IP Address Obfuscation

This is a not-so-well-known trick sometimes used by computer criminals to try to hide their tracks.  You can use 10-digit integer format to reach devices on the network.  To do it, you convert the IP address into a base-256 number.
So if we have www.clinenetwork.com, which resolves to 216.81.75.64, we can also call it 3629206336 and use things like http, ping, etc to access it.

Here’s how we get there:

216.81.75.64 is the target’s IP address.  Break the four octets out and convert them to base 256 by multiplying them against a descending series like this…(it’s actually not that bad, follow along)

216 * (256)^3 =         216*(256*256*256)=3623878656

81*(256)^2=               81*(256*256)=5308416

75*(256)^1=               75*256=19200

64*(256)^0=               64*1 (because any number to the zero power is one) = 64

If you add them all up you will get 3629206336.  To test your math, you can let the OS you’re running convert it back to a regular IP address by simply running:

C:\>ping 3629206336

Pinging 216.81.75.64 with 32 bytes of data:
Reply from 216.81.75.64: bytes=32 time=41ms TTL=110
Reply from 216.81.75.64: bytes=32 time=41ms TTL=110
Reply from 216.81.75.64: bytes=32 time=45ms TTL=110
Reply from 216.81.75.64: bytes=32 time=41ms TTL=110
…and if you fire up a browser window and point to http://3629206336 it will take you to http://www.clinenetwork.com.
Follow

Get every new post delivered to your Inbox.