AppleTV presents multiple MAC addresses, sends packets to non-existent local IPs
Monitoring our AppleTV on our router, I've noticed two odd things with it (connected only via WiFi):
- The AppleTV will present three different MAC addresses to DHCP to get IP addresses. I think this is the AppleTV as the HomeKit controller grabbing IP addresses for a pair of connected HomePods, but am not sure. One MAC is the one you see from within the AppleTV menus, the other two are apparently randomly generated and are not the same from reboot to reboot.
- The AppleTV is sending a couple of packets per minute to local (non-routable) IP addresses that do not and have never been on our LAN:
10.0.0.135
192.168.0.148
192.168.99.177
192.168.99.185
192.168.99.200
They are TCP to port 7000, which I understand to be involved with Airplay. But, again, those have never been legitimate subnets for us and our AppleTV was brand new and never used on any other network. (There's the possibility that the 192.168.0.148 IP was from the initial setup of our network -- a couple of years ago now -- when the router might've defaulted to the 192.168.0 subnet. But not the others.)
Apple TV 4K, tvOS 16