Results 1 to 8 of 8

Thread: Strange IPs nmap

  1. #1
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,459
    Thanks
    1,539
    Thanked
    1,024 times in 868 posts

    Question Strange IPs nmap

    Out of interest, I ran "nmap -sP 192.168.0.0/16" to list hosts on my network and when I checked the report, it had found IPs in the 192.168.66.x - 192.168.68.x range (and probably more but I got bored and quit the scan because I didn't realise how long it would take). I know there are no machines on my network in that range so I ran traceroute and found that they were outside of my network, but they appear to be inside VM's network. These are obviously non-routable IPs, so what are they doing on the net? Can anyone else on VM ping 192.168.66.1 for example?

  2. #2
    DILLIGAF GoNz0's Avatar
    Join Date
    Jun 2006
    Location
    Derby
    Posts
    10,872
    Thanks
    632
    Thanked
    1,192 times in 945 posts
    • GoNz0's system
      • Motherboard:
      • Asus Rampage V Extreme
      • CPU:
      • i7 something X99 based
      • Memory:
      • 16gb GSkill
      • Storage:
      • 4 SSD's + WD Red
      • Graphics card(s):
      • GTX980 Strix WC
      • PSU:
      • Enermax Galaxy 1250 (9 years and counting)
      • Case:
      • Corsair 900D
      • Operating System:
      • win10 64bit
      • Monitor(s):
      • Dell 24"
      • Internet:
      • 220mb Cable

    Re: Strange IPs nmap

    nope

  3. #3
    Splash
    Guest

    Re: Strange IPs nmap

    You ran a class B scan on a class C network - 192.168.0.0/24 is what you should be scanning.

    That said, it *is* concerning that yuo're able to detect hosts elsewhere in the VM network.

  4. #4
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,459
    Thanks
    1,539
    Thanked
    1,024 times in 868 posts

    Re: Strange IPs nmap

    I'm northwest BTW, it might just be in that network.

    I did mean to run a class B scan though, I wanted to check for IPs on more than one router, each router has a different third octet. I'm a bit of a noob with nmap though, I didn't think a 192.168.x.x scan would make it out to the internet/past my cable modem.

    The hostname for the last host that respons to traceroute starts with osr01dudl, so I assume that's in dudley.
    Last edited by watercooled; 24-04-2009 at 03:28 PM.

  5. #5
    Jay
    Jay is offline
    Gentlemen.. we're history Jay's Avatar
    Join Date
    Aug 2006
    Location
    Jita
    Posts
    8,365
    Thanks
    304
    Thanked
    568 times in 409 posts

    Re: Strange IPs nmap

    your ISP is routing 192 addresses I have had this as well, its a pain.
    □ΞVΞ□

  6. #6
    Gentoo Ricer
    Join Date
    Jan 2005
    Location
    Galway
    Posts
    11,048
    Thanks
    1,016
    Thanked
    944 times in 704 posts
    • aidanjt's system
      • Motherboard:
      • Asus Strix Z370-G
      • CPU:
      • Intel i7-8700K
      • Memory:
      • 2x8GB Corsiar LPX 3000C15
      • Storage:
      • 500GB Samsung 960 EVO
      • Graphics card(s):
      • EVGA GTX 970 SC ACX 2.0
      • PSU:
      • EVGA G3 750W
      • Case:
      • Fractal Design Define C Mini
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • Asus MG279Q
      • Internet:
      • 240mbps Virgin Cable

    Re: Strange IPs nmap

    Quote Originally Posted by watercooled View Post
    I'm northwest BTW, it might just be in that network.

    I did mean to run a class B scan though, I wanted to check for IPs on more than one router, each router has a different third octet. I'm a bit of a noob with nmap though, I didn't think a 192.168.x.x scan would make it out to the internet/past my cable modem.

    The hostname for the last host that respons to traceroute starts with osr01dudl, so I assume that's in dudley.
    You need to target specific subnets. There's a list of reserved subnets here.

    That said, your ISPs routers *really* shouldn't be routing 192.168.0.0/16 or below subnets. Your primary gateway shouldn't be doing it at the external interface either, for that matter. Both routers should be blocking reserved subnet traffic, but the onus is especially on ISPs to keep the internet clear of such a mess.
    Quote Originally Posted by Agent View Post
    ...every time Creative bring out a new card range their advertising makes it sound like they have discovered a way to insert a thousand Chuck Norris super dwarfs in your ears...

  7. #7
    Registered+
    Join Date
    Feb 2008
    Posts
    57
    Thanks
    0
    Thanked
    5 times in 5 posts

    Re: Strange IPs nmap

    Quote Originally Posted by watercooled View Post
    Out of interest, I ran "nmap -sP 192.168.0.0/16" to list hosts on my network and when I checked the report, it had found IPs in the 192.168.66.x - 192.168.68.x range (and probably more but I got bored and quit the scan because I didn't realise how long it would take). I know there are no machines on my network in that range so I ran traceroute and found that they were outside of my network, but they appear to be inside VM's network. These are obviously non-routable IPs, so what are they doing on the net? Can anyone else on VM ping 192.168.66.1 for example?
    Private ranges aren't routable across the Internet however you are on VMs network and it appears they're using that range (and no doubt a few others) for internal management of their devices so that's why you'll be able to see them - they're not on the net, they're just on the same network as your cable modem. You wouldn't normally expect customers to be able to route to that range but there may be a valid reason why you can depending on topology etc....

  8. #8
    Jay
    Jay is offline
    Gentlemen.. we're history Jay's Avatar
    Join Date
    Aug 2006
    Location
    Jita
    Posts
    8,365
    Thanks
    304
    Thanked
    568 times in 409 posts

    Re: Strange IPs nmap

    I have the same issue with Telewest Business in the N/W as well.
    □ΞVΞ□

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Multiple static IPs going to your router
    By latrosicarius in forum Networking and Broadband
    Replies: 3
    Last Post: 22-11-2008, 04:13 PM
  2. Strange email?
    By Andy3536 in forum General Discussion
    Replies: 1
    Last Post: 24-08-2008, 06:22 PM
  3. Strange Startups & Winsock Entrys After Os Reinstall! Can Someone Check This Please
    By wannabgeek in forum Help! Quick Relief From Tech Headaches
    Replies: 2
    Last Post: 09-01-2006, 01:46 AM
  4. Routed Block of IP's - help needed
    By Bruno in forum Networking and Broadband
    Replies: 2
    Last Post: 08-03-2004, 11:12 PM
  5. DG824M + Multiple Static ip's , can anyone help me ??
    By maxpowah in forum Networking and Broadband
    Replies: 0
    Last Post: 02-09-2003, 04:42 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •