-2

On ISP level, is it commonly limited to some subnet mask? Is it possible or rare for an ISP to randomly change an IP's first 2 bytes?

Just as a bit of backstory, I'm trying to deter users from connecting with multiple, drastically different IPs, if anyone knows a better way to do this it is much appreciated. I have attempted using geolocation databases but they are expensive and not quite as accurate as I had hoped.

Thanks!

Whired
  • 7
  • 1

3 Answers3

4

It is possible and not rare at all (of course, it will not change randomly, ISP can have multiple /but limited number of/ IP address blocks).

Dusan Bajic
  • 2,056
  • 1
  • 18
  • 21
2

I assume you are asking about consumer grade broadband, or other services without a static IP.

The definitive answer will vary from provider to provider, but I know for a fact my home changes significantly.

Just some examples of recent IP's my home router has picked up via DHCP from the ISP:

2.120.x.x
2.121.x.x
2.123.x.x
2.223.x.x
90.193.x.x
90.195.x.x
90.198.x.x
90.210.x.x
90.211.x.x
90.212.x.x
90.213.x.x
90.217.x.x

I've had literally dozens of different addresses for each of those - e.g. 2.121.104.93, 2.121.23.101, 2.121.31.10, 2.121.49.224, etc.

Robin Gill
  • 2,513
  • 14
  • 13
  • Significantly being more than the last 16 bits? – Whired Aug 31 '12 at 15:53
  • I'm sure there are another few ranges my ISP uses, but I've got these from access logs on a forum I moderate and some of those I haven't listed could have been from usage from places other than home so I didn't provide the lot. (Also would have been a massive post). – Robin Gill Aug 31 '12 at 16:02
1

Some ISPs have different ip ranges. My home isp for example has range in the 86.61.0.0/17 range and 193.77.64.0/18 and a couple other which I cannot remember from the top of my head.

So yes, it is possible to have different IPs from different ranges, since ISPs got them at different times, and different pools were free at the time.

AFAIK, RIRs cannot get smaller ranges then /8, so 193.0.0.0/8 should(!) all be in Europe (assigned by RIPE).

You can always check the whois database to see which ISP is the owner of that IP.

mulaz
  • 10,682
  • 1
  • 31
  • 37
  • Very helpful. Would it be reliable to use the CIDR obtained from the whois? – Whired Aug 31 '12 at 16:00
  • Problem is due to ipv4 depletion, IP's have been sold and quite probably will be traded even more meaning they may not match original geographic locations. whois should work though. – Robin Gill Aug 31 '12 at 16:04
  • whois should be good enough, since it has to be updated to check IP-range <-> AS number, but geographic location is very limited (sometimes even with a wrong continent in case of anycast - like googles 8.8.8.8 dns address) – mulaz Aug 31 '12 at 16:10