Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am using a linksys router with DD-WRT firmware with a WiBro internet connection, the ISP uses a hub with multiple user connected to it. The issue is that an unidentified MAC address seems to pop up in the routers LAN with a local ip address. It does not show in the wlan area, only on the LAN.

the MAC is this 12:34:56:6C:9A:CC

so what is this.. is it a ddos attack or.....

share|improve this question
    
What devices are connected to the router? And are there any devices connected to those devices? –  Hammo Jan 14 '13 at 8:52
add comment

3 Answers

It doesn't look like a DDOS (Distributed Denial of Service) attack.

12:34:56 is an unknown OUI (Organizationally Unique Identifier)

You can understand more about this MAC address by listening on the LAN with a protocol analyzer like Wireshark.

share|improve this answer
add comment

Figure out what's on your LAN, whether it be printers, computers, cellphones, game consoles etc. If you are sure this device doesn't belong on your network, you can implement a MAC filter, which is by no means completely secure as MAC addresses can easily be spoofed, but it can work in some situations. The first half of that address looks suspiciously like a spoofed address (12:34:56:). The best thing to do as Christan mentioned is look at traffic with wireshark and see what this device is actually doing.

share|improve this answer
add comment

First figure out what all devices are connected to your wifi router and see if the mac address mentioned matches with some of those devices and if then also you are not able to figure out the device then ban the mac address from connect

share|improve this answer
1  
As this is clearly a spoofed mac, banning it wouldn't do a great deal. –  lynks Jan 15 '13 at 10:11
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.