NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

IrvSp's avatar
IrvSp
Master
Oct 11, 2015
Solved

R7000 Log MAC address issue, can't locate?

I keep seeing this MAC address in my e-mailed log, F0:A2:25:04:27:37, and it is NOT in my list of ALLOWED devices or ATTACHED DEVICES for the router? From the logs sent: [DHCP IP: (192.168.1.6)...
Advanced Features
Firmware
Security
TheEther's avatar
TheEther
Guru
Oct 12, 2015
Like I said, Access Control is enforced after DHCP. And DHCP occurs after the Wi-Fi paraphrase is accepted. Ergo, that rogue device either has the correct paraphrase or it's plugged in via Ethernet.

I'm glad you finally decided to change your paraphrase. That's what I originally suggested.
IrvSp's avatar
IrvSp
Master
Oct 12, 2015

Changed them but I'm wondering if it could be the USB drive attached to the Router? I use it as a Media Server (DLNA). However that has a different MAC address, c4:04:15:29:8f:3d, and I've never seen that in the log? The drive 'share' doesn't have a MAC address though.

 

Test will be tomorrow morning I guess?

 

Just discovered a Kindle that was sleeping...

 

Also I just looked at the log, IT IS HERE somewhere?

 

[Admin login] from source 192.168.1.30, Monday, Oct 12,2015 12:00:06
[WLAN access rejected: incorrect security] from MAC 2C:44:FD:61:46:24, Monday, Oct 12,2015 12:00:06
[WLAN access rejected: incorrect security] from MAC 10:AE:60:57:25:06, Monday, Oct 12,2015 12:00:05
[WLAN access rejected: incorrect security] from MAC 78:AC:C0:5C:FC:B8, Monday, Oct 12,2015 12:00:05
[WLAN access rejected: incorrect security] from MAC F0:A2:25:04:27:37, Monday, Oct 12,2015 12:00:05
[WLAN access rejected: incorrect security] from MAC 2C:44:FD:61:46:24, Monday, Oct 12,2015 12:00:05
[WLAN access rejected: incorrect security] from MAC 10:AE:60:57:25:06, Monday, Oct 12,2015 12:00:04
[WLAN access rejected: incorrect security] from MAC 78:AC:C0:5C:FC:B8, Monday, Oct 12,2015 12:00:04
[WLAN access rejected: incorrect security] from MAC F0:A2:25:04:27:37, Monday, Oct 12,2015 12:00:04
[WLAN access rejected: incorrect security] from MAC 2C:44:FD:61:46:24, Monday, Oct 12,2015 12:00:04

 

Now as I change the passphrase to allow devices to connect I should be able to determine WHO it is?

 

Yeah, it was the Kindle... sheesh:

 

 

Capture.JPG

 

Allowed it and it connected...

 

[DHCP IP: (192.168.1.6)] to MAC address F0:A2:25:04:27:37, Monday, Oct 12,2015 12:12:47

 

Who knew?