Reply
Thread Tools
Posts: 92 | Thanked: 8 times | Joined on Mar 2010
#1
Hey guys

I was checking conky and I saw my phone was connected to an ip-address that I don't know and google doesn't know

cpc3-watf7-0-0-cust833.15-2.cable.virginmedia.com


What could this be?
The only thing I have on (Internet-wise) is Freecall.com SIP, Skype and Twitter (which is down atm).

Anyone knows what this could be??

I captured some of the packets with Wireshark and the packets were encrypted so nothing that can help me

Last edited by Devrim; 2010-11-07 at 01:10.
 
Posts: 1,048 | Thanked: 979 times | Joined on Mar 2008 @ SF Bay Area
#2
ping it to name resolve to an ip address. Check if that is your ip. Reverse lookup using whois.

That name looks like it is a cable/dsl address.
__________________
qgvdial: Google Voice client. All downloads
qgvtp: Phone integration for the n900 that dials out and sends texts using qgvdial.
mosquitto: message broker that implements the MQ Telemetry Transport protocol version 3.
qgvnotify: Google voice and contacts notifier for diablo and maemo.

If you want to thank me, click the Thanks button.
If you'd like to thank my applications, vote to move them to extras.
 
hawaii's Avatar
Posts: 1,030 | Thanked: 792 times | Joined on Jun 2009
#3
Looks like a cable modem.

What port was it connected to?
 
Posts: 92 | Thanked: 8 times | Joined on Mar 2010
#4
Ping came back as:
82.1.19.66

The port it was connected to was:
36323


WHOIS:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '82.1.16.0 - 82.1.31.255'

inetnum: 82.1.16.0 - 82.1.31.255
netname: INFRASTRUCTURE
descr: NTL Infrastructure - Watford
country: GB
admin-c: NNMC1-RIPE
tech-c: NNMC1-RIPE
status: ASSIGNED PA
mnt-by: AS5089-MNT
remarks: INFRA-AW
source: RIPE # Filtered

role: NTLI Network Management Centre
address: NTL Internet
address: Crawley Court
address: Winchester
address: Hampshire
address: SO21 2QA
phone: +44 1633710142
admin-c: MH22007-RIPE
admin-c: NR731-RIPE
admin-c: CW1083-RIPE
tech-c: MH22007-RIPE
tech-c: CW1083-RIPE
nic-hdl: NNMC1-RIPE
mnt-by: AS5089-MNT
e-mail: pim@virginmedia.co.uk
source: RIPE # Filtered

% Information related to '82.0.0.0/11AS5089'

route: 82.0.0.0/11
descr: NTL-UK-IP-BLOCK
origin: AS5089
mnt-by: AS5089-MNT
remarks: report abuse to www.virginmedia.com/netreport +44 (0)1633 710142
source: RIPE # Filtered

% Information related to '82.0.0.0/13AS5089'

route: 82.0.0.0/13
descr: NTL-UK-IP-BLOCK
origin: AS5089
mnt-by: AS5089-MNT
source: RIPE # Filtered

% Information related to '82.0.0.0/14AS5089'

route: 82.0.0.0/14
descr: NTL-UK-IP-BLOCK
origin: AS5089
mnt-by: AS5089-MNT
source: RIPE # Filtered
 
Posts: 92 | Thanked: 8 times | Joined on Mar 2010
#5
Output from ps -A > list.txt

http://pastebin.com/KCpUWBGu

Common guys, lets find out what this is.
It's 3 in the night here so I'll be in my bed soon
 
Posts: 92 | Thanked: 8 times | Joined on Mar 2010
#6
I reconnected my 3G connection and now it's connected to a insightbb.com ip. What could cause this T_T

-edit-

This thing is really going through the world.
Now it's connected to an Italian ISP

Last edited by Devrim; 2010-11-07 at 01:47.
 
Posts: 2,225 | Thanked: 3,822 times | Joined on Jun 2010 @ Florida
#7
I am pretty sure "virgin media" is an internet provider. That address in the first post really sounds like the connection to your internet provider. I'm too lazy to look up insightbb.com right now. But if it sounds anything like a service provider you know of in your area, that probably answers your question.

- Edit -

Though honestly, I don't want to sound too judgemental. I really am unsure what's going on, and it's possible there's something serious.

But first, how many widgets do you have that auto update? Weather, news, twitter/faceboot/etc, so on and so forth?
 
Posts: 92 | Thanked: 8 times | Joined on Mar 2010
#8
Originally Posted by Mentalist Traceur View Post
I am pretty sure "virgin media" is an internet provider. That address in the first post really sounds like the connection to your internet provider. I'm too lazy to look up insightbb.com right now. But if it sounds anything like a service provider you know of in your area, that probably answers your question.
I think it has more to do with the IM services on the N900
None of the ip addresses have anything to do with me (I live in the Netherlands)
We don't have insightbb, virginmedia, telecomitalia or some other weird ISP ^^
 
Posts: 543 | Thanked: 151 times | Joined on Feb 2010 @ Germany
#9
It's me and I'm just downloading your pictures from your phone

Joking, I think it is normal that you see several IPs which are connected with your phone. Disabled all instant messengers and check it again.
 
Posts: 92 | Thanked: 8 times | Joined on Mar 2010
#10
Originally Posted by Mentalist Traceur View Post

Though honestly, I don't want to sound too judgemental. I really am unsure what's going on, and it's possible there's something serious.

But first, how many widgets do you have that auto update? Weather, news, twitter/faceboot/etc, so on and so forth?


I got 2 weather widgets (ForecaWeather and Forecast).
I got Twitter, Skype and a SIP provider.
Other than that I got nothing
 
Reply


 
Forum Jump


All times are GMT. The time now is 16:02.