do! I have 2 of those and i have not reconnected them yet. I nuked my location due to me corrupting my zwave database (Not Smartthings Fault) and i totally forgot i had not added them back yet… I still don’t think they should be able to add themselves back with out me pairing them, but i’d rather that over some random device. I’ll manually add them both back and see how it goes…

THX!!!

That was exactly it, i’m adding them back now… how were you able to figure out thats what they were?

Description info matches the device fingerprint info. Take a look at line 23 of the DTH for the 3 button switch.

1 Like

What Mike said. I just noticed the endpoint/cluster pattern in the description info. Endpoints 2 and 3 in particular only had Basic, Identify and Diagnostic as In clusters with On/Off as the lone Out. That jumps out as multiple button remote. With endpoint 1 much the same but adding battery and commissioning, made me think of the only 3 button zigbee switch I know.

It’s odd, but since there isn’t an exclude process for Zigbee devices, they don’t really forget the network when they’re deleted from ST and can rejoin like this if they’re not reset. There was mention of an update for zigbee to essentially “decommission” devices upon deletion that would trigger a reset, but it’s not implemented yet.

1 Like

Sorry, I no longer have the email.