View Full Version : Are you 213.105.6.101 (Leeds ?)
If you are then you are infected by netsky.b - and I keep getting your worms e-mails. :td:
paulyoung666
14-03-2004, 16:40
be interesting if someone replied :D :D :D
it is getting beyond a joke though , i am getting netsky virus all the bluddddddy time and it is doing my tits in :mad: :mad: :mad:
If you are then you are infected by netsky.b - and I keep getting your worms e-mails. :td:
I'm not in Leeds, so don't think its me (also, you are not in my email address book).
But, if you are behind a router, how do you find out what your IP address is, as obviously IPConfig only gives you your internal IP address
If you are then you are infected by netsky.b - and I keep getting your worms e-mails. :td:
how do I know if I'm 213.105.6.101 ? :confused:
Apart from the fact I'm not in leeds?
deadite66
14-03-2004, 16:48
http://whatsmyip.smokingmedia.com/
213.105.6.101 = cpc3-scun1-4-0-cust101.nott.cable.ntl.com.
Someone in S****horpe?
http://whatsmyip.smokingmedia.com/
when I click on it It gives an ip address AmsterdamState: North Holland (province)Country: nl????
have I missed something obvious?
http://whatsmyip.smokingmedia.com/
Network Information about 212.158.198.***:
Host host-212-158-198-***.bulldogdsl.com
--------------------------------------------------------------------------------
Geographical Information about 212.158.198.62:
City: Amsterdam
State: North Holland (province)
Country: nl
Longitude: 4.9° East
Latitude: 52.35° North
Bizzar, that site thinks I'm in Holland, or is that where the IP is from? :confused:
downquark1
14-03-2004, 16:55
http://whatsmyip.smokingmedia.com/
According to that I'm in Amsterdam :D
paulyoung666
14-03-2004, 16:56
summat wrong surely :confused:
Your IP: 82.2.***.*** Add to Favorites
Make this Your Homepage
Enter another IP address:
--------------------------------------------------------------------------------
Network Information about 82.2.***.***:
Host cpcX-stocX-X-X-custXXX.midd.cable.ntl.com
1375902194
[Admin Edit(Mick):- Real Host Edited - As it Resolves to your Real IP]
--------------------------------------------------------------------------------
Geographical Information about 82.2.***.***:
City: Marina Del Rey
State: California
Country: us
Longitude: 118.45° West
Latitude: 33.98° North
Distance to reference places in the world
Place Longitude Latitude Distance
Equator line 118.45° West 0° 3771 Km
Greenwich line 0° 33.98° North 10086 Km
North Pole 0° 90° North 6218 Km
South Pole 0° 90° South 13761 Km
uhhhhhhhhhhhhh i am on teesside :D :D :D :D
uhhhhhhhhhhhhh i am on teesside :D :D :D :D
Did someone move Teesside while you were asleep :eek: :eek:
Edit: Hyde has moved to Amsterdam as well :erm:
paulyoung666
14-03-2004, 17:02
Did someone move Teesside while you were asleep :eek: :eek:
Edit: Hyde has moved to Amsterdam as well :erm:
they must have , mind you , california , now that sounds good to me :D :D :D
they must have , mind you , california , now that sounds good to me :D :D :D
We've got a cracking excuse for not going in work tomm :tu:
Wonder how or why it thinks we're somewhere we're not :spin:
Administrative Contact:
Smoking Media
Bjorn Wikkeling (bjorn@smokingmedia.com)
+31.622806652
Fax: +31.11
P.O. Box 9663Utrecht, NL 3506 GR
NL
site is registered in holland so I suspect the default for any unknown addresses is the local one!
http://whatsmyip.smokingmedia.com/I went there and it said this:
City: Amsterdam
State: North Holland (province)
Country: nl
Longitude: 4.9° East
Latitude: 52.35° North
:disturbd:
edit....so is everyone else I see :D
Get the kettle on Ramrod, we're all coming round for a brew :tu:
Get the kettle on Ramrod, we're all coming round for a brew :tu:
milk no sugar ta
213.105.6.101 = cpc3-scun1-4-0-cust101.nott.cable.ntl.com.
Someone in S****horpe?
Yes, the reason I put "Leeds ?" is because according to RIPE ;
inetnum: 213.105.0.0 - 213.105.7.255
netname: NTL
descr: NTL Internet - Leeds POP site
country: GB
But it's reverse lookup is as above. Either way I have had 12 copies from this IP now :mad:
paulyoung666
14-03-2004, 17:23
I went there and it said this:
:disturbd:
edit....so is everyone else I see :D
except me , i am in california :D :D :D :D , sunny days :D :D :D :D
deadite66
14-03-2004, 17:36
heh i just chose that one as the others i tried returned the proxy ip
except me , i am in california :D :D :D :D , sunny days :D :D :D :D
Nice here isn't it :D
Did someone move Teesside while you were asleep :eek: :eek:
Edit: Hyde has moved to Amsterdam as well :erm:
Did the UK get taken over by the Dutch last night? I'm in Amsterdam too..
Yes, the reason I put "Leeds ?" is because according to RIPE ;
inetnum: 213.105.0.0 - 213.105.7.255
netname: NTL
descr: NTL Internet - Leeds POP site
country: GB
But it's reverse lookup is as above. Either way I have had 12 copies from this IP now :mad:
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.
paulyoung666
14-03-2004, 18:24
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.
didnt ntl do something about customers connection with another worm / virus , i cant remember which one it was :confused:
Stuartbe
14-03-2004, 18:32
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.
I read on another thread somewhare that all this did was to send back an autoreply.... Man ! thats going to one big mailbox if it is storing the mail :Yikes:
paulyoung666
14-03-2004, 18:33
I read on another thread somewhare that all this did was to send back an autoreply.... Man ! thats going to one big mailbox if it is storing the mail :Yikes:
must be splitting at the seams at the mo :disturbd: :disturbd: :disturbd: :disturbd:
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.
Thanks Mick - I already e-mailed them and registered it via the online abuse reporting system - but experience suggests these can take many days before they reach the top of the queue - hence a hopeful post here.
I can't think of anyone I know in Leeds or Scun-thorpe [to have my e-mail address in their contacts list].
TigaSefi
14-03-2004, 20:09
can u not reply to the email and politely tell them to get off the internet and fix their virus problem ?
can u not reply to the email and politely tell them to get off the internet and fix their virus problem ?
This happened at my work, the not so intelligent receptionist didn't keep virus definitions up to date (after telling her numerous time to do so), i happened to go on the computer while she was away and noticed it running slow, updated virus definitions and ran a scan, 2975 infected files :shocked: :shocked: , then checked email and had a few from germany saying we had sent it to them(was netsky.b as well), all sorted now though :)
must remember to give receptionist a good telling off when she gets back :mad:
paulyoung666
14-03-2004, 20:22
This happened at my work, the not so intelligent receptionist didn't keep virus definitions up to date (after telling her numerous time to do so), i happened to go on the computer while she was away and noticed it running slow, updated virus definitions and ran a scan, 2975 infected files :shocked: :shocked: , then checked email and had a few from germany saying we had sent it to them(was netsky.b as well), all sorted now though :)
must remember to give receptionist a good telling off when she gets back :mad:
maybe you should deal with the virus updates instead ;)
maybe you should deal with the virus updates instead ;)
or set her/his computer to do it automaticly
This happened at my work, the not so intelligent receptionist didn't keep virus definitions up to date (after telling her numerous time to do so), i happened to go on the computer while she was away and noticed it running slow, updated virus definitions and ran a scan, 2975 infected files :shocked: :shocked: , then checked email and had a few from germany saying we had sent it to them(was netsky.b as well), all sorted now though :)
must remember to give receptionist a good telling off when she gets back :mad:
Our users have autoupdate automatically configured. Basically, the advantage is that if they don't want updates, they have to re-configure it manually. Most people don't bother.
TigaSefi
14-03-2004, 20:51
I firmly believe if an ip address is sending out viruii then that person's internet should be cut off and then be sent an email......oh hang on.... I spot a flaw :pp
I can't think of anyone I know in Leeds or Scun-thorpe [to have my e-mail address in their contacts list].
Ive had these emails to, but they are to a account that only ever gets used for spam, the email account that i use with all my mates does not get attacked, both are @ntlworld.com, my suspicision is that the infected computer found my address from a spamm message to all ntlusers and thats how im geting the emails, i belive your attacker has suffered a similar fate, hence why you cant think of who he/she is
Just to update on this - the e-mails from this IP stopped a few days after I reported them to NTL. This may be coincidence, but I doubt it - I had been getting them for a while when I finally got fed up and reported them.
Just to update on this - the e-mails from this IP stopped a few days after I reported them to NTL. This may be coincidence, but I doubt it - I had been getting them for a while when I finally got fed up and reported them.
Glad the problem has subsided M8. :)
Out of interest, did ntl actually reply to your email Pem?
I used the web reporting form (you get an auto message back from the abuse e-mail address telling you to do this) - and no, they never contacted me back to say they were taking any action.
You'd better not let Neil catch you posting an infected computer's IP address :pp
http://www.cableforum.co.uk/board/showthread.php?t=8922
ps. I usually use this place to look up IPs etc - there's load of options
http://www.dnsstuff.com/
vBulletin® v3.8.11, Copyright ©2000-2024, vBulletin Solutions Inc.