Our network engineers determined that the IP address belongs to a subnet of one our subscribers. So, in order to pin point the issue, we asked all our subscribers to shut down their listeners and we ensured that there are no open connections on openwire. However, we still continued to see this warn messages being logged, even though there are no active subscribers.
What could be an issue here? What else can be done, to pin point the issue. Even though our network team confirmed that the IP address listed in the WARN, is coming from the same subnet as one of the subscribers, we were still getting the warn, even after all subscribers are down.