[TriLUG] Why is 1.1.1.1 on my network?

Matt Pusateri mpusateri at wickedtrails.com
Wed Mar 3 11:24:39 EST 2010


Try logging into your switches and pinging it from there.  Then look in your switches mac-address table and try to figure out what port it shows up on?

On Mar 3, 2010, at 11:15 AM, Tarus Balog wrote:

> Not a Linux question, per say, but 1.1.1.1 just showed up on my network. How do I know this? Well, we have a test to connect to port 80 on 1.1.1.1 and it should fail, but recently it started to pass (as in the last couple of days). I can't ping it, but nmap shows that it responds to every single well-known port.
> 
> It's not in my arp cache and I can't seem to figure out how to diagnose this. I went around and turned off some switches, but couldn't locate the issue (we're working so I can't turn off everything) and I even removed the broadband connection and I could still connect with "telnet 1.1.1.1 80" so I am pretty certain the issue is local. 
> 
> Since this is driving me crazy, I'll be a little more aggressive toward the end of the day, but any clues you folks could share would be welcome.
> 
> -T
> _______________________________________________________________________
> Tarus Balog, OpenNMS Maintainer             Main:   +1 919 533 0160
> The OpenNMS Group, Inc.                     Fax:    +1 503 961 7746
> Email: tarus at opennms.org                    URL: http://www.opennms.org
> PGP Key Fingerprint: 8945 8521 9771 FEC9 5481  512B FECA 11D2 FD82 B45C
> 
> 
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions




More information about the TriLUG mailing list