D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-330 => Topic started by: import on June 27, 2009, 02:04:17 AM

Title: Unknown MAC Address: Hacker?
Post by: import on June 27, 2009, 02:04:17 AM

Hi and thank you in advanced for your assistance,

I have a basic home network. One Home PC --> Wireless Router (DIR-330) + Separate Modem.

My wireless clients consist of only two devices: PS3 and iPhone. No laptops.

My problem is, when I go into the http://192.168.0.1 page and navigate to the CONNECTED WIRELESS CLIENTS LIST, I notice an unknown MAC address which is none of my devices. In terms of security, I have WPA2 setup, MAC filtering setup and I have limited the DHCP IP range to 100-102 and I have reserved all 3 IP addresses for my two wireless devices and my PC. My MAC filtering is setup to DENY. So I took the MAC address of the unknown device (in fact, here it is: 00:1A:EF:05:8C:B5) and set it up to be denied access.

However, after all that I still manage to see the unknown MAC address connected on the CONNECTED WIRELESS CLIENTS LIST, and the weird thing is (for me anyway) it has no evident IP address since all 3 possible IP addresses are already reserved for me. It's mode is 11b.


Any suggestions as to what this may be?

Thanks!

Title: Re: Unknown MAC Address: Hacker?
Post by: Fatman on June 29, 2009, 08:47:56 AM

Well that MAC has an OUI that does not belong to any of the companies you mentioned.  According to IEEE it belongs to a company called Loopcomm, this lessens my fears you had a mistranscribed or additional MAC on one of your devices.

I would re-flash the firmware and factory reset the unit.  Disable wireless until you get everything configured, and lock it down like you have been, but with a new randomly generated 63 character WPA2 key.  Ensure you account passwords on the DIR-330 are set and secure.