How can I trace the following MAC addresses and find out who they are or belong to:
68:B9:D3:73:00:2F
98:E2:34:05:BD:8E
When checking my router, these MAC addresses were in the drop-down menu.
-
1Are you sure it's not just a random wireless MAC address from Windows or an iPhone? They're starting to randomize MAC addresses to try and improve user privacy.– userFeb 25, 2021 at 15:43
Add a comment
|
1 Answer
MAC addresses are only locally unique and it could be a spoofed address (if it an attack) as well. Therefore if you are referring to an attack, the best thing is to look at MAC addresses later.
If you have a chance to analyze ARP packets from your router you will be able to find the related IP addresses.
Or
If you suspect an inside attacker, you can check your ARP/RARPtable. Or block these MAC addresses using MAC filtering. Users will complain when they are not able to use the internet. Before that, make sure all critical users are not using these MAC addresses.
In addition to that, try to identify the product vendor using a MAC lookup tool to look for the devices.
But It is really hard to find your network devices if they are connecting through multiple ways.
