[TriLUG] Why is 1.1.1.1 on my network?

[Ryan Leathers]

Taurus,

Take a closer look at the host.
Can you nmap for 1.1.1.1 from other hosts on your LAN?
I bet you can't.



Tarus Balog wrote:
> Not a Linux question, per say, but 1.1.1.1 just showed up on my network. How do I know this? Well, we have a test to connect to port 80 on 1.1.1.1 and it should fail, but recently it started to pass (as in the last couple of days). I can't ping it, but nmap shows that it responds to every single well-known port.
>
> It's not in my arp cache and I can't seem to figure out how to diagnose this. I went around and turned off some switches, but couldn't locate the issue (we're working so I can't turn off everything) and I even removed the broadband connection and I could still connect with "telnet 1.1.1.1 80" so I am pretty certain the issue is local. 
>
> Since this is driving me crazy, I'll be a little more aggressive toward the end of the day, but any clues you folks could share would be welcome.
>
> -T
> _______________________________________________________________________
> Tarus Balog, OpenNMS Maintainer             Main:   +1 919 533 0160
> The OpenNMS Group, Inc.                     Fax:    +1 503 961 7746
> Email: tarus at opennms.org                    URL: http://www.opennms.org
> PGP Key Fingerprint: 8945 8521 9771 FEC9 5481  512B FECA 11D2 FD82 B45C
>
>
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>