Kernel of Truth

IP Address Ranges

🌐 Understanding IP Address Ranges

An IP address is a unique identifier assigned to each device connected to a network. Understanding how IP ranges are structured helps with network design, security, and troubleshooting.


🔢 IP Address Basics

  • IPv4 addresses are written in dotted-decimal format: 192.168.1.1
  • They consist of 4 octets (each 8 bits), totaling 32 bits
  • Range: 0.0.0.0 to 255.255.255.255

📦 Public vs Private IP Ranges

IP RangeTypeUse Case
10.0.0.0/8PrivateInternal networks (enterprise)
172.16.0.0/12PrivateMid-size private networks
192.168.0.0/16PrivateHome and small office networks
100.64.0.0/10Carrier-grade NATISPs using NAT for customers
127.0.0.1LoopbackLocalhost testing
169.254.0.0/16APIPAAutomatic IP when no DHCP

📌 Private IPs are non-routable over the public internet—they’re meant for internal use behind NAT (e.g. routers, firewalls).


🔍 Public IPs

  • Assigned by regional internet registries (ARIN, RIPE, APNIC)
  • Routable over the internet
  • Examples:
    • Google DNS: 8.8.8.8
    • Cloudflare DNS: 1.1.1.1
    • BBC: 151.101.0.81

🧠 CIDR Notation (Classless Inter-Domain Routing)

CIDRSubnet MaskHosts AvailableExample Network
/8255.0.0.0~16 million10.0.0.0/8
/16255.255.0.0~65,000192.168.0.0/16
/24255.255.255.0254192.168.1.0/24
/30255.255.255.2522 (point-to-point)192.168.1.4/30

🚫 Reserved and Special-Purpose Ranges

IP RangePurpose
127.0.0.0/8Loopback testing (localhost)
169.254.0.0/16Link-local (no DHCP)
224.0.0.0/4Multicast addresses
240.0.0.0/4Reserved for future use
255.255.255.255Broadcast address (local network)

🛡️ Security & Firewall Tips

  • 🔒 Block inbound access to private IP ranges from the internet
  • 🔍 Monitor outbound traffic—private addresses in DNS or HTTP headers can indicate misconfig or malware
  • 🌐 Use NAT to connect private IPs to the internet safely
  • 🚫 Avoid exposing public services on IPs like 0.0.0.0 unless necessary

✅ Summary

CategoryExample RangeNotes
Private192.168.1.0/24Internal only
Public8.8.8.8Routable, unique
Loopback127.0.0.1Localhost testing
APIPA169.254.x.xNo DHCP fallback
Multicast224.0.0.0/4Group-based messaging

💡 Understanding IP ranges is the foundation of secure network design and defence.