Weird MAC lease and active connections (ASUS RT)

  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

Natow

New Around Here
I upgraded my ASUS RT-N66U to a ASUS RT-AC87U one or two years ago when Merlin stopped releasing updates (I run Merlin firmwares, the old RT runs as an access point now).
During this time there's been something that bother me.

I run a manual DHCP assigning all MAC adresses to IP's manually (I have about 60 devices).
I only have one spare IP (minimum) for new devices.
I do not run any VPN, however I have a NAS and home automation system.

However, there is one MAC that lease a IP (in the picture it is 192.168.0.251) and I can't seem to find that device anywhere.
Looking at the connections, it access some IP:s held by Google, Facebook and similar.

Can anyone help me get to the bottom what this MAC-device is? Unless the MAC is spoofed, it originates from Motorola/Lenovo but the only Motorola/Lenovo devices I have are some Androids not active.
I neither want Google nor Facebook snooping around in my home network and this is driving me insane :)

Are there any secure tools for figuring this out?
 
Last edited:

ColinTaylor

Part of the Furniture
... but the only Motorola/Lenovo devices I have are some Androids not active.
I'd suggest that you check those devices because port 5228 is the Android Market, so I'd say that's what it is.
 

Natow

New Around Here
Good find.
But I think it's odd they add another IP to the router?
Why won't they run through it's own assigned IP? Does Android cellulars run a lightweight DHCP?
 

ColinTaylor

Part of the Furniture
But I think it's odd they add another IP to the router?
Why won't they run through it's own ashigned IP? Does Android cellulars run a lightweight DHCP?
Sorry, I don't understand what you're trying to say. Are you saying that you already have a DHCP reservation created for this Android device with a different IP address?
 

Natow

New Around Here
Yup, I have two Motorola devices, both have a DHCP reservation created manually.
I have disabled both right now and haven't seen the "weird IP" since but it useally takes 10-20 minutes until it gets back.
If it does not come back, I will switch on wifi for the devices one at a time and see if one (or both) have two IP's connecting to 5528.
 

Natow

New Around Here
Always set to fixed. But by some reason, the MAC have probably been toggled from unfixed to fixed so a new fixed one were set.
I really don't like those software MAC:s. There should be a law or something for hardware MAC:s, haha..
Problem solved :)
 
Similar threads
Thread starter Title Forum Replies Date
K SMB Issue with Mac Routers 4

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top