cancel
Showing results for 
Search instead for 
Did you mean: 

Thankyou PN

N/A

Thankyou PN

For an antivirus tracker that works..

For some INCREDIBLY sad reason, someone tried to send me a virus through my charity site, and thankfully PN AV stopped both emails..first time I have come across it.

So thanks and well done..

PS, anyone know how i can find out who this IP belongs to..82.153.97.149

Tried to do a tracroute on it, but got this far and timed out



Quote
TraceRoute to 82.153.97.149
Hop (ms) (ms) (ms) IP Address Host name
1 0 0 0 66.98.244.1 gphou-66-98-244-1.ev1.net
2 0 0 0 66.98.241.9 gphou-66-98-241-9.ev1.net
3 1 2 3 216.200.251.165 ge-6-0-0.mpr1.iah1.us.above.net
4 2 1 1 64.125.31.62 so-0-0-0.mpr2.iah1.us.above.net
5 14 14 18 64.125.29.61 so-5-1-0.mpr1.atl6.us.above.net
6 24 13 14 64.125.27.50 so-0-0-0.mpr2.atl6.us.above.net
7 25 25 25 64.125.28.229 so-6-1-0.cr1.dca2.us.above.net
8 128 106 97 64.125.31.185 so-6-0-0.cr1.lhr3.uk.above.net
9 96 96 96 208.184.231.177 pos2-0.mpr1.lhr1.uk.above.net
10 132 164 219 213.161.78.86 eclipse-mfn-1.lhr1.uk.mfnx.net
11 98 97 97 81.5.191.222 -
12 Timed out Timed out Timed out -
13 Timed out Timed out Timed out -
14 Timed out Timed out Timed out -
15 Timed out Timed out Timed out -
17 REPLIES
N/A

Thankyou PN

Hi there,
The ip address seems to belong to eclipse internet. (source)
N/A

Thankyou PN

ta for that, gonna email them now!
N/A

Thankyou PN

robynfali

If you get attacks like those again you can use this link to trace where an attack came from
N/A

Thankyou PN

Plusnet Peeps


Can you please do something about this, another 3 tonight, I did email the ISP but no response WHATSOEVER!!, yes ok they are getting trapped by your excellent AV service, but i am a bit fed up of it now, can you get onto them, your side is holding the emails back thankfully, you have all the headers etc, can you please email Eclipse yourself

Tonights ones IP address for all 3 emails is

82.153.65.88

Please do something about it, they aint listening to me!!
N/A

Thankyou PN

and a fourth!!

82.153.100.86
N/A

Thankyou PN

losing count now...someone either really hates charities...or hates me....probably the latter lol
Plusnet Staff
Plusnet Staff
Posts: 12,169
Thanks: 18
Fixes: 1
Registered: 04-04-2007

Thankyou PN

Unfortunately there's actually very little we can do. Our virus scanners will block tens of thousands of mails every day, must of which will come from PC's infected themselves with their owners unaware. Which is very likely that's what this is, someone on Elcipse with a dynamic IP that has your email address in their address book.

Hopefully Eclipse will pass on the message to their customer that they are infected and they can disinfect their PC.
Community Veteran
Posts: 5,877
Thanks: 1
Registered: 05-04-2007

Thankyou PN

This suprises me of eclipse; during the BP saga a few of us e-mailed them to complain. They took a couple of days to reply but when they did they were very helpful and did have a word with BP. Who now posts regularly on plusnetters and behaves himself ;-)
N/A

Thankyou PN

nope, had no reply nor nothing mate, not even a read receipt, its like they dont give a flying $£%
Plusnet Staff
Plusnet Staff
Posts: 12,169
Thanks: 18
Fixes: 1
Registered: 04-04-2007

Thankyou PN

Whilst I can't speak for Eclipse I can suggest something from how the abuse team on our side work.

A lot of the reports we receive a fairly standard so we have automation in place for these which will generally just email the customers advising of the issue. e.g. if we receive reports of spamming from say Spamhaus then we will send the customer a mail saying we've received a report of spamming from their IP and offer some advice such as locking down an open relay or checking for viruses.

Some reports are handled by hand because they don't fit in to the automation, but things like read receipts would be turned off (because the mail is shared and you could end up with multiple read receipts) and we may not be able to give a reply regarding any action taken because of data protection.
N/A

Thankyou PN

I was joking about the read receipt bit, but the last time I reported someone for viruses, I did get an email acknowldeging the complaint from the ISP, i havent even had that
N/A

Thankyou PN

Quote
and we may not be able to give a reply regarding any action taken because of data protection.


Surely a simple standard reply saying "Thank you for bringing this to our attention. We have investigated the matter" would not voilate the DPA and give valuble feedback to the parties concerned.

Is it possible that this lack of communication resulted in the recent blacklisting of PlusNet's primary mail servers?

Just my €0.02
N/A

Thankyou PN

82.153.100.86
appears to be eclipse again if you get another try http://msv.dk/ to find out where it originates
N/A

Still receiving 5000 plus a day

Sadly anyone receiving Virus infected e-mail has my deepest sympathy.

Personally I've now had to learn to live with it, around a month ago I reported receiving around 10,000 plus virus alerts a day, with most of the offending mail coming from: ?@cpc1-gran2-6-0-cust155.nott.cable.ntl.com.

I expected the numbers to drop off and did notice a slow down in the numbers for a while down to just 1 or 2 thousand a day, but I've just deleted 13,000 of these about half an hour ago and just checked to find another load waiting for me.

NTL do not want to know if you are not a customer of theirs, and PN claim they can do nothing.

Looking on the brighter side while they are pelting me with them, I guess they are leaving someone else alone.