Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unknown Android Device

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 6 Posters 1.3k Views 6 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S Offline
      stephenw10 Netgate Administrator
      last edited by

      That's just the hostname whatever it is reports. Android does use a naming scheme like that but it could be anything with a spoofed name.

      Check the MAC address, what is the OUI? That too could be spoofed of course.

      Install the nmap package run it against that host.

      Change your wifi passphrase if you're in any doubt.

      Steve

      1 Reply Last reply Reply Quote 0
      • NollipfSenseN Offline
        NollipfSense
        last edited by NollipfSense

        He could renew the lease to see whether the device appears and got a new IP...

        pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
        pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ Offline
          JKnott @NollipfSense
          last edited by

          @NollipfSense

          It should normally get the same address.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          NollipfSenseN 1 Reply Last reply Reply Quote 0
          • NollipfSenseN Offline
            NollipfSense @JKnott
            last edited by NollipfSense

            @JKnott I realized that...maybe I should have said the device accepts IP however at least he would be able to know whether the device is active and powered.

            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

            1 Reply Last reply Reply Quote 0
            • S Offline
              slimypizza
              last edited by

              Thanks all. I did check the MAC, renewed the lease (before I gave it a static IP) and began taking devices offline to narrow down what this could be. Then….. I discovered a wifi picture frame my daughter had gotten and set up on the network. That was it. I’m not happy that it communicates to China with such frequency but will leave it be for now. Thanks for the feedback.

              JKnottJ NollipfSenseN 2 Replies Last reply Reply Quote 0
              • stephenw10S Offline
                stephenw10 Netgate Administrator
                last edited by

                Mmm, worrying. 😬

                1 Reply Last reply Reply Quote 0
                • GertjanG Offline
                  Gertjan
                  last edited by

                  This DHCP server option :

                  ebab6b29-8c58-4e17-869e-a7aa6d61bb24-image.png

                  might help you.
                  When you give away your Wifi password, "people" can connect any device they want.

                  True, if the device permits a static IP / DNS / network / gateway setup, it could still communicate. Only firewall rules per device would really help = protect you.

                  Btw : connected devices nearly always 'call home'. Often, it's just the time and possible updates. Some times it's more. Before even buying stuff like this, you should 'Google them up' first.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 0
                  • JKnottJ Offline
                    JKnott @slimypizza
                    last edited by

                    @slimypizza said in Unknown Android Device:

                    I’m not happy that it communicates to China

                    Maybe it's spying on you! 😉

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • NollipfSenseN Offline
                      NollipfSense @slimypizza
                      last edited by

                      @slimypizza said in Unknown Android Device:

                      I’m not happy that it communicates to China with such frequency

                      This below...almost always it just checking for firmware upgrade!

                      @Gertjan said in Unknown Android Device:

                      Btw : connected devices nearly always 'call home'. Often

                      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                      1 Reply Last reply Reply Quote 0
                      • S Offline
                        slimypizza
                        last edited by

                        Yes, probably spying on the whole family. HA! The frequency of interaction is about every 20 seconds. Seems excessive but the picture frame also allows for emailed photos and is probably checking for deliveries. Outbound communication only, it seems. No worries. Thank you all.

                        1 Reply Last reply Reply Quote 0
                        • P Offline
                          Pandame43
                          last edited by

                          The device must have came from those who has access to your LAN...either household or guest. I even believe your Alexa uses Android. For sure, pfSense has NOTHING to do with this issue.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.