How can I trace the following MAC addresses and find out who they are or belong to:


When checking my router, these MAC addresses were in the drop-down menu.

  • 1
    Are you sure it's not just a random wireless MAC address from Windows or an iPhone? They're starting to randomize MAC addresses to try and improve user privacy.
    – user
    Feb 25, 2021 at 15:43

1 Answer 1


MAC addresses are only locally unique and it could be a spoofed address (if it an attack) as well. Therefore if you are referring to an attack, the best thing is to look at MAC addresses later.

If you have a chance to analyze ARP packets from your router you will be able to find the related IP addresses.


If you suspect an inside attacker, you can check your ARP/RARPtable. Or block these MAC addresses using MAC filtering. Users will complain when they are not able to use the internet. Before that, make sure all critical users are not using these MAC addresses.

In addition to that, try to identify the product vendor using a MAC lookup tool to look for the devices.

But It is really hard to find your network devices if they are connecting through multiple ways.

  • If the router is seeing the MACs, then it is local.
    – schroeder
    Feb 25, 2021 at 16:33
  • @schroeder Thanks, It was not in mind....
    – Infra
    Feb 26, 2021 at 3:48

Not the answer you're looking for? Browse other questions tagged .