1. We have moved from vBulletin to XenForo and you are viewing the site in the middle of the move. Though the functional aspect of everything is working fine, we are still working on other changes including the new design on Xenforo.
    Dismiss Notice

Internal IP's on the internet

Discussion in 'Ethical hacking' started by syrushcw, Jul 14, 2008.

  1. syrushcw

    syrushcw New Member

    So when I was routerless for about a month or so when ever I booted up my computer I noticed my computer was requesting for a DHCP address and it was talking to a 10.x.x.x address. So I decided to delv a little deeper to see what was going on. I fired up ettercap to collect DHCP requests and this is what I got.
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.93.130.73] OFFER : 10.12.4.155 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219
    DHCP: [10.12.0.1] ACK : 10.12.4.155 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219
    DHCP: [10.93.130.73] OFFER : 10.12.42.34 255.255.0.0 GW 10.12.0.1
    DHCP: [10.12.0.1] ACK : 10.12.42.34 255.255.0.0 GW 10.12.0.1
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
    DHCP: [10.93.130.73] OFFER : 10.12.4.83 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219
    DHCP: [10.12.0.1] ACK : 10.12.4.83 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219


    Interesting huh? Well it gets even better. My IP wasn't even in te 24.*.*.* range.

    sk0: flags=8843 metric 0 mtu 1500
    options=b
    ether 00:17:31:c1:d8:da
    inet 96.x.x.x netmask 0xffffff00 broadcast 255.255.255.255
    media: Ethernet autoselect (100baseTX )
    status: active
    So I searched all the IP's on ARIN and they are all owned by Charter, Newtown. So am I getting local IP's because cable broadband is just like a giant lan, I remember hearing that some but never develed to far into it.
    Can some one tell me how this works?
     
  2. GreenGrass

    GreenGrass New Member

    This some kinda Denial Of Service attack? :/
     
  3. syrushcw

    syrushcw New Member

    Nope just my computer listening not trans any packets
     
  4. syrushcw

    syrushcw New Member

    I don't want my net to go down then I'll be lonely :cryin:
    I'm just wondering how you can have private IP's on a WAN
     
  5. XXxxImmortalxxXX

    XXxxImmortalxxXX New Member

    Hello im sry this is offtopc but are you the owner of syruswow?
     
  6. syrushcw

    syrushcw New Member

    No I'm not :-/
     

Share This Page