Found an Unknown "Tencent" Device on Your Network?
A device showing the vendor Shenzhen Tencent Computer System — or a hostname in the tencent-plus-five-digits form, such as tencent32296, tencent25021, or tencent49642 — means its network hardware or software is registered to Tencent, the Chinese company behind WeChat, QQ, and many mobile games. In practice it is almost always a phone, tablet, or smart-home gadget that you or someone in your household owns, running a Tencent app or using a Tencent-made network component. It is not, by itself, a sign of a hack. Below is how to confirm exactly which device it is — and what to do if you cannot account for it.
What "Shenzhen Tencent Computer System" actually means
Every MAC address begins with a block that the IEEE assigns to the organisation that registered it — the OUI, or Organizationally Unique Identifier. Shenzhen Tencent Computer System Co., Ltd. holds three of these blocks, together covering roughly 34.6 million possible addresses, so any MAC that starts with one of Tencent's prefixes was handed out from that pool.
The important nuance: the MAC vendor tells you who registered the network block — not always the brand on the box. A network chip or module made for Tencent, or Tencent software that sets the device's name, can sit inside a product sold under a completely different name. Contract manufacturers and chip suppliers routinely appear in MAC lookups this way, which is why the registered vendor and the retail brand do not always match.
One detail you may see elsewhere but will not see asserted here: a specific registration year. The IEEE's public OUI data lists only the registry, the assignment, and the organisation's name and address — no registration date. The "date registered" values some lookup sites show (2013, 2015, 2018 and so on) are artifacts of those third-party databases, not facts published by the IEEE, so we do not repeat them as though they were.
What a "Tencent" device usually is
Because Tencent is first and foremost a software and internet company, a "Tencent" device on your network is most often one of three things:
- A phone or tablet running Tencent apps such as WeChat, QQ, or one of Tencent's games — the app or the operating system can report a Tencent-derived identity.
- A smart-home or IoT gadget that you set up through a Tencent-linked app or account, such as a smart speaker, voice assistant, plug, or similar connected device.
- A device that uses a Tencent-made network component or firmware, even if it is sold under another brand.
The hostname you are seeing — something like tencent32296 or tencent-1a2b3c — is generated automatically by that software or firmware. The trailing number or hex string is just an identifier that keeps device names unique on the network; it is not a serial number you need to decode, and it is not a sign of anything malicious. A recognisable vendor name like this is far more typical of an ordinary consumer device than of an intruder.
The most common form by far is tencent followed by five digits. The digits differ on every device, so tencent15802, tencent38346, tencent41960, tencent62746 and tencent72153 are all the same kind of entry as tencent32296 — there is nothing to read into a particular number, and a different number does not mean a different kind of device. Whichever one your router is showing, the steps below identify it the same way.
How to identify the actual device
This is the part that answers "which of my things is it?"
- Open your router's admin page in a browser — usually
192.168.1.1,192.168.0.1, or10.0.0.1— and find the list called Attached Devices, DHCP Clients, or Device List. - For the entry in question, note three things: the full MAC address, the IP address, and the hostname.
- Look up the full MAC address in our MAC Address Lookup tool to confirm the vendor block and rule out a typo.
- Match it against the devices you own — phones, tablets, TVs and streaming boxes, speakers, smart plugs, cameras, robot vacuums, even a CPAP machine or a car's Wi-Fi.
- Still unsure? Use a network scanner such as the Fing app, or run
arp -a(or nmap) from a computer for more detail — or simply turn off or unplug your devices one at a time and refresh the router list to see which one disappears. That last trick is the most reliable way to pin down a stubborn entry.
Is a Tencent device a security risk?
In most cases, no. If your Wi-Fi has a password, uses WPA2 or WPA3 encryption, and has WPS turned off, it is very unlikely that a stranger is on your network — the device is almost certainly one you or a guest brought in.
Two honest caveats are worth knowing:
- A name in the list is not always a device that is actually connected. Some routers also show devices that merely tried to join and failed the handshake — those never received an IP address. If the entry has no IP, it may never have gotten onto your network at all.
- MAC addresses can be spoofed. The vendor portion can be copied or faked, so if you have a genuine concern, watch what the device actually does (its traffic, data usage, and the hours it is active) rather than trusting the name alone.
How to block or remove it
If you have worked through the steps above and still cannot account for the device, here is how to remove it and tighten things up:
- Change your Wi-Fi password. This is the single most reliable step — it forces every device to reconnect, and anything you do not re-authorise simply falls off.
- Confirm WPA2 or WPA3 is on and WPS is off. WPS is a common weak point; turning it off closes an easy door.
- Optionally block the MAC in your router's device list. Keep in mind MAC filtering is a weak control on its own — because MACs can be spoofed — so treat it as a convenience, not as real security.
- Rename the device in your router once you have identified it, so you recognise it next time instead of re-investigating.
Assignments by IEEE.
Registry & source data.
- IEEE assignment
- 3 prefixes → Shenzhen Tencent Computer System Co., Ltd. [Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry (the IEEE MA-L registry lines 18850, 34681; the IEEE MA-M registry line 3123)
- Registry / block sizes
- two MA-L (24-bit) blocks + one MA-M (28-bit) block; combined ~34.6M addresses [Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry. NOTE: IEEE's public OUI data publishes NO assignment/registration date (columns are only Registry, Assignment, Organization Name, Organization Address); the "date registered" values (2013-09-22, 2015-11-17, 2018-06-14) on third-party tools are database artifacts, not IEEE facts.[Confirmed] — maclookup.app (https://maclookup.app/vendors/shenzhen-tencent-computer-system-co-ltd)
- HQ / country
- two registry addresses for the same entity — 36/F, Tencent Building, Kejizhongyi Avenue, Hi-Tech Park, Shenzhen, Guangdong 518057, CN (1C:78:39); and 5-10 Building High-tech Zone, Nanshan District, Shenzhen, Guangdong 518057, CN (20:90:6F and the MA-M block)[Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry; corroborated maclookup.app
- Country
- CN (China) [Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry
- Company status
- active (operating subsidiary of Tencent) [Confirmed] — tencent.com
- Verified prefixes
- 1C:78:39 (MA-L), 20:90:6F (MA-L), 30:09:F9:A (MA-M) [Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry; corroborated maclookup.app, udger.com
- MA-S assignment
- none found [Confirmed] — IEEE the IEEE MA-S registry (no Tencent MA-S row present)
- Device types
- no source maps a specific prefix to a specific product; plausible categories from Tencent's connected-hardware lines are smart speakers (Tencent Jingle / Tingting, Xiaowei voice assistant), TencentOS-tiny IoT endpoints, and AIoT 2.0 cloud-connected devices[Likely] — yicaiglobal.com, syncedreview (medium.com), github.com/Tencent/TencentOS-tiny, prnewswire.com (Tencent Cloud AIoT 2.0)
- Notable products
- WeChat-adjacent consumer/IoT hardware; Tencent Cloud IoT Hub provisioning [Likely] — tencentcloud.com/products/iothub
- IANA reference
- not applicable — OUI registration is an IEEE RA function, not IANA; no IANA RFC reference exists for this vendor entry [Confirmed] — (registry convention; IANA does not assign OUIs)
- Security / trust note
- Tencent is NOT on NDAA Section 889 / banned-vendor lists (those cover Huawei, Hikvision, Dahua, ZTE, Hytera); no CVE or CISA advisory targets Tencent network hardware bearing these OUIs. The documented surveillance concern is platform-level (WeChat), not OUI-level hardware. Tencent falls within Forescout's broad "Chinese-address IEEE OUI vendors" population (~5,070 vendors) but is not individually singled out.[Confirmed] — phosphorus.io, qz.com (WeChat surveillance), forescout.com, cvedetails.com (software CVEs, not OUI hardware)
- Analyst note
- MAC OUI values are trivially spoofable, so a Tencent OUI on a network does not reliably confirm genuine Tencent hardware; treat OUI alone as a hint, not proof, for asset classification or access control. [Confirmed] — general MAC/OUI property; phosphorus.io
Frequently asked questions
Is a Tencent device on my network dangerous?
Usually not. It's typically a phone or smart-home device running Tencent software. Identify which of your devices it is before assuming anything is wrong.
Why does my network show a device named tencent32296 (or similar)?
That's an auto-generated hostname set by Tencent software or firmware on the device. The number is just an identifier, not a warning sign.
What MAC address prefixes does Tencent use?
Shenzhen Tencent Computer System holds three IEEE-registered blocks: 1C:78:39 and 20:90:6F (both MA-L) and 30:09:F9 (MA-M). A device whose MAC address starts with one of these was assigned from a Tencent-registered block — though, as above, the vendor block identifies who registered the address, not always the device's retail brand.
How do I find which device has the Tencent MAC address?
Check your router's device list for the matching MAC, then match it to your gear — or turn devices off one at a time until it disappears from the list.
Can I block the Tencent device?
Yes. The most reliable way is to change your Wi-Fi password so every device must reconnect; you can also block the MAC in your router, keeping in mind MAC filtering is a weak control by itself.
Does a Tencent MAC address mean I have spyware?
No. The MAC vendor only identifies the company that registered the network block — it says nothing about malware.