I noticed this popping up in my Adguard Home's dashboard in the last couple of days. I don't remember seeing this prior to firmware 4.8. It also has a very high average upstream response time of 1013 Ms!
hmm, have you tried to check if it has a hostname?
With nslookup?
This could maybe give some hints if it is a device on your network, or some misconfiguration i.e a really small dhcp range.
it is a little bit weird, because 254 is the end ip, no misconfigurations on dhcp by luci?
I didn't touch luCI at all. How do I check the hostname?
nslookup 192.168.1.254
What does this do?
If the device behind that ip has a hostname, it will show this, this can hint you what device this is.
1 Like
port 53 is dns, i assume it's something related to that.
3 Likes
I don't know, to be honest with you.
This looks related to Multicast DNS ('mDNS'). There's probably a daemon like avahi or bonjour somewhere on a LAN client.
1 Like
Do you have a 2nd router or mesh device on your LAN?
He has Apple devices (read: bonjour). I bet you one updoot that's the cause.
I have my doubts that ip is bonjour, isn't bonjour using mDNS on 244.0.0.251 subnet?, it's still odd though since it is at the broadcast address but that is 255.
If I was OP i would check with tcpdump or check if I can see the hostname, it is also a different route than normal default gl ip 192.168.8.0/24 so I suspect it is the isp router ip?
1 Like
OP runs a Flint v2 & a Beryl AX IIRC. I'm pretty sure he changed the default subnet on one of 'em. The default DHCP range in GL GUI -> LAN -> DHCP Server is 192.168.n.100 to 192.168.n.249. I doubt he's bother to change that.
I'd defiantly take a quick look @ the GL GUI -> Clients page before jumping into LuCI/SSH.
2 Likes