Problems with certain 1.1.1.XXX IP adresses

epooloope · November 26, 2022, 2:59pm

Hello,

Since I have changed my Internet provider, I have been facing issues.
My ISP said they didn’t know the reason for my issues and forwarded me here to ask…
Maybe someone from Cloudflare can tell me what’s wrong

My Problem:
My Internet is always present, though on specific Cloudflare IPs no connection is established.

Mostly get these errors:
Error 1001
Error 1034
ERR SSL VERSION OR CIPHER MISMATC

What I tried to fix the problem
• Change DNS
– Google: 8.8.8.8 / 8.8.4.4
– Cloudflare: 1.1.1.1 / 1.0.0.1
– AdGuard: 94.140.14.14 / 94.140.15.15
– Quad9: 9.9.9.9 / 149.112.112.112
• Router Reset
• PC Reset
• Use Laptop
• Use Linux
• ipv6 to ipv4 tunnelling
• Change ip Range in Local Network
• Use VPN → Surfshark & NordVPN (Fixes Problem)
• 5GHz Wifi limiting to Chanel 36
• Dualstack on and off

Some sites where I had the Problem:
www.discord.com
www.github.com
www.digikey.com
www.nitrado.de
www.minecraft.net
www.stickmaschienen-kaufen.de

I have run “tracert” every time I was having that problem.
I’ve gathered the IPs, which were problematic.

• 1.1.1.175
• 1.1.1.199
• 1.1.1.25
• 1.1.1.89
• 1.1.1.56
• 1.1.1.17
• 1.1.1.77
• 162.159.138.232
• 185.107.56.59
• 162.159.136.232
• 1.1.1.55
• 1.1.1.73
• 1.1.1.23
• 1.1.1.91
• 1.1.1.40
• 1.1.1.108
• 1.1.1.6
• 1.1.1.72
• 1.1.1.90

I hope someone can guide me into the right direction.
Thanks for your time and thank you !

soldier_21 · November 26, 2022, 4:17pm

I don’t understand what you’re expecting to happen when you “connect” to all those 1.1.1.x IP addresses… Those 1.1.1.0/24 ones you’ve listed aren’t being used for anything as far as i’m aware.

As for the others I think you’ll have to be a bit more specific in order to further diagnose, i.e. provide the site, the error, and time, and show the output of https://1.1.1.1/help

epooloope · November 27, 2022, 1:17pm

Thanks for the reply,

I should elaborate:
I do not actively access those 1.1.1.XXX addresses, they are used by the website I want to access.

For example, I try to access GitHub. The site won’t load. It spits me the above-mentioned SSL Error
When this happens, I run a tracert in CMD.
The IP shown, is in most cases the 1.1.1.XXX IP

Here an example:

darelyaron · November 27, 2022, 1:24pm

A very strange situation, I tried to trace from 2 different locations, and I got the same result.

Resolve IP - 140.82.121.3

soldier_21 · November 27, 2022, 1:33pm

github.com certainly does not resolve to 1.1.1.73, the DNS server that your computer is configured to use (could also be your router) is giving you bogus DNS results.

I suggest you configure your computer to use a different DNS server like 1.1.1.1 (instructions here https://1.1.1.1/dns/)

darelyaron · November 27, 2022, 1:45pm

Maybe check the hosts file?

C:\Windows\System32\drivers\etc

epooloope · November 27, 2022, 2:36pm

That was also my first thought. I already tried that on my PC (the first post) also with various DNS Servers. But only with the ipv4 DNS

10 min ago I changed my DNS of my Router, but this time with ipv4 and ipv6.
I still have the issues

epooloope · November 27, 2022, 2:39pm

Thanks for also running a Test !

This hosts file is completely new to me.
The document was completely commented out.

What should I look for in that document and directory ?

soldier_21 · November 27, 2022, 2:50pm

I see you’re on Windows, have you tried running ipconfig /flushdns in Command prompt after changing your DNS server?

If so, could you please show the output of nslookup github.com 1.1.1.1

epooloope · November 27, 2022, 3:19pm

Since this Problem does not always occur, I had to restart my PC to reproduce that error.

I ran your ipconfig /flushdns before and after the restart.

The first image is my CMD where I ran

ipconfig /flushdns
nslookup github.com 1.1.1.1
tracert www.github.com

The second Image is the error I get when trying to access www.GitHub.com

soldier_21 · November 27, 2022, 3:28pm

Okay, by the looks of it your device is still defaulting to either your ISP’s DNS or your router’s DNS configuration. When you ran nslookup github.com 1.1.1.1 it tells nslookup to use the 1.1.1.1 DNS service, and it returned a correct IP address for github.com

So the reason you are seeing that error in your browser is likely because it is trying to connect to the bogus IP address

cscharff · November 27, 2022, 3:43pm

If you’re trying to connect to www you should do an nslookup for the same: nslookup www.github.com 1.1.1.1

epooloope · November 27, 2022, 9:24pm

Ahh, now that I think about it, it is obvious.
I didn’t think about it that they resolve to different IPs. Thanks for the info!

Sadly, I could not reproduce that error for GitHub, so I can gather more data.
Hopefully tomorrow

The only error I did encounter was for www.Discord.com:

Could it be, that the 1.1.1.80 address, “wants” to resolve itself to multiple IPs? And for that reason can’t forward me to a specific one ?

cscharff · November 27, 2022, 9:36pm

Whatever you machine’s default resolver is returned an answer different from 1.1.1.1 and that answer is incorrect. You will need to figure out what your machine is using for DNS resolution and why it is returning incorrect results.

system · December 12, 2022, 9:37pm

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.