So Betternet is something that keeps showing up on my router logs of top 5 traffic uses and im not sure why. To my knowledge its a VPN client ive tried to separate the devices in DHCP by owner to try to narrow down some ideas and capture trend data, not positive but it looks like it could be tied to iOS devices. Anyone know anything about this?
That seems like an odd thing to be popping up in your logs and it would be helpful to understand more about your home network and users. How many users, how many are adults, are any of them working from home over vpn, how many computers, what os, any iot devices, etc.
A few possible explanations:
-
You are frequenting sites that make ads target you for this service, but even in this scenario you would be seeing ad delivery domains instead of the client unless you clicked through.
-
Somebody on the network is using this service.
-
You have malware on your network that is phoning home through a vpn connection.
I don’t know what capabilities your router has but if this was on my network I’d block the domain and ip on the pihole or router and see who complains.
So Im pretty sure i know what it is now. when I blocked it I lost the ability to to use wifi calling on the iphones in the sub group. im not sure if its carrier specific but it appears to be it and would explain the service usage times too.
Reminds me of the time I couldn’t figure out what an LG device was on my home network, so I blocked it. Turns out, my wife’s Pixel 2 XL is made by LG.