Skip navigation

External IP Address Issues

490 Views 6 Replies Latest reply: Feb 23, 2012 12:21 AM by MadMacs0 RSS
lsolson Calculating status...
Currently Being Moderated
Feb 21, 2012 10:13 AM

Please forgive me if I don't use correct terminology, but here is my problem.

 

Three days ago my internet speed started getting sluggish. At first I didn't think much of it, but when it persisted I ran speedtest.net. Instead of getting my usual 24+ down and 3+ up, I was getting 5 down and .something up. I noticed here that my IP was not the normal address. I called my ISP about my speeds, they said they didn't know and would send a tech out. I mentioned the new IP and they said it wasn't an issue. I looked up this IP that I was now reporting and the info I got was that it was 400 miles away from me and was a proxy server.

 

The next day my normal IP was back along with my usual speeds, so I didn't have the tech come out. Now today, I get an e-mail from my ISP saying I have been infected with Alureon malware which is changing my DNS settings and to go to their site and download Nortorn to fix it. I just scanned my system with Sophos and didn't come up with anything. Also, my IP right now is back to this new one with horrible speeds. If I shut down my modem and router for several minutes then turn them on, I first have my normal IP, but it is switched after only a few minutes.

 

Any advice on what might be going on?

 

Thank you for your time.

MacBook, Mac OS X (10.6.8)
  • fane_j Level 4 Level 4 (3,655 points)
    Currently Being Moderated
    Feb 22, 2012 12:49 AM (in response to lsolson)

    lsolson wrote:

     

    I get an e-mail from my ISP saying I have been infected with Alureon malware

    Unless you're running Windows on your Mac, that's impossible. Alureon does not (cannot) infect Mac OS X. See

     

    <http://www.symantec.com/security_response/writeup.jsp?docid=2008-091809-0911-99& tabid=2>

     

    I don't know about the other issue. I think your ISP holds the key to that problem.

  • boink boink Level 2 Level 2 (280 points)
    Currently Being Moderated
    Feb 22, 2012 1:05 AM (in response to lsolson)

    can you tell us about your network setup?

     

    are you using a cable or dsl connection? how do you share your internet connection, using a router or a windows computer connecting via pppoe then sharing it via a router(i hope this is not the case)?

  • fane_j Level 4 Level 4 (3,655 points)
    Currently Being Moderated
    Feb 22, 2012 1:32 PM (in response to lsolson)

    lsolson wrote:

     

    The guy at comcast told me if I don't get rid of this "bot" they are going to shut my internet off after March 6th.

    It doesn't matter what utility you scan with. If you don't run Win, you cannot have this malware. It's as simple as that. You need to escalate the matter with Comcast.

  • boink boink Level 2 Level 2 (280 points)
    Currently Being Moderated
    Feb 22, 2012 4:59 PM (in response to lsolson)

    can you check the dhcp client list on your router? then cross check it with the devices you have.

     

    there is a possibility that someone nearby might have hacked into your network. you can also try changing your WPA password and network name.

  • MadMacs0 Level 4 Level 4 (3,330 points)
    Currently Being Moderated
    Feb 23, 2012 12:21 AM (in response to boink boink)

    If you are Unix savy, there's always bothunter.

     

    I know there's a web site that purports to test for bots, but I can't seem to find it at the moment.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.