Rogue DHCP Server - Colorado Springs, 80916 and Surrounding Area

24.x.x.x addresses are not "rogue". They are valid Comcast IP addresses in some areas. You likely recently received a new / different WAN (public) IP address assignment to your connection from their DHCP server / IP address pool, and the rDNS / geolocation data that is associated with it is now incorrect for you as it previously belonged to someone else that lived in that area. Comcast shuffles blocks of IP addresses around the country all the time. ISP's don't correct this. A third party service does. Unfortunately, this is typically a *back-burner* thing to get corrected. The only thing that you can do is to report it. You can try this;

https://support.maxmind.com/geoip-data-correction-request/

http://www.ipligence.com/contact/

https://www.ip2location.com/contact/

https://www.home.neustar/contact-us

https://support.google.com/websearch/contact/ip/

Wait for the geolocation provider to approve your request. If your request is approved, the amount of time it takes to see the correction varies by provider. The average is a month or more.

I was able to run a trace route to Google and the first hop on the internet is a 10.61.N.N. I know this where my issue is. The provisioning of the modem was messed up when "Comcast" enhnaced my internet to the new XFi, but in return messes up the provisioning on the modem.

IP addresses in the 10.61.x.x.x range are private (non-routable) addresses for a LAN.

The "provisioning" of a cable modem has nothing directly to do with the assignment of public / WAN IP addresses.

Random disconnects are typically related to RF signal / coax cable system impairments. What do the modem's signal stats look like ? 

Start with the modem's signal stats. Perhaps they already are, or they are close to being out of spec and intermittently they go completely of spec. Try getting them here http://192.168.100.1 or here http://10.0.0.1

Please post the *Downstream Power Level*, the *Upstream Power Level*, and the *SNR* (Signal to Noise Ratio) numbers.

What is the exact make and model number of the modem ?

Is this a WiFi connection ?

Are you behind some sort of an internet proxy ?

Not at all.

I simply have the coax connected to the tap directly to my modem. Give of take 30~40 feet.

My modem pushes this when I am directly connected.

Simple laptop connecting directly to the modem. The tech meter could not determine a connection when conencted through the ethernet. Coax was pushing 1296 Mbps unfiltered down.

This is my modem signal as requested.

The first hop should not be there at all.

1 35 ms 36 ms 37 ms 10.61.XX.XX <------ this is what is wrong and needs to addressed.

Click on that 10.61.x.x.x address here and see what info is returned;

https://db-ip.com/all/10.61.10

Warning : This is not a valid IP address on the Internet because it belongs to a private network. It does not identify a unique destination as it is only meant to be used inside local area networks

10.61.27.2 -- this is the first hop

What about the CMTS? Could the CMTS be misconfigured and publically interfacing with something incorrectly?

My service levels are good and I had a technician confirm all of that on Saturday. I am 1 of 3 people on the node. The node was enhanced and now this is what I get when I go out to the internet.

No my trace route to Google I  get the following.

With my router

1 <1 ms <1 ms <1 ms 192.168.1.1
2 8 ms 8 ms 28 ms 10.61.XX.XX
3 7 ms 7 ms 7 ms 96.110.XX.XX
4 11 ms 12 ms 10 ms 162.151.XX.XX
5 11 ms 9 ms 9 ms be-36031-cs03.1601milehigh.co.ibone.comcast.net [96.110..XX.XX]
6 9 ms 8 ms 9 ms be-3302-pe02.910fifteenth.co.ibone.comcast.net [96.110..XX.XX]
7 10 ms 9 ms 9 ms as15133-3-c.nota.fl.ibone.comcast.net [23.30..XX.XX]
8 10 ms 10 ms 11 ms 209.85..XX.XX
9 8 ms 9 ms 9 ms 72.14..XX.XX
10 9 ms 9 ms 8 ms den16s03-in-f14.1e100.net [172.217.2.14]

Without my router

1 35 ms 36 ms 37 ms 10.61.XX.XX
2 7 ms 7 ms 7 ms 96.110.XX.XX
3 11 ms 12 ms 10 ms 162.151.XX.XX
4 11 ms 9 ms 9 ms be-36031-cs03.1601milehigh.co.ibone.comcast.net [96.110..XX.XX]
5 9 ms 8 ms 9 ms be-3302-pe02.910fifteenth.co.ibone.comcast.net [96.110..XX.XX]
6 10 ms 9 ms 9 ms as15133-3-c.nota.fl.ibone.comcast.net [23.30..XX.XX]
7 10 ms 10 ms 11 ms 209.85..XX.XX
8 8 ms 9 ms 9 ms 72.14..XX.XX
9 9 ms 9 ms 8 ms den16s03-in-f14.1e100.net [172.217.2.14]

Upstream is fine. Then call in to customer service and ask them what it is ? I'm not an employee. Sorry I couldn't help you. Good luck again.

Add that is what I am saying and it is servering a private IP and did so the day the enhancement happened. And this is happening to everyone that goes through this ehancement process.

This is absolutely 100% NOT on my end. Completely disagree with your assessment.

I have changed nothing and I mean nothing on my end for 5 years and now its my issue.

The downstream stats are good. You didn't post the upstream power.

Right. That is a private intranet type of address. The Comcast DHCP server can not issue private / LAN IP addresses. It is something on your end. Look at the 10.61. addresses here on this google search and see if you can piece together some of the info;

https://www.google.com/search?q=is+10.61+a+private+ip&rlz=1C1SQJL_enUS782US782&oq=is+10.61+a+private+ip&aqs=chrome.0.69i59.17009j1j8&sourceid=chrome&ie=UTF-8

Good luck !

No prob. Maybe they've newly implemented a proxy ? They have always stated that they don't employ proxies. YMMV.