quick menu

FIOS DNS Hack Directed to unallocated.barefruit.co.uk92.242.140.21

FIOS DNS Hack Directed to unallocated.barefruit.co.uk92.242.140.21

SOLVED
Reply
Contributor ndccpf1
Contributor
Posts: 4
Registered: ‎05-03-2011
Message 1 of 18
(32,799 Views)

For the past 3 days the DNS for me (and people I know from work that have FIOS) has been correupted by what appears to be a DNS hack / re-direct to barefruit.co.uk92.242.140.21. This is causing super slow resolve times for websites, super SLOW connection times for the office VPN and lack of DNS at home to reach machines via their hostnames (IP address works).

 

I logged a ticket two days ago to Verizon but this is still an issue. Can the real network (not voice) engineers at Verizon resolve this ?

 

Example: (code1.emi.philips.com appends from our office naming convention)

nslookup www.cnn.com
Server:  Wireless_Broadband_Router.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    www.cnn.com.code1.emi.philips.com
Address:  92.242.140.21

General IP Information
IP: 92.242.140.21
Decimal: 1559399445
Hostname: unallocated.barefruit.co.uk
ISP: Barefruit Ltd.
Organization: Barefruit Ltd.
Services: None detected
Type: 
Assignment: Static IP

17 REPLIES
Gold Contributor II Gold Contributor II
Gold Contributor II
Posts: 2,153
Registered: ‎11-10-2009
Message 2 of 18
(32,788 Views)

This is a peer support group.  We are users just like you.

You need to contact tech support if it is still an issue.

Platinum Contributor II Platinum Contributor II
Platinum Contributor II
Posts: 7,254
Registered: ‎12-15-2010
Message 3 of 18
(32,754 Views)

This might be the result of Verizon's DNS redirection on nxdomain responses. It's possible Verizon's DNS is yet again broken.

 

If you want to use Verizon's DNS services instead of servers like OpenDNS, do this. Take the IP addresses of the DNS Servers your router shows, and change the last digit from 12 to 14. This will give you proper DNS. If changing the DNS Sever doesn't fix the problem, let us know.

Platinum Contributor I
Platinum Contributor I
Posts: 5,881
Registered: ‎07-22-2009
Message 4 of 18
(32,748 Views)

Good option, also try emailing that kind of issue to DNS@verizon.com and see if they can help.

Platinum Contributor I
Platinum Contributor I
Posts: 5,881
Registered: ‎07-22-2009
Message 5 of 18
(32,736 Views)

if it's a dns hack, changing your dns would fix it.

 

if that doesn't fix it, you might have a different problem, in that case post a traceroute

Contributor de7054814
Contributor
Posts: 1
Registered: ‎08-04-2014
Message 6 of 18
(32,695 Views)

Monday August 4th 6AM EST

 

I noticed this address as well. Outgoing excerpt from my router log '92.242.140.21:427'.

 

Who is results . . .

 

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '92.242.140.0 - 92.242.140.255'

% Abuse contact for '92.242.140.0 - 92.242.140.255' is 'abuse@barefruit.co.uk'

inetnum:        92.242.140.0 - 92.242.140.255
netname:        BAREFRUIT-ERRORHANDLING
descr:          BAREFRUIT-US-ANYCAST-A
country:        GB
org:            ORG-BL53-RIPE
admin-c:        PR42-RIPE
tech-c:         PR42-RIPE
status:         ASSIGNED PA
mnt-by:         CATALYST2-MNT
source:         RIPE # Filtered

{Edited to comply with guidelines}

mnt-by: CATALYST2-MNT source: RIPE # Filtered nic-hdl: PR42-RIPE % Information related to '92.242.140.0/24AS45028' route: 92.242.140.0/24 descr: BF-MC-1 origin: AS45028 mnt-by: CATALYST2-MNT source: RIPE # Filtered
Contributor Elysiom
Contributor
Posts: 1
Registered: ‎08-04-2014
Message 7 of 18
(32,612 Views)
I work as a System Admin in the Northeast for a mid sized company, we started seeing this last week on Wednesday (July 30th)

VPN'd users on FiOS are having all sorts of name resolution issues, everything resolves to this address even if it doesn't exist (should return NXDOMAIN), as soon as we change the user's local DNS from Verizon to Google / Open DNS etc. everything starts working again.

This is extremely frustrating (I'm a FiOS customer as well) I opened a ticket and they denied any issues with their DNS and to top it off the network technician refused to talk to me on the phone and rather suggesting it's all "on our end".... The issue was swept under the rug instead of being seriously dealt with.
Contributor jeckard
Contributor
Posts: 1
Registered: ‎08-07-2014
Message 8 of 18
(32,419 Views)

This problem caused havoc with our VPN as well which is how we discovered it.  Switching DNS severs fixed the problem.

Contributor djjsin
Contributor
Posts: 4
Registered: ‎07-11-2014
Message 9 of 18
(32,387 Views)

I'm having this same issue.  this has broken my companies VPN system.  Nothign resolved properly anymore on a fios connection.

Contributor djjsin
Contributor
Posts: 4
Registered: ‎07-11-2014
Message 10 of 18
(32,345 Views)

I got a response from Verizon today about this.

 

"This is expected bahavior.  The Verizon Online DNS resolvers have NXDOMAIN redirection services that redirect any unknown host to a sponsored search page.  You can opt out of this by changing your resolver from .12 to .14."

How-To Videos
 
The following videos were produced by users like you!
   
Videos are subject to the Verizon Fios Community Terms of Service and User Guidelines and contains content that is not created by Verizon.
My Fios App

Verizon Troubleshooters
Unable to find your answer here? Try searching Verizon Troubleshooters for more options.
 

My Verizon

  • Add or Change Plan
  • Suspend My Service
  • Apps

Support

Watch Fios