Hello, This is desktop version downloaded from Ubuntu web site https://ubuntu.com/desktop. It's deployed on my laptop without virtualisation.
Entry is on new image I downloaded and it's used for reinstallation of my system. After system is downloaded and reinstalled I spot the suspicious file. If you need more info please let me know. Best regards, Alen -------- Original Message -------- On Friday, 10/02/26 at 17:00 Heinrich Schuchardt <[email protected]> wrote: Hello Alen, Could you, please, indicate if you installed a server image or a desktop image? Was the entry on the installed system or on the system where you did the download? Was the target system a virtual machine? The artifact might be from cloud init which on VMs looks for initialzation data from predefined addresses. Best regards Heinrich -- You received this bug notification because you are subscribed to the bug report. https://bugs.launchpad.net/bugs/2169298 Title: Strange hiden config file with private ip address as dns server Status in dnsmasq package in Ubuntu: New Bug description: This issue is having multiple stages. First stage is where tor browser blocked ubuntu.com from downloading some suspicious file in the same time when Ubuntu 26.04.1 LTS iso file downloading is initiated. After download is done, hash signature verification was successful. After installation, suspicious hidden file is found at location /etc/.resolv.conf.systemd-resolved.bak. File is including dns records which are pointing to private ip addresses: nameserver 10.131.53.11, nameserver 10.131.53.12, nameserver 10.131.53.13 and domain search ppa openstack.prodstack5.lan. These ip addresses are not some kind of loopback ip addresses like 127.0.0.53:53 which are known as part of dns configuration. I wasn't able to find this file in available Ubuntu documentation. ProblemType: Bug DistroRelease: Ubuntu 26.04 Package: dnsmasq (not installed) ProcVersionSignature: Ubuntu 7.0.0-38.38-generic 7.0.14 Uname: Linux 7.0.0-38-generic x86_64 ApportVersion: 2.34.1-0ubuntu0.1 Architecture: amd64 CasperMD5CheckResult: pass CurrentDesktop: ubuntu:GNOME Date: Fri Oct 2 15:32:18 2026 InstallationDate: Installed on 2026-09-30 (2 days ago) InstallationMedia: Ubuntu 26.04.1 LTS "Resolute Raccoon" - Release amd64 (20260826) ProcEnviron: LANG=en_US.UTF-8 PATH=(custom, no username) SHELL=/bin/bash XDG_RUNTIME_DIR=<set> SourcePackage: dnsmasq UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/2169298/+subscriptions -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2169298 Title: Strange hiden config file with private ip address as dns server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/2169298/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
