Monday, July 14, 2008

Internal IP's on the internet

So when I was routerless for about a month or so when ever I booted up my computer I noticed my computer was requesting for a DHCP address and it was talking to a 10.x.x.x address. So I decided to delv a little deeper to see what was going on. I fired up ettercap to collect DHCP requests and this is what I got.
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.93.130.73] OFFER : 10.12.4.155 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219
DHCP: [10.12.0.1] ACK : 10.12.4.155 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219
DHCP: [10.93.130.73] OFFER : 10.12.42.34 255.255.0.0 GW 10.12.0.1
DHCP: [10.12.0.1] ACK : 10.12.42.34 255.255.0.0 GW 10.12.0.1
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.42.0.1] ACK : 24.181.183.57 255.255.254.0 GW 24.181.182.1 DNS 24.151.8.210
DHCP: [10.93.130.73] OFFER : 10.12.4.83 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219
DHCP: [10.12.0.1] ACK : 10.12.4.83 255.255.0.0 GW 10.12.0.1 DNS 24.151.8.219


Interesting huh? Well it gets even better. My IP wasn't even in te 24.*.*.* range.

sk0: flags=8843 metric 0 mtu 1500
options=b
ether 00:17:31:c1:d8:da
inet 96.x.x.x netmask 0xffffff00 broadcast 255.255.255.255
media: Ethernet autoselect (100baseTX )
status: active
So I searched all the IP's on ARIN and they are all owned by Charter, Newtown. So am I getting local IP's because cable broadband is just like a giant lan, I remember hearing that some but never develed to far into it.

No comments: