PDA

View Full Version : has the ntl dns been hacked?

Junglist2k5
10-03-2007, 14:33
weird thing happened to me, tried getting into my yahoo mail account and noticed that it was rediredcting me to a dynamic address at level42.net, it wouldnt allow me in just kept saying incorrect password, however changing dns to freeserve worked. have changed my password to be safe, can anyone else verify this pls!
Toto
10-03-2007, 14:37
DNS Hacked? I doubt it, but it could be faulty.

This may help

http://www.cableforum.co.uk/board/12/33610119-ebay-and-hotmail-login-trouble.html#post34247393
Junglist2k5
10-03-2007, 15:01
DNS Hacked? I doubt it, but it could be faulty.

try going to yahoo.com using default dns, and see if your connected to level42.net in your netstat

---------- Post added at 14:41 ---------- Previous post was at 14:38 ----------

try going to yahoo.com using default dns, and see if your connected to level42.net in your netstat

sorry its 216.129.122.153.layer42.net

---------- Post added at 15:00 ---------- Previous post was at 14:41 ----------

theres something odd going on here...anyone else verify pls

---------- Post added at 15:01 ---------- Previous post was at 15:00 ----------

im not in scotland, im in surrey
Matthew
10-03-2007, 15:01
I had the same problem some time ago logging into my Yahoo account from my PlusNet ADSL connection, evetually it sorted its self out but it didn take some time.
Zee
10-03-2007, 15:05
Keep this link handy, always check here first just incase there is a reported issue, if you were on ntl or Telewest, it should be reported here:

http://www.ntl-isp.ntl.com/ServiceStatus/
Junglist2k5
10-03-2007, 15:07
can some just try going to yahoo.com using the server assigned dns and see if they are infact connected to that address mentioned above....the page looks identical however, your netstat or firewall cannection list will show that dynamic address on layer42.net, im not just being paranoid, I work in computer security!
Toto
10-03-2007, 15:17
Checked Yahoo.com, no problems.

Check your hosts file just in case you have a rogue listing. :)
Junglist2k5
10-03-2007, 15:22
Checked Yahoo.com, no problems.

Check your hosts file just in case you have a rogue listing. :)

hmm did that, changing dns servers to freeserves fixed it for me , thats how i think its my server assigned dns entry...

just noticed the route has now dissapeared, odd, unless someone on this forum is upto something?....lol...oh well...think i will use a different dns server just to be sure.. thanks anyways.
Toto
10-03-2007, 15:24
There may have been a fault in the dns structure on the VM side, hope its sorted now.
TheNorm
10-03-2007, 15:26
If it is any help, I get the following from Cambridge:
Rik
10-03-2007, 15:27
No probs here.

Ended up at

w2.rc.vip.scd.yahoo.com [66.94.234.13]
Junglist2k5
10-03-2007, 15:31
If it is any help, I get the following from Cambridge:

seems to be sorted now, thanks anyways,

---------- Post added at 15:31 ---------- Previous post was at 15:28 ----------

No probs here.

Ended up at

w2.rc.vip.scd.yahoo.com [66.94.234.13]


weird thing is if you go the address https://216.129.122.153/ you get a strange certificate.....try it
Rik
10-03-2007, 15:34
weird thing is if you go the address https://216.129.122.153/ you get a strange certificate.....try it

That IP wasnt even on my tracert.

I would check your PC for any Viruses or Trojans
Junglist2k5
10-03-2007, 15:40
That IP wasnt even on my tracert.

I would check your PC for any Viruses or Trojans

i think im clean, weird, if it is someone trying to hijack mail passwords it wouldnt surprise me, ive seen it plenty times before. anywho, all i can do is change my password which i have done,

dont think i will use ntls dns servers anymore just to be safe.
Rik
10-03-2007, 15:44
seems to be sorted now, thanks anyways,


Well if its all sorted now it might have just been a routing issue which has now been rectified.

Dont worry about using NTL DNS servers,they are completely safe ;) and if your pcs clean, then i wouldnt worry tbh :)