is this packet injection?

RouterOS Wireless Networking
1

From yesterday I see almost only this in logs


16:40:40 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:40 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:42 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:42 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:42 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:42 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:42 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:44 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:44 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:44 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:44 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:44 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:46 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:46 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:46 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:46 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:46 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:46 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:48 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:48 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:48 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:48 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:48 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:48 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:50 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:50 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:50 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:50 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:50 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:50 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:52 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:54 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:54 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:54 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:54 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:54 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:56 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:56 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:56 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:56 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:56 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth 
16:40:56 wireless,info wlan2: data from unknown device 00:90:CC:9F:69:9F, sent deauth

I’m guessing that this is a packet injection, can anyone confirm this?

2

Weird post

give more info

3

wlan2 had wpa1 authentication enabled
Those two macs doesn’t exist in local ACL, the even don’t exist in whole network.
its quiet wired because that macs tried to communicate with AP all the time
more than 10 times per second AP had to send deauth package.
Even if I add them to ACL they don’t try to exchange keys with AP.

Everything starts when we move one of our clients from wlan1 to wlan2 where is working pppoe server.
wlan1 was previous an open network (only ACL defend from unauthorized access).

4

Your photo is not showing

5

@normis

Can you see the picture normis?
hotlink.gif

6

forgive me that, i already edit first post and put log in clear text

7

Here are the results of your search through the public section of the IEEE Standards OUI database report for 00-90-CC:

00-90-CC (hex) Planex Communications
0090CC (base 16) Planex Communications
2F FENISSAY Ebisu Bldg
3-16-3 Higashi,
Shibuya-ku, Tokyo 150-0011
JAPAN

http://standards.ieee.org/develop/regauth/oui/public.html

8

yep, customer that we had to move from wlan1 to wlan2 uses before planex router witch external antenna attached via rpsma , we change this archaic setup and now it is excellent MikroTik cpe sxt lite2 :smiley:

I supposed that someone uses old planex mac address to connect with protected ssid