Welcome to the IPv4 Games

https://ipv4.games/

54•chillax•17h ago

Comments

nicman23•14h ago

femboy.cat with a casual 0.2% of the internet

vaylian•14h ago

But how do they achieve that? Do you use a lot of VPNs?

maverwa•14h ago

my first guess would be: server honors X-Forwarded-For where it should not?

Edit: looks like thats it: https://github.com/jart/cosmopolitan/blob/master/net/turfwar...

So basically someone is running a script iterates over the whole ipv4 range and calls the claim endpoint with each single adress in the X-Forwared-For http header once.

3r7j6qzi9jvnve•14h ago

That only works if the proxy is sitting on localhost or a local network, just setting the header shouldn't work.

(I came here because I was curious how jart got 127 and 10, but after seeing the source is their's that's less of wonder..)

sgjohnson•12h ago

bool IsPrivateIp(uint32_t x) {

  return (x >> 24) == 10                   /* 10.0.0.0/8  */

         || (x & 0xfff00000) == 0xac100000 /* 172.16.0.0/12  */

         || (x & 0xffff0000) == 0xc0a80000 /* 192.168.0.0/16  */;

}

the code doesn't consider 127.0.0.0/8 as "private". I'm curious about 10.0.0.0/8 though.*

elitepleb•14h ago

a simple proof of the opposite is that no one's yet to exploit any of the untaken ranges that way

viraptor•12h ago

The line just under that prevents public IPs from using that function.

maverwa•10h ago

you are right, I totally read that wrong. Confirmation bias strikes again!

maldonad0•13h ago

Maybe spoofing source IPs.

sgjohnson•12h ago

can't spoof the source IP in TCP communication, as the handshake cannot happen.

With UDP you can send whatever, but obviously you won't be able to receive the response.

Sesse__•11h ago

It used to be possible back in the days when sequence numbers were easily guessable. (You'd obviously not be able to receive, only send, so you couldn't do TLS, but TLS had hardly been invented at the time.) Now operating systems are way too good for that. :-)

viraptor•12h ago

There are VPNs which use residential endpoints. You essentially use other users' IPs there.

cedws•12h ago

Botnet maybe.

sgjohnson•12h ago

_nobody_ would waste a botnet of 9 million unique IPs like this.

usui•12h ago

Well let's not get hasty... These are valuable internet points we're talking about here.

nilsherzig•10h ago

Not if it's your own, but this would be a great opportunity to redirect a botnet hitting your severs to generate some internet points instead

nilsherzig•10h ago

Embedding images on a popular page?

But according to the servers status at http://35.223.193.241:443/statusz nearly all claim requests expected to get html back not images.

gruez•9h ago

There's plenty of ways around that, for instance

    <script src="https://ipv4.games/claim?name=gruez">

    <iframe src="https://ipv4.games/claim?name=gruez">

bombcar•10h ago

They’re top of the list, so at least some is seeing that and choosing to add to it.

adzm•9h ago

I wouldn't be surprised if they had it call out from guns.lol or something

justusthane•4h ago

I don't know, but check out the "Recent Successful Claims" on the right.

Edit: Apparently they run https://novo.tf/, a CAPTCHA service, so they're probably using that to call out to ipv4.games from their clients.

johnisgood•12h ago

On the website, there was a link to a game: https://www.familiars.io

I spent an hour playing it! It is quite good.

Is there a source code available for this game?

HanClinto•7h ago

Holy moley, that is some high-octane dopamine right there.

Really fun game, thank you for linking it!

snvzz•11h ago

Somebody is obviously monopolizing ipv4 space.

chrismorgan•11h ago

(2022)

Also, submission title “Welcome to the IPv4 Games” is altered; the original title is “IPv4 Turf War”.

Previously: https://news.ycombinator.com/item?id=32790429

Open models by OpenAI

Genie 3: A new frontier for world models

Spotting base64 encoded JSON, certificates, and private keys

Ollama Turbo

Create personal illustrated storybooks in the Gemini app

uBlock Origin Lite now available for Safari

Consider using Zstandard and/or LZ4 instead of Deflate

HHS Winds Down mRNA Vaccine Development Under BARDA

The mystery of Winston Churchill's dead platypus was unsolved until now

Claude Opus 4.1

Kyber (YC W23) is hiring enterprise account executives

OpenAI's new open weight (Apache 2) models are good

Cannibal Modernity: Oswald de Andrade's Manifesto Antropófago (1928)

What's wrong with the JSON gem API?

Things that helped me get out of the AI 10x engineer imposter syndrome

Scientific fraud has become an 'industry,' analysis finds

Quantum machine learning via vector embeddings

Ask HN: Have you ever regretted open-sourcing something?

Los Alamos is capturing real-time images of explosions at 7mths of a second

Show HN: Whittle – A Shrinking Word Game

The First Widespread Cure for HIV Could Be in Children

Build Your Own Lisp

US reportedly forcing TSMC to buy 49% stake in Intel to secure tariff relief

Under the Hood of AFD.sys Part 1: Investigating Undocumented Interfaces

Tell HN: Anthropic expires paid credits after a year

Cow vs. Water Buffalo Mozzarella

Eleven Music

Show HN: Stagewise (YC S25) – Front end coding agent for existing codebases

Apache ECharts 6

GitHub pull requests were down

Open models by OpenAI

Genie 3: A new frontier for world models

Spotting base64 encoded JSON, certificates, and private keys

Ollama Turbo

Create personal illustrated storybooks in the Gemini app

uBlock Origin Lite now available for Safari

Consider using Zstandard and/or LZ4 instead of Deflate

HHS Winds Down mRNA Vaccine Development Under BARDA

The mystery of Winston Churchill's dead platypus was unsolved until now

Claude Opus 4.1

Kyber (YC W23) is hiring enterprise account executives

OpenAI's new open weight (Apache 2) models are good

Cannibal Modernity: Oswald de Andrade's Manifesto Antropófago (1928)

What's wrong with the JSON gem API?

Things that helped me get out of the AI 10x engineer imposter syndrome

Scientific fraud has become an 'industry,' analysis finds

Quantum machine learning via vector embeddings

Ask HN: Have you ever regretted open-sourcing something?

Los Alamos is capturing real-time images of explosions at 7mths of a second

Show HN: Whittle – A Shrinking Word Game

The First Widespread Cure for HIV Could Be in Children

Build Your Own Lisp

US reportedly forcing TSMC to buy 49% stake in Intel to secure tariff relief

Under the Hood of AFD.sys Part 1: Investigating Undocumented Interfaces

Tell HN: Anthropic expires paid credits after a year

Cow vs. Water Buffalo Mozzarella

Eleven Music

Show HN: Stagewise (YC S25) – Front end coding agent for existing codebases

Apache ECharts 6

GitHub pull requests were down

Welcome to the IPv4 Games

Comments