Computer Hope

Other => Other => Topic started by: 2k_dummy on January 12, 2007, 12:12:18 PM

Title: Odd IP Address
Post by: 2k_dummy on January 12, 2007, 12:12:18 PM
Is anyone familiar with IP's that have 0. in the first trinome. Found this IP 0.24.23.250 in my router log. Not traceable or pingable. Who or what uses such IP's?
Title: Re: Odd IP Address
Post by: patio on January 12, 2007, 03:06:35 PM
DOD would be my first guess...

patio.  8-)
Title: Re: Odd IP Address
Post by: Neil on January 13, 2007, 10:59:04 AM
0.0.0.0 is that Alexander Bell's computer?
Title: Re: Odd IP Address
Post by: patio on January 13, 2007, 01:03:37 PM
Thomas Edison's.
Title: Re: Odd IP Address
Post by: Zylstra on January 13, 2007, 11:51:40 PM
Removing the zero, 24.23.250 returns as:
Quote
Registrant:
Comcast Corporation
   1500 Market Street
   Philadelphia, PA 19102
   US

   Domain Name: COMCAST.NET

   Administrative Contact:
      Administrator, Domain Registration ContactMiddleName  [email protected]
      Comcast Corporation
      1500 Market, West Tower
      Philadelphia, PA 19102
      US
      215-320-8774 fax: 215-564-0132

   Technical Contact:
      Technical Contact, Domain Reg ContactMiddleName  [email protected]
      Comcast Corporation
      1500 Market St.
      9Fl West
      Philadelphia, PA 19102
      US
      215-320-8774 fax: 215-564-0132

   Record expires on 24-Sep-2008.
   Record created on 25-Sep-1997.
   Database last updated on 14-Jan-2007 01:44:14 EST.

   Domain servers in listed order:

   ADNS.CMC.COMCAST.NET         68.87.66.172
   DNS01.JDC01.PA.COMCAST.NET   68.87.96.3
   DNS02.JDC01.PA.COMCAST.NET   68.87.96.4
--------

Comcast Cable Communications, Inc. EASTERNSHORE-1 (NET-24-16-0-0-1)
                                  24.16.0.0 - 24.23.255.255
Comcast Cable Communications, Inc. SACRAMENTO-13 (NET-24-23-0-0-1)
                                  24.23.0.0 - 24.23.63.255

  ARIN WHOIS database, last updated 2007-01-13 19:10
  Enter ? for additional hints on searching ARIN's WHOIS database.


Keeping the Zero, it shows as

Quote
Registrant information was not obtained for the target.  This could mean that there is a problem with the Whois server or that the server does not have any information on the target.

--------------
OrgName:    Internet Assigned Numbers Authority
OrgID:      IANA
Address:    4676 Admiralty Way, Suite 330
City:       Marina del Rey
StateProv:  CA
PostalCode: 90292-6695
Country:    US

NetRange:   0.0.0.0 - 0.255.255.255
CIDR:       0.0.0.0/8
NetName:    RESERVED-1
NetHandle:  NET-0-0-0-0-1
Parent:    
NetType:    IANA Special Use
Comment:    Please see RFC 3330 for additional information.
RegDate:    
Updated:    2002-10-14

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName:   Internet Corporation for Assigned Names and Number
OrgAbusePhone:  +1-310-301-5820
OrgAbuseEmail:  [email protected]

OrgTechHandle: IANA-IP-ARIN
OrgTechName:   Internet Corporation for Assigned Names and Number
OrgTechPhone:  +1-310-301-5820
OrgTechEmail:  [email protected]

  ARIN WHOIS database, last updated 2007-01-13 19:10
  Enter ? for additional hints on searching ARIN's WHOIS database.

I would say that the second report is void.

Its probably your ISP, which appears to be Comcast.

Title: Re: Odd IP Address
Post by: 2k_dummy on January 14, 2007, 05:51:23 AM
Quote
I would say that the second report is void.
 
Its probably your ISP, which appears to be Comcast.
Nope! Not my ISP. I use DSL, not cable. I will look up the RFC though.
At this point I think it IP aliasing but I'm not sure. It only shows up in the incoming log, never in the outgoing.
Title: Re: Odd IP Address
Post by: patio on January 14, 2007, 08:37:26 AM
If it's not in the outgoing chances are it is aliasing...
Title: Re: Odd IP Address
Post by: Zylstra on January 14, 2007, 12:49:13 PM
Well, the IP address without a zero may also be just the random IP of a Comcast customer as well. So who knows, perhaps its a personal server running off a Comcast ISP?
Title: Re: Odd IP Address
Post by: Rob Pomeroy on January 15, 2007, 02:49:22 PM
Quote
Who or what uses such IP's?
Script kiddies.  (Spoofed IP addresses.)