WiFi connection attempts - attack?

WiFi connection attempts - attack?

WiFi connection attempts - attack?
WiFi connection attempts - attack?
13 hours ago - last edited 13 hours ago
Tags: #Logs
Hardware Version:
Firmware Version: 6.2.0.12

hi all,

 

I found some strange entries in off-line client list since several weeks.

apparently something with random MAC tries to access my network via WiFi - traces are visible in offline client list:

offline clients

 

what is strange:

  • no IP assigned and no SSID info - apparently not associated with any WLAN
  • Network shows default network
    • and AP/Port shows the PoE ports where only my EAP615-Wall(EU) v1.0 (with FW: 1.5.4)  are connected - not APs itself

 

and what is more strange:

  • I cannot find anything in logs about the connection attempts........... 

 

please can someone explain to me what is going on and why there is nothing to find in logs?

 

/BR ZoloNN ----------------------------------------------------------------------- Omada 2x ER605(UN) v2.0 + SG2008P(UN) V3.20 + SG2218 V1.20 + 2x SG2008 V4.20 + 3x EAP615-Wall(EU) V1.0 CET (GMT+1)
  0      
  0      
#1
Options
2 Reply
Re:WiFi connection attempts - attack?
9 hours ago

  @ZoloNN 

 

Yeah I get these sometimes and I dug down.  I found it was a multicast beacon some clients were sending out.  It was coming from a few clients.  

 

Some were hand scanners, which is weird.  I had few clients with "chatty" nics, replaced the nic and it stopped.  I know this is hardwired and your issue is wireless.  

 

 

I can not teach anyone anything - I can only make them think - Socrates
  0  
  0  
#2
Options
Re:WiFi connection attempts - attack?
7 hours ago

  @ZoloNN 

 

Might be somehting trying to sniff the SSIDs, or something just consistently scanning for WiFi networks

 

 

  0  
  0  
#3
Options