I noticed a bizarre issue where on a particular forum using Simple Machines software (SMF 2.0.13) that at the bottom of the page I was getting a lot of 'trash' text. A mixture of nonsensical strings of text and hyperlinks to Viagra sites. Through a process of elimination that has been tracked back to certain Verizon Fios IP addresses. These are the steps that were taken: Initially the problem was thought to be the forum, but other members around the globe did not see the issue. Then I thought it was my computer, but all computers in my household exhibited the same problem, even a computer that had been in storage for a year. Finally the problem was linked to the Google adverts on the page, when the admin turned them off, the trash disappeared. The thought was something took advantage of the Google page code injector to add the trash at the end of the page. Since only I was seeing the issue, and it effected all my devices, the suspicion turned towards the router. Resetting that did not eliminate the problem. However, setting up a VPN and using a different IP address did. The problem went away on its own for a while, and came back. It seems that certain Vios IP DSN tables have some sort of corruption, and this manifests itself (how, I do not know) in an exploitation of the Google (an acquaintance thinks via Google Analytics?) ad software. If I use a VPN like TunnelBear or the Google DNS table at 8.8.8.8, the trash immediately disappears. If I switch back to the default 'automatically acquire IP', the trash test reappears. The reason it when away and reappeared depends on which IP form the Fios pool is grabbed. One of the ones in Malvern, PA manifested the problem; unfortunately I did not write down the address at the time. When the problem went away for a few weeks, either that site’s DNS table got cleaned up or I had moved on to another. Then with the problem back, I see I was using a Verizon Fios Philadelphia IP of 96.245.184.46 which displayed the trash. I got it to acquire a new IP and while it is still a Philadelphia IP, it is now 72.94.255.210 and does not display the trash text. Given that hacked DNS tables can be a serious security risk, I am very concerned as to what is going on that I cannot see (beyond the trash text). Is my broadband being redirected via servers that are recording my online registrations and logins? -Doug
↧