[TriLUG] Why is 1.1.1.1 on my network?

[Scott Lambdin]

If it is not in your arp cache, then I guess it must be routed?  Traceroute?

On Wed, Mar 3, 2010 at 11:15 AM, Tarus Balog <tarus at opennms.org> wrote:

> Not a Linux question, per say, but 1.1.1.1 just showed up on my network.
> How do I know this? Well, we have a test to connect to port 80 on 1.1.1.1
> and it should fail, but recently it started to pass (as in the last couple
> of days). I can't ping it, but nmap shows that it responds to every single
> well-known port.
>
> It's not in my arp cache and I can't seem to figure out how to diagnose
> this. I went around and turned off some switches, but couldn't locate the
> issue (we're working so I can't turn off everything) and I even removed the
> broadband connection and I could still connect with "telnet 1.1.1.1 80" so I
> am pretty certain the issue is local.
>
> Since this is driving me crazy, I'll be a little more aggressive toward the
> end of the day, but any clues you folks could share would be welcome.
>
> -T
> _______________________________________________________________________
> Tarus Balog, OpenNMS Maintainer             Main:   +1 919 533 0160
> The OpenNMS Group, Inc.                     Fax:    +1 503 961 7746
> Email: tarus at opennms.org                    URL: http://www.opennms.org
> PGP Key Fingerprint: 8945 8521 9771 FEC9 5481  512B FECA 11D2 FD82 B45C
>
>
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>



-- 
There's a box?