Hi All, I've just installed a Hub 3 router yesterday and my Symantec Endpoint Protection is showing blocked UDP broadcasts on port 138 from:
MAC address looks a bit contrived but I won't post it here.
The IP address looks like it is inside my network (in modem mode on my previous router it had an IP of 192.168.100.1), and this isn't the MAC of any of my devices or any I can see on the HUB Router. Is this a dummy/system MAC address and should I be worried about it? I have already set up a firewall rule to block port 138 UDP traffic, so again this suggests that this broadcast is inside the network.
Re: Strange MAC Address broadcasting on my network
the MAC address finder says it belongs to the ARRIS group, who I believe are the router manufacturers. I'm still suspecting the broadcast / port connection attempts are being generated by the router but confused as to why the mac address is nothing like the mac addresses that show up when I log on to the router to check status etc.