Technical Discussion
  >> Security Related Issues


Register (or login) on our website and you will not see this ad.


  Print Thread
Standard User bignose2
(newbie) Sat 29-Sep-18 10:31:19
Print Post

1.1.1.1 showing on a wireless client list. I am 192.168.2.x


[link to this post]
 
I have a Tenda (model O3V1.0) wireless AP, 2.4ghz
I think a generic chinese unit. I think same'ish as IP-Com AP615

I am in the UK

In the wirless client list I have : 1.1.1.1 00:24:A5:14:E3:51 -71/-92dBm 7.2/39.0Mbps
60%.
Any idea's what this is.
In all my years never seen this.
My domain is 192.168.2.x
My other wireless equipment does not see this & I have lots of routers & AP's.
could this be suspicious, not being in the same range at all I guess really could not access my other devices.
Standard User camieabz
(sensei) Sat 29-Sep-18 12:35:00
Print Post

Re: 1.1.1.1 showing on a wireless client list. I am 192.168.


[re: bignose2] [link to this post]
 
1.1.1.1 is a Cloudfare DNS server (1.0.0.1 is its secondary IP)

Been using 1.1.1.1 for a couple of months. If you like, try the GRC DNS benchmark of it vs your ISP's (or other preferred) DNS server IPs.
Standard User bignose2
(newbie) Sat 29-Sep-18 14:01:02
Print Post

Re: 1.1.1.1 showing on a wireless client list. I am 192.168.


[re: camieabz] [link to this post]
 
Hi,

thanks for your reply but more interested in if it is safe that is is showing up here.

I just wondered how it has showed up as a client on my Access Point?
I have never looked at or had any interest in this ever.

thanks


Register (or login) on our website and you will not see this ad.

Standard User micksharpe
(legend) Sat 29-Sep-18 16:35:20
Print Post

Re: 1.1.1.1 showing on a wireless client list. I am 192.168.


[re: bignose2] [link to this post]
 
It looks like someone is spoofing the DNS server. It shouldn't show up in your list of attached devices, even if you use that server. I would block the associated MAC address.

'Sir, please,' she said ... 'Will you not share your wisdom with us?'
'I have no wisdom,' he told her.
'Your experiences, then?'
'They have been trivial, uninteresting, and full of error.'
Iain M. Banks -- Feersum Endjinn
Standard User ironman12345
(member) Sat 29-Sep-18 20:18:29
Print Post

Re: 1.1.1.1 showing on a wireless client list. I am 192.168.


[re: micksharpe] [link to this post]
 
In reply to a post by micksharpe:
It looks like someone is spoofing the DNS server. It shouldn't show up in your list of attached devices, even if you use that server. I would block the associated MAC address.

Agreed , Wireless is open compared to Ethernet , Block the MAC as 1.1.1.1 should not be on your list.
The above is just my opinion.
Standard User Stealthbird97
(newbie) Sun 30-Sep-18 00:23:33
Print Post

Re: 1.1.1.1 showing on a wireless client list. I am 192.168.


[re: bignose2] [link to this post]
 
I note that looking up the mac address, it is a Buffalo Inc device.
IIRC some vendors (Cisco is an example which does who ought to know better) use 1.1.1.1 for their admin interfaces.
Searching buffalo and 1.1.1.1 on google lead me to believe buffalo use 1.1.1.1 for at least some of their devices.

Out of curiosity, can you access anything if you try to connect to 1.1.1.1.

Additionally, do you have any wireless access points or wireless range extenders? Some devices use 1.1.1.1 for dhcp relay.

Edited by Stealthbird97 (Sun 30-Sep-18 00:28:22)

Standard User camieabz
(sensei) Sun 30-Sep-18 01:35:12
Print Post

Re: 1.1.1.1 showing on a wireless client list. I am 192.168.


[re: Stealthbird97] [link to this post]
 
Buffalo NAS perhaps. OP?

Edited by camieabz (Sun 30-Sep-18 01:35:23)

  Print Thread

Jump to