Re: Hijack IP Address using cable modem

From: Rajkumar S. (listuserat_private)
Date: Mon Apr 30 2001 - 08:46:22 PDT

  • Next message: Rev. Chris Cappuccio: "Re: Hijack IP Address using cable modem"

    On Sun, 29 Apr 2001, Marcin Dawcewicz wrote:
    
    > > What could the 513 have? My guess is that it
    > > is the port of the DHCP server that is running inside the modem.
    >
    > DHCP server is not running inside the modem. It's rlogin of course.
    
    let me make a small clarification. The DHCP thing was a wild guess. I know
    that 512 is rlogin. but the webpages of SB3100 states that a DHCP server
    is running inside the modem. Also the attempt to rlogin to the modem
    failed as the rlogin just waited with out any response. Here is the
    relevant para as it appeared in lynx.
    
                               [X] Enable DHCP Server
       The SURFboard cable modem can be used as a gateway to the Internet by
        a maximum of 32 users on a Local Area Network (LAN). When the Cable
          Modem is disconnected from the Internet, users on the LAN can be
         dynamically assigned IP Addresses by the Cable Modem DHCP Server.
        These addresses are assigned from an address pool which begins with
        192.168.100.11 and ends with 192.168.100.42. Statically assigned IP
        addresses for other devices on the LAN should be chosen from outside
                                   of this range
    
    Even though the DHCP was listed as enabled nmap did not show that. That
    was why I made a wild guess ;)
    
    Now some more info
    
    
        This page provides information about the servers your Cable Modem is
                 using, and the computers to which it is connected.
    
                                     Item Value
                       Serial Number 052701021403557804053000
                             HFC IP Address 10.1.15.42
                         HFC MAC Address 00:20:40:7E:AE:72
                         Ethernet IP Address 192.168.100.1
                       Ethernet MAC Address 00:20:40:7E:AE:73
                          DHCP Server Address 202.88.238.2
                        DHCP Information Duration: 605400 s
                                    Time: 18800
    
                      # Known CPE MAC Address (Max 1) Status
                      1       00:D0:B7:B9:AB:E0       Learned
    
    
    As it can be seen, the IP of the cable interface (HFC) is 10.1.15.42 But
    my first attempt to connect to port 80 was refused. May be with luck it
    may be possible to map the entire Fiber-Coax lan of the provider.
    
    raj
    



    This archive was generated by hypermail 2b30 : Mon Apr 30 2001 - 10:11:52 PDT