ESP32 Recon / WiFi Recon Cluster
LIVE
Live Feed
Time Node SSID BSSID RSSI Ch Enc Imp
Node
Status
Total Events
Unique SSIDs
Unique BSSIDs
Avg RSSI
First Seen
Last Seen
Uptime
Free Heap
AP Signal
node → router
Recent Events
Time SSID BSSID RSSI Ch Enc Imp Conf
Client Devices note: modern devices use randomised MACs — one physical device may appear as multiple entries
MAC Vendor ⊞ Probing for ⊞ Best RSSI Avg RSSI Nodes Times Seen Last Seen
Cross-node RSSI
RSSI History
Networks
SSID BSSID Best RSSI Avg RSSI Ch Enc Times Seen Nodes Last Seen
Present Now real MACs · seen 2+ times in last hour
MACVendorBest RSSIAvg RSSI Times SeenNodesLast Seen
New Arrivals first seen in last 24h
Devices
MACVendorFirst Seen Best RSSITimes Seen
Networks
SSIDBSSIDFirst Seen Best RSSIChEnc
Regulars seen on 2+ distinct days
Devices
MACVendorDays Seen First SeenLast SeenBest RSSI
Networks
SSIDBSSIDDays Seen First SeenBest RSSICh
Most Impersonated Networks all time · APs spoofed as deauth source
BSSIDSSIDFrames Dom. ReasonUnique SrcsNodesLast Seen
Most Targeted Devices all time · actual victim devices by dst MAC
Dst MACVendorFrames Dom. ReasonNetworks UsedNodesLast Seen
Reason Code Breakdown all time · normal / suspicious / attack classification
CodeDescriptionClass FramesUnique BSSIDsUnique TargetsLast Seen
Detected Bursts ≥10 deauth/disassoc frames for same BSSID in last 5 min
BSSIDSSIDTypeFrames Unique SrcsNodesFirstLast
Recent Deauth / Disassoc Events
TimeNodeTypeSrc DstBSSIDReasonRSSI
Attack Sessions last 7 days · deauth events grouped by source MAC + 2-min gap
Source MAC Vendor Start Duration Frames BSSIDs Targets Nodes Peak RSSI Dominant Reason Severity
Deauth Activity Heatmap frame count per day × hour — pattern reveals manual vs automated activity
Manufacturers
Devices unique MACs — last 7 days
TypeMACNameVendor AddrBest RSSISeenNodesLast seen
Recent Advertisements
TimeNodeTypeMAC NameRSSIAddr