I'm getting someone elses logs???

I started using opendns about 2 months ago, and have a dynamic IP. I have the Opendns IP updater. It seems that I'm getting SOMEONE ELSES logs. Some of the activity IS ours at times, but some of it has NOTHING to do with our family and I can only conclude that it belongs to another user (login pages to universities a state away, login pages to remote fleet management, xfinity wifi login page, which we don't have, etc.) . The same strange queries keep coming up (like the xfinity logins and other pages that keep reoccuring days apart)

This happens on days where my IP hasn't changed for days (so it's not a fluke that happens on a "change" day, as I have been told by some people).

I frequently get the HTTP IP / DNS IP Mismatch error. I figured out that this is because Tmobile (my isp) hijacks NXdomain responses, so my DNS Ip is 198.105.244.104. At least that's what the Opendns updater tells me. This is not the same IP listed at the top of my dashboard, or the IP that updates when the updater runs. I was told by my ISP that I have a private, dedicated dynamic IP. And that if i upgrade to get a static IP, these problems will probably go away and the logs will be mine.

Does anyone have any insight here??? I don't want to go through all of that (it requires yet another router upgrade) if it isn't going to help. I will still have the same ISP, only static. I'm not even sure this will change anything??

rotblitz November 28, 2019 01:35 (Edited November 28, 2019 01:37)

The IP address mismatch indicates that your ISP is proxying at least your DNS traffic. Further, your DNS IP address is shared with other users. This is why you see traffic also from other people. The only chance to get out of this is not another router, but that you can opt out of this proxying.

I am also not sure if their static IP address option will help.

ravensroots2 November 28, 2019 11:36

I asked about opting out (bc I saw another post about this issue), and they said it wasn't possible. Can you elaborate about my ip being shared? I was told it was "dedicated", as opposed to shared. It sure doesn't seem that way and I don't know if the guy had any idea what he was talking about.

ravensroots2 November 28, 2019 11:39

I used the myip.dnsomatic.com link and it lists not the Tmobile hijack ip but the one at the top of my opendns dashboard.

rotblitz November 29, 2019 08:50

I really do not know how I could elaborate on a shared IP address. This is the case if an IP address is being assigned to multiple users. In your case it seems to affect the DNS IP address.

I'm getting someone elses logs???

Comments

Didn't find what you were looking for?