a mystery device connection showing in router

Topic

New Reply

[wavy]

a mystery device connection showing in router

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

• This topic was modified 7 months, 2 weeks ago by wavy.

Reply | Quote

Replies

I have used a jpg for this as something in it gets rejected by WP 😫

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

Who is your ISP? Some ISPs allow a wireless hotspot on their provided equipment that can be used publically by any passerby (they may have to have an account on that ISP, I have never allowed this on mine)

Reply | Quote

That is a device on your network as can be seen from all the other devices. Looking it up externally won’t help because it is internal.

Disable it and see what complains.

cheers, Paul

1 user thanked author for this post.

BobbyB

Reply | Quote

https://maclookup.app/search/result?mac=2a:b2:95:6e:1f:f2 shows the address isn’t assigned to any manufacturer and suggests it could be a randomized MAC.

As an example, many phones these days publish a randomized MAC address so maybe look for devices on your network that have that capability.

I’m sure you’ve already made a list of all your devices and compared it to what your router is saying.

1 user thanked author for this post.

wavy

Reply | Quote

Its fios for ISP but not using their router for routing. No hot spot.
What is the significance of the: Server: cachens3.mcleodusa.net??

NOTE this is not a constant occurrence just once I have noticed.

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

https://www.perplexity.ai/search/what-is-or-uses-cachens3-mcleo-ThcY9rIJQGWNXGAd8HawZQ says The hostname cachens3.mcleodusa.net is associated with a DNS server operated by Windstream Communications LLC

Maybe look at your DNS settings in your router?

EDIT: you could try setting your DNS to 1.1.1.1 (cloudflare), 8.8.8.8 (google) or 9.9.9.9 (quad9) temporarily and see if that makes any difference.

1 user thanked author for this post.

wavy

Reply | Quote

wavy wrote:

What is the significance of

There is none. You are attempting to look externally for an internal device.

cheers, Paul

1 user thanked author for this post.

wavy

Reply | Quote

Ok but I still wish to know how it got cachens3.mcleodusa.net, where DOES that come from? I see no relation to anything, it had to come from some place. I maybe will look into where nslookup gets that info.

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

wavy wrote:

I still wish to know how it got cachens3.mcleodusa.net

You are performing an “nslookup”. This means querying a DNS server, in your case “cachens3.mcleodusa.net”. That will probably be a server at your ISP (Windstream Communications).

If you want to know what the device is, use Advanced IP scanner.
https://www.askwoody.com/newsletter/threats-to-businesses/#networking

cheers, Paul

 

Reply | Quote

btbs wrote:

it could be a randomized MAC.

As an example, many phones these days publish a randomized MAC address so maybe look for devices on your network that have that capability.

I’m sure you’ve already made a list of all your devices and compared it to what your router is saying.

I am suspecting that but any devices I can think of here do not have DEV-6E:1F:F2 as a name likely I did something I forgot about . 🙄😣

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

wavy wrote:

Ok but I still wish to know how it got cachens3.mcleodusa.net, where DOES that come from?

What is DNS set to in your router?

Reply | Quote

nsnyny01.verizon.net nsnyny01.verizon.net
68.237.161.12 71.243.0.12

but should be over ridden by windows
209.253.113.18 and 66.28.0.45
which is cachens3.mcleodusa.net
I do not remember that name but there it is!!

Will try to find mystery dev on a fresh cup of coffee in the morn

Thanks for the help both of you

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

Ok got it now
Turns out it was a Ipad Mini6. The Ipad gives a phony MAC as its address to help prevent across network tracking.

Thanks again to all. And a Happy 🎃

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

1 user thanked author for this post.

windbg

Reply | Quote