OpenDNS Updater shows different IP address in Russia

Comments

4 comments

  • Avatar
    dustyinlvnv

    I found more to this. I did a nslookup to this IP address and a tracert to google.com. The nslookup to this IP address is the same IPv6 address in my first hop to google with an "unknown" resolver , the IPv4 address comes up as unallocated.barefruite.co.uk.

  • Avatar
    dustyinlvnv

    I figured out the issue. I had recently factory defaulted my router and rebuilt the settings manually instead of by backup config. I forgot to setup my IPv6 DNS server, so I was using Cox Communications DNS. They are hijacking DNS entries to http://www.barefruit.com/ which states they

    Generating highly targeted traffic by replacing DNS and HTTP errors with relevant advertising

    Check out the below blog for a full explanation about how ISPs perform this unethical practice. Once I updated my IPv6 DNS to OpenDNS's the error went away.


    https://manurevah.com/blah/en/blog/DNS-Hijacking-via-Barefruit-Talktalk-and-Others

  • Avatar
    rotblitz (Edited )

    You could have saved these efforts with a search for barefruit in the forum.
    https://support.opendns.com/hc/en-us/search?utf8=%E2%9C%93&query=barefruit

  • Avatar
    dustyinlvnv

    I didn't know it was barefruit until after my initial post and why would I think OpenDNS would have any information on a random russian IP address that I knew nothing about until after I researched it?
    Thanks for the unnecessary comment though.

Please sign in to leave a comment.