PDA

View Full Version : Are you 213.105.6.101 (Leeds ?)


Paul
14-03-2004, 16:36
If you are then you are infected by netsky.b - and I keep getting your worms e-mails. :td:

paulyoung666
14-03-2004, 16:40
be interesting if someone replied :D :D :D

it is getting beyond a joke though , i am getting netsky virus all the bluddddddy time and it is doing my tits in :mad: :mad: :mad:

lemarsh
14-03-2004, 16:42
If you are then you are infected by netsky.b - and I keep getting your worms e-mails. :td:
I'm not in Leeds, so don't think its me (also, you are not in my email address book).

But, if you are behind a router, how do you find out what your IP address is, as obviously IPConfig only gives you your internal IP address

Scrubbs
14-03-2004, 16:43
If you are then you are infected by netsky.b - and I keep getting your worms e-mails. :td:
how do I know if I'm 213.105.6.101 ? :confused:

Apart from the fact I'm not in leeds?

deadite66
14-03-2004, 16:48
http://whatsmyip.smokingmedia.com/

Julian
14-03-2004, 16:50
213.105.6.101 = cpc3-scun1-4-0-cust101.nott.cable.ntl.com.

Someone in S****horpe?

Scrubbs
14-03-2004, 16:55
http://whatsmyip.smokingmedia.com/
when I click on it It gives an ip address AmsterdamState: North Holland (province)Country: nl????

have I missed something obvious?

Shaun
14-03-2004, 16:55
http://whatsmyip.smokingmedia.com/

Network Information about 212.158.198.***:
Host host-212-158-198-***.bulldogdsl.com


--------------------------------------------------------------------------------

Geographical Information about 212.158.198.62:
City: Amsterdam
State: North Holland (province)
Country: nl
Longitude: 4.9° East
Latitude: 52.35° North




Bizzar, that site thinks I'm in Holland, or is that where the IP is from? :confused:

downquark1
14-03-2004, 16:55
http://whatsmyip.smokingmedia.com/
According to that I'm in Amsterdam :D

paulyoung666
14-03-2004, 16:56
summat wrong surely :confused:


Your IP: 82.2.***.*** Add to Favorites
Make this Your Homepage

Enter another IP address:
--------------------------------------------------------------------------------

Network Information about 82.2.***.***:
Host cpcX-stocX-X-X-custXXX.midd.cable.ntl.com
1375902194

[Admin Edit(Mick):- Real Host Edited - As it Resolves to your Real IP]
--------------------------------------------------------------------------------

Geographical Information about 82.2.***.***:
City: Marina Del Rey
State: California
Country: us
Longitude: 118.45° West
Latitude: 33.98° North

Distance to reference places in the world
Place Longitude Latitude Distance
Equator line 118.45° West 0° 3771 Km
Greenwich line 0° 33.98° North 10086 Km
North Pole 0° 90° North 6218 Km
South Pole 0° 90° South 13761 Km


uhhhhhhhhhhhhh i am on teesside :D :D :D :D

Marge
14-03-2004, 16:59
uhhhhhhhhhhhhh i am on teesside :D :D :D :D


Did someone move Teesside while you were asleep :eek: :eek:

Edit: Hyde has moved to Amsterdam as well :erm:

paulyoung666
14-03-2004, 17:02
Did someone move Teesside while you were asleep :eek: :eek:

Edit: Hyde has moved to Amsterdam as well :erm:



they must have , mind you , california , now that sounds good to me :D :D :D

Marge
14-03-2004, 17:03
they must have , mind you , california , now that sounds good to me :D :D :D

We've got a cracking excuse for not going in work tomm :tu:

Wonder how or why it thinks we're somewhere we're not :spin:

Tricky
14-03-2004, 17:04
Administrative Contact:
Smoking Media
Bjorn Wikkeling (bjorn@smokingmedia.com)
+31.622806652
Fax: +31.11
P.O. Box 9663Utrecht, NL 3506 GR
NL

site is registered in holland so I suspect the default for any unknown addresses is the local one!

gazzae
14-03-2004, 17:07
RIPE are in Holland

Ramrod
14-03-2004, 17:18
http://whatsmyip.smokingmedia.com/I went there and it said this:
City: Amsterdam
State: North Holland (province)
Country: nl
Longitude: 4.9° East
Latitude: 52.35° North
:disturbd:
edit....so is everyone else I see :D

Marge
14-03-2004, 17:20
Get the kettle on Ramrod, we're all coming round for a brew :tu:

Scrubbs
14-03-2004, 17:21
Get the kettle on Ramrod, we're all coming round for a brew :tu:
milk no sugar ta

Paul
14-03-2004, 17:22
213.105.6.101 = cpc3-scun1-4-0-cust101.nott.cable.ntl.com.

Someone in S****horpe?

Yes, the reason I put "Leeds ?" is because according to RIPE ;

inetnum: 213.105.0.0 - 213.105.7.255
netname: NTL
descr: NTL Internet - Leeds POP site
country: GB

But it's reverse lookup is as above. Either way I have had 12 copies from this IP now :mad:

paulyoung666
14-03-2004, 17:23
I went there and it said this:
:disturbd:
edit....so is everyone else I see :D




except me , i am in california :D :D :D :D , sunny days :D :D :D :D

deadite66
14-03-2004, 17:36
heh i just chose that one as the others i tried returned the proxy ip

Moox
14-03-2004, 17:51
except me , i am in california :D :D :D :D , sunny days :D :D :D :D
Nice here isn't it :D

Stuart
14-03-2004, 17:56
Did someone move Teesside while you were asleep :eek: :eek:

Edit: Hyde has moved to Amsterdam as well :erm:
Did the UK get taken over by the Dutch last night? I'm in Amsterdam too..

Mick
14-03-2004, 18:02
Yes, the reason I put "Leeds ?" is because according to RIPE ;

inetnum: 213.105.0.0 - 213.105.7.255
netname: NTL
descr: NTL Internet - Leeds POP site
country: GB

But it's reverse lookup is as above. Either way I have had 12 copies from this IP now :mad:
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.

paulyoung666
14-03-2004, 18:24
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.



didnt ntl do something about customers connection with another worm / virus , i cant remember which one it was :confused:

Stuartbe
14-03-2004, 18:32
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.

I read on another thread somewhare that all this did was to send back an autoreply.... Man ! thats going to one big mailbox if it is storing the mail :Yikes:

paulyoung666
14-03-2004, 18:33
I read on another thread somewhare that all this did was to send back an autoreply.... Man ! thats going to one big mailbox if it is storing the mail :Yikes:




must be splitting at the seams at the mo :disturbd: :disturbd: :disturbd: :disturbd:

Paul
14-03-2004, 19:59
Someone very near you then pem, contact abuse@ntl.com they may need to get involved and at least let the customer know they are infected and need to get their computer sorted ASAP, as this is effecting other customers just like yourself.

Thanks Mick - I already e-mailed them and registered it via the online abuse reporting system - but experience suggests these can take many days before they reach the top of the queue - hence a hopeful post here.

I can't think of anyone I know in Leeds or Scun-thorpe [to have my e-mail address in their contacts list].

TigaSefi
14-03-2004, 20:09
can u not reply to the email and politely tell them to get off the internet and fix their virus problem ?

Bulky
14-03-2004, 20:18
can u not reply to the email and politely tell them to get off the internet and fix their virus problem ?


This happened at my work, the not so intelligent receptionist didn't keep virus definitions up to date (after telling her numerous time to do so), i happened to go on the computer while she was away and noticed it running slow, updated virus definitions and ran a scan, 2975 infected files :shocked: :shocked: , then checked email and had a few from germany saying we had sent it to them(was netsky.b as well), all sorted now though :)

must remember to give receptionist a good telling off when she gets back :mad:

paulyoung666
14-03-2004, 20:22
This happened at my work, the not so intelligent receptionist didn't keep virus definitions up to date (after telling her numerous time to do so), i happened to go on the computer while she was away and noticed it running slow, updated virus definitions and ran a scan, 2975 infected files :shocked: :shocked: , then checked email and had a few from germany saying we had sent it to them(was netsky.b as well), all sorted now though :)

must remember to give receptionist a good telling off when she gets back :mad:



maybe you should deal with the virus updates instead ;)

Scrubbs
14-03-2004, 20:24
maybe you should deal with the virus updates instead ;)
or set her/his computer to do it automaticly

Stuart
14-03-2004, 20:25
This happened at my work, the not so intelligent receptionist didn't keep virus definitions up to date (after telling her numerous time to do so), i happened to go on the computer while she was away and noticed it running slow, updated virus definitions and ran a scan, 2975 infected files :shocked: :shocked: , then checked email and had a few from germany saying we had sent it to them(was netsky.b as well), all sorted now though :)

must remember to give receptionist a good telling off when she gets back :mad:
Our users have autoupdate automatically configured. Basically, the advantage is that if they don't want updates, they have to re-configure it manually. Most people don't bother.

TigaSefi
14-03-2004, 20:51
I firmly believe if an ip address is sending out viruii then that person's internet should be cut off and then be sent an email......oh hang on.... I spot a flaw :pp

Jon_
14-03-2004, 21:51
I can't think of anyone I know in Leeds or Scun-thorpe [to have my e-mail address in their contacts list].
Ive had these emails to, but they are to a account that only ever gets used for spam, the email account that i use with all my mates does not get attacked, both are @ntlworld.com, my suspicision is that the infected computer found my address from a spamm message to all ntlusers and thats how im geting the emails, i belive your attacker has suffered a similar fate, hence why you cant think of who he/she is

Paul
03-04-2004, 23:09
Just to update on this - the e-mails from this IP stopped a few days after I reported them to NTL. This may be coincidence, but I doubt it - I had been getting them for a while when I finally got fed up and reported them.

Julian
03-04-2004, 23:14
Just to update on this - the e-mails from this IP stopped a few days after I reported them to NTL. This may be coincidence, but I doubt it - I had been getting them for a while when I finally got fed up and reported them.

Glad the problem has subsided M8. :)

Out of interest, did ntl actually reply to your email Pem?

Paul
03-04-2004, 23:24
I used the web reporting form (you get an auto message back from the abuse e-mail address telling you to do this) - and no, they never contacted me back to say they were taking any action.

altis
19-04-2004, 10:33
You'd better not let Neil catch you posting an infected computer's IP address :pp

http://www.cableforum.co.uk/board/showthread.php?t=8922

ps. I usually use this place to look up IPs etc - there's load of options
http://www.dnsstuff.com/