[TriLUG] Why is 1.1.1.1 on my network?

[Tarus Balog]

Not a Linux question, per say, but 1.1.1.1 just showed up on my network. How do I know this? Well, we have a test to connect to port 80 on 1.1.1.1 and it should fail, but recently it started to pass (as in the last couple of days). I can't ping it, but nmap shows that it responds to every single well-known port.

It's not in my arp cache and I can't seem to figure out how to diagnose this. I went around and turned off some switches, but couldn't locate the issue (we're working so I can't turn off everything) and I even removed the broadband connection and I could still connect with "telnet 1.1.1.1 80" so I am pretty certain the issue is local. 

Since this is driving me crazy, I'll be a little more aggressive toward the end of the day, but any clues you folks could share would be welcome.

-T
_______________________________________________________________________
Tarus Balog, OpenNMS Maintainer             Main:   +1 919 533 0160
The OpenNMS Group, Inc.                     Fax:    +1 503 961 7746
Email: tarus at opennms.org                    URL: http://www.opennms.org
PGP Key Fingerprint: 8945 8521 9771 FEC9 5481  512B FECA 11D2 FD82 B45C