quick menu

FIOS DNS Hack Directed to unallocated.barefruit.co.uk92.242.140.21

FIOS DNS Hack Directed to unallocated.barefruit.co.uk92.242.140.21

SOLVED
Reply
Contributor ndccpf1
Contributor
Posts: 4
Registered: ‎05-03-2011
Message 1 of 18
(35,492 Views)

For the past 3 days the DNS for me (and people I know from work that have FIOS) has been correupted by what appears to be a DNS hack / re-direct to barefruit.co.uk92.242.140.21. This is causing super slow resolve times for websites, super SLOW connection times for the office VPN and lack of DNS at home to reach machines via their hostnames (IP address works).

 

I logged a ticket two days ago to Verizon but this is still an issue. Can the real network (not voice) engineers at Verizon resolve this ?

 

Example: (code1.emi.philips.com appends from our office naming convention)

nslookup www.cnn.com
Server:  Wireless_Broadband_Router.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    www.cnn.com.code1.emi.philips.com
Address:  92.242.140.21

General IP Information
IP: 92.242.140.21
Decimal: 1559399445
Hostname: unallocated.barefruit.co.uk
ISP: Barefruit Ltd.
Organization: Barefruit Ltd.
Services: None detected
Type: 
Assignment: Static IP

17 REPLIES 17
Gold Contributor II Gold Contributor II
Gold Contributor II
Posts: 2,153
Registered: ‎11-10-2009
Message 2 of 18
(35,481 Views)

This is a peer support group.  We are users just like you.

You need to contact tech support if it is still an issue.

Platinum Contributor III Platinum Contributor III
Platinum Contributor III
Posts: 7,309
Registered: ‎12-15-2010
Message 3 of 18
(35,447 Views)

This might be the result of Verizon's DNS redirection on nxdomain responses. It's possible Verizon's DNS is yet again broken.

 

If you want to use Verizon's DNS services instead of servers like OpenDNS, do this. Take the IP addresses of the DNS Servers your router shows, and change the last digit from 12 to 14. This will give you proper DNS. If changing the DNS Sever doesn't fix the problem, let us know.

Platinum Contributor I
Platinum Contributor I
Posts: 5,881
Registered: ‎07-22-2009
Message 4 of 18
(35,441 Views)

Good option, also try emailing that kind of issue to DNS@verizon.com and see if they can help.

Platinum Contributor I
Platinum Contributor I
Posts: 5,881
Registered: ‎07-22-2009
Message 5 of 18
(35,429 Views)

if it's a dns hack, changing your dns would fix it.

 

if that doesn't fix it, you might have a different problem, in that case post a traceroute

Contributor de7054814
Contributor
Posts: 1
Registered: ‎08-04-2014
Message 6 of 18
(35,388 Views)

Monday August 4th 6AM EST

 

I noticed this address as well. Outgoing excerpt from my router log '92.242.140.21:427'.

 

Who is results . . .

 

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '92.242.140.0 - 92.242.140.255'

% Abuse contact for '92.242.140.0 - 92.242.140.255' is 'abuse@barefruit.co.uk'

inetnum:        92.242.140.0 - 92.242.140.255
netname:        BAREFRUIT-ERRORHANDLING
descr:          BAREFRUIT-US-ANYCAST-A
country:        GB
org:            ORG-BL53-RIPE
admin-c:        PR42-RIPE
tech-c:         PR42-RIPE
status:         ASSIGNED PA
mnt-by:         CATALYST2-MNT
source:         RIPE # Filtered

{Edited to comply with guidelines}

mnt-by: CATALYST2-MNT source: RIPE # Filtered nic-hdl: PR42-RIPE % Information related to '92.242.140.0/24AS45028' route: 92.242.140.0/24 descr: BF-MC-1 origin: AS45028 mnt-by: CATALYST2-MNT source: RIPE # Filtered
Contributor Elysiom
Contributor
Posts: 1
Registered: ‎08-04-2014
Message 7 of 18
(35,305 Views)
I work as a System Admin in the Northeast for a mid sized company, we started seeing this last week on Wednesday (July 30th)

VPN'd users on FiOS are having all sorts of name resolution issues, everything resolves to this address even if it doesn't exist (should return NXDOMAIN), as soon as we change the user's local DNS from Verizon to Google / Open DNS etc. everything starts working again.

This is extremely frustrating (I'm a FiOS customer as well) I opened a ticket and they denied any issues with their DNS and to top it off the network technician refused to talk to me on the phone and rather suggesting it's all "on our end".... The issue was swept under the rug instead of being seriously dealt with.
Contributor jeckard
Contributor
Posts: 1
Registered: ‎08-07-2014
Message 8 of 18
(35,112 Views)

This problem caused havoc with our VPN as well which is how we discovered it.  Switching DNS severs fixed the problem.

Contributor djjsin
Contributor
Posts: 4
Registered: ‎07-11-2014
Message 9 of 18
(35,080 Views)

I'm having this same issue.  this has broken my companies VPN system.  Nothign resolved properly anymore on a fios connection.

Highlighted
Contributor djjsin
Contributor
Posts: 4
Registered: ‎07-11-2014
Message 10 of 18
(35,038 Views)

I got a response from Verizon today about this.

 

"This is expected bahavior.  The Verizon Online DNS resolvers have NXDOMAIN redirection services that redirect any unknown host to a sponsored search page.  You can opt out of this by changing your resolver from .12 to .14."

How-To Videos
 
The following videos were produced by users like you!
   
Videos are subject to the Verizon Fios Community Terms of Service and User Guidelines and contains content that is not created by Verizon.


Verizon Troubleshooters
Unable to find your answer here? Try searching Verizon Troubleshooters for more options.
 

My Verizon

  • Add or Change Plan
  • Suspend My Service
  • Apps

Support

Watch Fios