Quantenna used 1.1.1.1 for RPC to their wifi chip in their SDK by default. Should not have been exposed to global routing but of course people screwed that up.

https://medium.com/@mrtcve/atts-misuse-of-cloudflare-dns-ip-...