COX​ ​DNS​ ​Hijacking​ ​and​ ​VPN​ ​woes.

Got​ ​a​ ​call​ ​from​ ​a​ ​customer​ ​that​ ​he​ ​was​ ​able​ ​to​ ​connect​ ​to​ ​the​ ​VPN​ ​fine,​ ​but​ ​was​ ​not​ ​able​ ​to browse​ ​to​ ​any​ ​of​ ​the​ ​local​ ​resources.​ ​I​ ​log​ ​on,​ ​poke​ ​around,​ ​find​ ​out​ ​nothing.​ ​I​ ​do​ ​some​ ​more poking.​ ​I​ ​discover​ ​that​ ​Tracerts​ ​to​ ​any​ ​of​ ​the​ ​resources​ ​over​ ​the​ ​VPN​ ​resolve​ ​to​ ​this​ ​strange​ ​IP, 92.242.140.2​ ​and​ ​then​ ​start​ ​timing​ ​out.

Weird.​ ​I​ ​also​ ​notice,​ ​but​ ​look​ ​over,​ ​the​ ​fact​ ​that​ ​every​ ​website​ ​seems​ ​to​ ​go​ ​to​ ​some​ ​stupid​ ​yahoo affiliate​ ​thing​ ​for​ ​COX​ ​communications.​ ​After​ ​Googling​ ​92.242.140.2,​ ​I​ ​discover​ ​that​ ​it's​ ​from some​ ​crappy​ ​company​ ​called​ ​"Barefruit​ ​Ltd."​ ​that​ ​works​ ​with​ ​COX​ ​to​ ​redirect​ ​search​ ​results​ ​to some​ ​crappy​ ​yahoo​ ​page.​ ​I​ ​am​ ​not​ ​the​ ​only​ ​who​ ​has​ ​this​ ​issue,​ ​if​ ​you​ ​look​ ​up​ ​"C ​ OX​ ​DNS​ ​VPN​" in​ ​Google​ ​you'll​ ​see​ ​I​ ​am​ ​not​ ​the​ ​first​ ​to​ ​find​ ​this​ ​out.​​ ​I​ ​was​ ​able​ ​to​ ​pull​ ​up​ ​an​ ​article​ ​for​ ​the​ ​poor guy​ ​to​ ​find​ ​out​ ​how​ ​to​ ​opt​ ​out,​ ​complete​ ​with​ ​screenshots.​ ​For​ ​the​ ​more​ ​veteran​ ​user​ ​you​ ​can jump​ ​straight​ ​here​ ​to​ ​opt​ ​out

Fuck​ ​Cox. Posted​ ​28th​ ​October​ ​2013​ ​by​ ​Brett​ ​Larson 6

View​ ​comments

1. 2. Ryan​ ​Witholt​May​ ​26,​ ​2014​ ​at​ ​5:15​ ​PM 3. Thank​ y​ ou​ ​for​ ​making​ ​this​ ​easy.​ ​And​ ​I​ ​second​ ​your​ ​sentiments:​ ​Fuck​ ​Cox 4. Reply 5. 6. Anonymous​August​ ​15,​ ​2014​ ​at​ ​8:03​ ​AM 7. Excellent!​ ​Not​ ​sure​ ​what​ ​problems​ ​other​ ​people​ ​have​ ​had,​ ​but​ ​that​ ​"Enhanced​ ​Error" thing​ ​had​ ​been​ ​driving​ ​me​ ​nuts,​ ​providing​ ​nothing​ ​useful​ ​but​ ​forcing​ ​me​ ​to​ ​retype​ ​an entire​ ​url​ ​if​ ​it​ ​had​ ​a​ ​single​ ​typo. 8. Reply

9. 10. Alex​ ​Swanson​November​ ​8,​ ​2014​ ​at​ ​6:47​ ​AM 11. I​ ​am​ ​experiencing​ ​this​ ​also​ ​and​ ​found​ ​your​ ​post​ ​by​ ​googling​ ​that​ I​ P​ ​address​.​ ​WTF. 12. Reply 13. 14. Anonymous​March​ ​11,​ ​2015​ ​at​ ​2:47​ ​PM 15. I​ ​know​ ​its​ ​late,​ ​but​ ​this​ ​was​ ​the​ ​most​ ​informative​ ​thing​ ​I​ ​found​ ​about​ ​the​ ​issue.​ ​Thank​ ​you kind​ ​person! 16. Reply

17. 18. XweAponX​​ ​May​ ​5,​ ​2015​ ​at​ ​3:14​ ​PM 19. I​ ​just​ ​saw​ ​this​ ​today,​ ​I​ ​noticed​ ​"Barefruit"​ ​being​ ​blocked​ ​by​ ​a​ ​peer​ ​blocking​ ​program​ ​I use,​ ​it's​ ​never​ ​happened​ ​before,​ ​so​ ​it's​ ​got​ ​to​ ​be​ ​something​ ​new​ ​for​ ​my​ ​region.​ ​Now​ ​that I​ ​know​ ​what​ ​it​ ​is,​ ​I​ ​can​ ​block​ ​the​ ​hell​ ​out​ ​of​ ​it.​ ​I​ ​don't​ ​allow​ ​any​ ​of​ ​Cox's​ ​alleged​ ​security programs​ ​and​ ​helper​ ​apps​ ​to​ ​be​ ​installed. 20. Reply IS​ ​THIS?