The issue I am facing:
I set up Pi-hole on my Raspberry Pi 3 two days ago and I noticed early this morning that Pi-hole is running for 6 clients. I find this weird because at the time my phone, laptop and TV where the only clients on my home network. I opened Pi-hole web admin and checked the Network tab and I see 2 IP addresses that are not shown in my router ARP table or it's DHCP client list. I'm worried because I don't know to who these IP addresses where leased too. I searched on Google for the MAC address in the picture and it isn't assigned to any vendor. Can anyone help me with this?
Details about my system:
Pi-hole is running on a Raspberry Pi 3, connected via Ethernet directly to my router.
What I have changed since installing Pi-hole:
I added unbound and configured unbound according to the documentation from the Pi-hole team. I also did the optional step of "Disable resolvconf for unbound (optional)"
The MAC starting with a OUI of 8A:86:CA is a locally administered MAC (as its U/L bit is set correspondingly), and therefore wouldn't be registered in any offcial OUI database.
This would suggest a MAC created either by applying MAC address randomisation or generated by some kind of virtualisation software.
The latter is less likely, since many VM providers have registered a OUI despite the fact that they assign MAC addresses locally (e.g. 00:50:56 is a VMware MAC).
The former may be applied by some smartphone OS for connections to potentially unsafe wifi networks. Usually, this behaviour is configurable.
Do you use smartphones and/or VM software in your network?
Yes, I'm using smartphones, laptops and a smart TV on the network. No VMs whatsoever.
I think it's because of one of the Samsung smartphones. I'm assuming this because all the MAC addresses of the other smartphones in the house (one LG and another iPhone) get resolved and are shown correctly in the network tab.
Thank you for the explanation, I'm going to look in the settings of the Samsung smartphone.
Ok, so I looked over the settings from the Samsung smartphone and it's as @Bucking_Horn said. Apparently there is a setting to use randomized MAC addresses when the phone connects to a network. The MAC addresses were from the phone because I have setup 2.4 Ghz and 5 Ghz networks with different SSIDs. So I think when the phone changes between networks, it changes the MAC address as well.
@jfb I didn't sent you the print screen anymore cause I sort it out.
Thank you for your help, I'm happy that it wasn't a security issue.
