Yes, I know it's nonroutable which is why I am puzzzled. BTW, I have
a hardware firewall and a wireless access point both of which are as
secure as you can set up.
More details:
In configuring a new wireless laptop, I apparently got on to another
unprotected network. After running ipconfig, I wondered why the
assigned address was not on my private network. So I did tracert
to 24.25.195.2 to see if I had broken something on my network or
otherwise screwed up my network gear.
To my surprise, I found a hop of 10.76.128.1 in the mix. I realized
I was not on my network and reset my wireless nic to my net. A few
days later, I noticed there were enteries in my logs from the
10.76.128.1 address from even before I accidently was on the other
wireless net. Humm...
I changed cable modems sometime during all of this and had to run the
install directly from my other computer without the firewall in the
mix and what do you know? ipconfig showed that my dhcp server was,
tada, 10.76.128.1!
Soo, I went back on the other wireless net, went to GRC.com to log the
ip address, and went to the cable modems interface and screen captured
the data there for future reference.
I am really getting the feeling someone is doing something phishy.
What do you think? Time to get RR involved or am I being paranoid?
BP
Post by Darren NewPost by BPI'm in Scripps Ranch and seem to be seeing someone running a DHCP
server with an adddress of 10.76.128.1. This IP address also shows up
in my IDS logs as trying to access my network over 800 times since
May.
Does anyone know if this is a valiad RR server?
10.* is an unroutable address. In theory, that address has to be coming
from inside your own network. It should be able to go from RR's network
thru the modem and vice versa. I.e., it sounds like your modem itself.
Are you plugged into some sort of router/NAT/wireless whatever, or
directly into the modem?