Community discussions

MikroTik App
 
orelcho
just joined
Topic Author
Posts: 15
Joined: Wed Nov 12, 2014 3:13 pm

Unknown MAC connect/disconnect to wireless

Fri Nov 03, 2017 4:04 pm

I have mikrotik router and I use it like home AP. I see in the log that unknown MAC address is connected and 5 seconds after that disconnected with "unicast key exchange timeout". And this repeat every ~5 minutes in 2-3 hours period per day.
What tries to do this device? How I can block it (in the log there are different MAC addresses in different days)?

Part of the log:
15:43:02 wireless,info 86:D5:AC:8B:25:3D@wlan1: connected
15:43:07 wireless,info 86:D5:AC:8B:25:3D@wlan1: disconnected, unicast key exchange timeout
15:48:23 wireless,info 86:D5:AC:8B:25:3D@wlan1: connected
15:48:28 wireless,info 86:D5:AC:8B:25:3D@wlan1: disconnected, unicast key exchange timeout
15:53:40 wireless,info 86:D5:AC:8B:25:3D@wlan1: connected
15:53:45 wireless,info 86:D5:AC:8B:25:3D@wlan1: disconnected, unicast key exchange timeout
 
p3rad0x
Long time Member
Long time Member
Posts: 606
Joined: Fri Sep 18, 2015 5:42 pm
Location: South Africa
Contact:

Re: Unknown MAC connect/disconnect to wireless

Thu Nov 09, 2017 12:08 pm

Hi,

Someone or something is trying to connect using the incorrect wpa/wpa2 key.

What you could do is add all the wifi devices you trust in the access list and disable default authentication.

Even if someone has your wifi password they wont be able to connect from an unknown device.
There you go then you touched something ;-) : it only takes a change in wind direction to screw with your nat :-)
 
orelcho
just joined
Topic Author
Posts: 15
Joined: Wed Nov 12, 2014 3:13 pm

Re: Unknown MAC connect/disconnect to wireless

Mon Nov 13, 2017 8:34 pm

What you could do is add all the wifi devices you trust in the access list and disable default authentication.
Hi!
Is access list based on the MAC address? Far as I know there are a lot of tools for scanning clients connected to a AP.
What I did to this moment:
Hide wireless network name - no effect
Rename the network - there are not unknown in the log for 2 days, but I will continue to check the log
 
p3rad0x
Long time Member
Long time Member
Posts: 606
Joined: Fri Sep 18, 2015 5:42 pm
Location: South Africa
Contact:

Re: Unknown MAC connect/disconnect to wireless

Tue Nov 14, 2017 10:14 am

What you could do is add all the wifi devices you trust in the access list and disable default authentication.
Hi!
Is access list based on the MAC address?
Its based on the mac address yes.
There you go then you touched something ;-) : it only takes a change in wind direction to screw with your nat :-)
 
BRMateus2
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Thu Oct 26, 2017 11:18 pm

Re: Unknown MAC connect/disconnect to wireless

Wed Nov 29, 2017 3:40 pm

Authentication is a must as it encrypts data; Mac spoofing is two clicks and "hacked" by a 6 year old.
 
orelcho
just joined
Topic Author
Posts: 15
Joined: Wed Nov 12, 2014 3:13 pm

Re: Unknown MAC connect/disconnect to wireless

Wed Nov 29, 2017 5:05 pm

What I did:
- Set very strong password
- Change SSID
- Hide SSID
There are no unknown MACs more

Who is online

Users browsing this forum: No registered users and 41 guests