[SOLVED] Why is Moode pounding my router?

[TheOldPresbyope]

@HemiRick

Dnsmasq is using Cloudflare's DNS (1.1.1.1) to resolve ARP requests from your moOde player.

Let's take just this snippet

Code:

Sep 11 10:38:24 dnsmasq[26771]: query[A] EA7300.home.linksys.com from 192.168.1.130
...
Sep 11 10:38:24 dnsmasq[26771]: query[AAAA] EA7300.home.linksys.com from 192.168.1.130
Sep 11 10:38:24 dnsmasq[26771]: forwarded EA7300.home.linksys.com to 1.1.1.1
Sep 11 10:38:24 dnsmasq[26771]: reply EA7300.home.linksys.com is NXDOMAIN
Sep 11 10:38:24 dnsmasq[26771]: reply EA7300.home.linksys.com is NODATA-IPv6
...
Sep 11 10:38:24 dnsmasq[26771]: reply EA7300.home.linksys.com is NODATA-IPv4...

Your moOde player sends IPv4/v6 DNS requests asking the address of EA7300.home.linksys.com.
Dnsmasq on your Pi-Hole doesn't recognize the hostname and forwards it to Cloudflare's DNS (1.1.1.1). 
The reply data: 
NXDOMAIN === non-existent domain (not surprising; Cloudflare doesn't know your LAN)
NODATAIP-v4/6 === no A/AAA record on the hostname



Regards,
Kent