<p dir="ltr">So Vodafone run a 10/8 network in their internodal network between the bng and before it goes out to the imterwebs.</p>
<p dir="ltr">No major surprises there as real ips address space is expensive and no one wants to waste any of it.. hence why .0 .1 .254 and .255 can be used more and more over ppp links.</p>
<p dir="ltr">It doesn't surprise me at all.</p>
<div class="gmail_quote">On 25/09/2014 6:04 PM, "Christian Gagneraud" <<a href="mailto:chgans@gna.org">chgans@gna.org</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi there,<br>
<br>
I was having network problems on our local network, while troubleshooting I realise that from here I can access lot of address belonging to the (theoretically not routed) private network <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a><br>
<br>
And I even found that such an address was on my route to my preferred French site:<br>
<br>
$ traceroute <a href="http://linuxfr.org" target="_blank">linuxfr.org</a><br>
traceroute to <a href="http://linuxfr.org" target="_blank">linuxfr.org</a> (88.191.250.176), 30 hops max, 60 byte packets<br>
1 10.64.40.2 (10.64.40.2) 0.758 ms 1.031 ms 1.295 ms<br>
^^^^^^^^^^<-local network<br>
2 <a href="http://smtp.canplay.org.nz" target="_blank">smtp.canplay.org.nz</a> (203.173.160.254) 23.084 ms 24.017 ms 24.948 ms<br>
3 gi0-2-0-3.ppnzwtc01.wlg.vf.<u></u>net.nz.180.109.203.in-addr.<u></u>arpa (203.109.180.210) 26.467 ms 27.429 ms 28.389 ms<br>
4 <a href="http://gi0-2-0-3.ppnzwtc02.wlg.vf.net.nz" target="_blank">gi0-2-0-3.ppnzwtc02.wlg.vf.<u></u>net.nz</a> (203.109.180.209) 31.280 ms 31.286 ms 31.855 ms<br>
5 10.123.80.13 (10.123.80.13) 165.885 ms 166.496 ms 167.686 ms<br>
^^^^^^^^^^^^<- ?!?<br>
6 <a href="http://ten-0-2-0.bdr02.sjc01.ca.VOCUS.net" target="_blank">ten-0-2-0.bdr02.sjc01.ca.<u></u>VOCUS.net</a> (114.31.199.137) 168.607 ms 156.560 ms 216.389 ms<br>
7 <a href="http://pos-1-0-0.bdr01.sjc01.ca.VOCUS.net.au" target="_blank">pos-1-0-0.bdr01.sjc01.ca.<u></u>VOCUS.net.au</a> (114.31.199.122) 216.381 ms 216.371 ms 216.361 ms<br>
<br>
If you look at the hostnames and the latencies, you will see that 10.123.80.13 is the first IP address on this path that is located in Australia: it's between vf.net.nz@32ms (vodafone) and VOCUS.net@168ms (Vocus Australia).<br>
<br>
If I scan <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a> (using masscan [1]), says on port 80, I got a huge amount of "Port 80: open". These port are really open but they are not from an HTTP server<br>
<br>
Now if i scan the same subnet several time in a row, i don't get the same result, weird!<br>
<br>
The only relevant result while googling for "10.123.80.13" are from Vodafone forums where users complain about connection issues (typically reporting a traceroute).<br>
<br>
Any comments?<br>
<br>
Chris<br>
<br>
[1] <a href="https://github.com/robertdavidgraham/masscan" target="_blank">https://github.com/<u></u>robertdavidgraham/masscan</a><br>
<br>
<br>
-- <br>
Wellington Linux Users Group Mailing List: <a href="mailto:wellylug@lists.wellylug.org.nz" target="_blank">wellylug@lists.wellylug.org.nz</a><br>
To Leave: <a href="http://lists.wellylug.org.nz/mailman/listinfo/wellylug" target="_blank">http://lists.wellylug.org.nz/<u></u>mailman/listinfo/wellylug</a><br>
</blockquote></div>