An apparatus configured to detect one or more mobile networking devices, nodes, apparatus, etc. within a given area, wherein if the concentration of the mobile networking devices exceeds a predefined threshold in the area, the area is labeled as a mobile networking device concentration area. Subsequently detected networking devices within the predefined area may then be flagged for closer examination and / or more readily labeled as a mobile networking device.