IP Address | Port | Hostname | |
---|---|---|---|
Source | 208.67.220.220 (United States) | domain (53) | resolver2.opendns.com |
Destination | 51886 |
Description:
- An A record has been returned from a DNS query in the 1.1.1.0/24 IP block. Because this space isn't routed, DNS servers should not respond with addresses in the space - see:
- In practice, this space is occasionally used, usually for temporary installation/configuration or in lab environments.
False Positive:
- YES
- DNS A query against switch.meraki.com does return 1.1.1.100, which matches this space.
- This is not malicious, however. This is defined setup behavior:
Action:
- None
Comments