Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
abusive_isps [2018-09-22T01:01:37Z]
fusl [Abusive ISP List]
abusive_isps [2019-05-22T16:24:22Z] (current)
fusl
Line 32: Line 32:
 This list is very incomplete. If you are certain that your ISP is hijacking DNS or is involved in other questionable practices, please add it below. This list is very incomplete. If you are certain that your ISP is hijacking DNS or is involved in other questionable practices, please add it below.
  
-^ Country ​       ^ ISP            Reported ​  ^ Source ​                    ​^ ​53/​udp ​DPI ^ Level                            ^ Notes ^ +^ Country ​       ^ ISP       ​Earliest report ^ Last seen  ​^ Source ​                    ^ DPI ^ Level                            ^ Notes ^ 
-| Austria ​       | 3 / drei.at ​   | 2018-01-28 | [[user:​fusl]] ​             | no         ​| NXDOMAIN search engine redir     | NXDOMAIN redirect to ''​213.94.80.190'',​ {{:​abusive_isps:​h3gat.txt|proof}} | +| Taiwan ​        | HiNet          | 2019-01-16 |            | [[user:​fusl]] ​             | no  | blocking of selective domains ​   | Returns NXDOMAIN for some very specific domains, hijacking common public DNS resolvers like Google, OpenDNS and CloudFlare, Quad9 seems to be unaffected | 
-| -              | Vultr/​Choopa ​  | 2017-11-03 | [[user:​fusl]] ​             | yes        | blocking of selective domains ​   | [[https://​en.wikipedia.org/​wiki/​Deep_packet_inspection|DPI]] on UDP/53, blocks any DNS request containing the text ''​minexmr.com.''​ in the query name ({{:​abusive_isps:​vultr.png?​linkonly|proof}}) | +| Austria ​       | 3 / drei.at ​   | 2018-01-28 ​|            ​| [[user:​fusl]] ​             | no  | NXDOMAIN search engine redir     | NXDOMAIN redirect to ''​213.94.80.190'',​ {{:​abusive_isps:​h3gat.txt|proof}} | 
-| United States ​ | CenturyLink ​   | 2017-08-28 | //some user// on #​opennic ​ | no         ​| NXDOMAIN search engine redir     | Reproduced by [[:​user:​fusl]] - NXDOOMAIN redirect to ''​198.105.244.23'' ​and ''​198.105.245.23'' ​which redirects ​to ''​http://​webhelper.centurylink.com/​index.php?​origURL=opennic&​r=&​bc=''​ |  +| -              | Vultr/​Choopa ​  | 2017-11-03 ​|            ​| [[user:​fusl]] ​             | yes | blocking of selective domains ​   | [[https://​en.wikipedia.org/​wiki/​Deep_packet_inspection|DPI]] on UDP/53, blocks any DNS request containing the text ''​minexmr.com.''​ in the query name ({{:​abusive_isps:​vultr.png?​linkonly|proof}}) | 
-| Peru           | Bitel          | 2017-06-23 | Tedel on #​opennic ​         | ?          | ?                                | {{:​abusive_isps:​bitel.txt|IRC conversation log}} | +| United States ​ | CenturyLink ​   | 2017-08-28 ​|            ​| //some user// on #​opennic ​ | no  | NXDOMAIN search engine redir     | Reproduced by [[:​user:​fusl]] - NXDOOMAIN redirect to ''​198.105.244.23''​+''​198.105.245.23'' ​redirecting ​to ''​http://​webhelper.centurylink.com/​index.php?​origURL=<​domain>​&​r=&​bc=''​ |  
-| United States ​ | AT&​T ​          | 2017-03-27 | //​news// ​                  | no         ​| NXDOMAIN search engine redir     | http://​www.att.net/​dnserrorassist/​about/​ ({{:​abusive_isps:​att1.png?​linkonly|screenshot}}),​ https://​forums.att.com/​t5/​AT-T-Internet-Features/​ATT-DNS-Assist-Page/​td-p/​5108480 ({{:​abusive_isps:​att2.png?​linkonly|screenshot}}) | +| Peru           | Bitel          | 2017-06-23 ​|            ​| Tedel on #​opennic ​         | ?   ​| ?                                | {{:​abusive_isps:​bitel.txt|IRC conversation log}} | 
-| United States ​ | T-Mobile US    | 2015-07-20 | thefinn93 on reddit ​       | no         ​| NXDOMAIN search engine redir     | https://​www.reddit.com/​r/​tmobile/​comments/​3dyk1h/​how_do_i_turn_of_nxdomain_hijacking/​ | +| United States ​ | AT&​T ​          | 2017-03-27 ​|            ​| //​news// ​                  | no  | NXDOMAIN search engine redir     ​| ​[[https://​web.archive.org/​web/​20190127173703/​http://​www.att.net/​dnserrorassist/​about/​|ETM Details with Opt-Out Option]] ​({{:​abusive_isps:​att1.png?​linkonly|screenshot}}), ​[[https://​web.archive.org/​web/​20190127173856/​https://​forums.att.com/​t5/​AT-T-Internet-Features/​ATT-DNS-Assist-Page/​td-p/​5108480|ATT DNS Assist Page - AT&T; Community]] ​({{:​abusive_isps:​att2.png?​linkonly|screenshot}}) | 
-| United States ​ | Sprint ​        | 2014-09-05 | sanityvampire on reddit ​   | no         ​| NXDOMAIN search engine redir     | https://​www.reddit.com/​r/​Sprint/​comments/​2fl6pk/​are_sprint_3g_and_4g_towers_hijacking_nxdomain/​ | +| United States ​ | T-Mobile US    | 2015-07-20 ​|            ​| thefinn93 on reddit ​       | no  | NXDOMAIN search engine redir     ​| ​[[https://​web.archive.org/​web/​20190127174032/​https://​www.reddit.com/​r/​tmobile/​comments/​3dyk1h/​how_do_i_turn_of_nxdomain_hijacking/​|How do I turn of NXDOMAIN hijacking? : tmobile]] | 
-| United States ​ | CenturyLink ​   | 2011-12-21 | DSLReports Forums user     | no         ​| NXDOMAIN search engine redir     | [[https://​www.dslreports.com/​forum/​r26682725-|other report]] |  +| Indonesia ​     | Telkom ​        | 2015-04-27 |            | //blog post// ​             | ?   | ?                                | [[https://​web.archive.org/​web/​20190127174121/​https://​www.katyarina.com/​artikel/​item/​36-bagaimana-internet-positif-telkom-bekerja.html|Bagaimana internet positif Telkom bekerja?​]] ​
-| Spain          | ONO            | 2010-05-10 | //blog post// ​             | no         ​| NXDOMAIN search engine redir     | Allowed cross-site-scripting attacks, http://​www.iniqua.com/​2010/​05/​10/​nxdomain-redirect-xss/​ | +| United States ​ | Sprint ​        | 2014-09-05 ​|            ​| sanityvampire on reddit ​   | no  | NXDOMAIN search engine redir     ​| ​[[https://​web.archive.org/​web/​20190127174229/​https://​www.reddit.com/​r/​Sprint/​comments/​2fl6pk/​are_sprint_3g_and_4g_towers_hijacking_nxdomain/​|Are Sprint 3G and 4G towers hijacking NXDOMAIN responses? More information in comments... : Sprint]] ​
-| Australia ​     | Telstra ​       | 2009-11-20 | //news//, CRN Australia ​   | no         ​| NXDOMAIN search engine redir     | [[https://​www.crn.com.au/​news/​bigpond-redirects-typos-to-unethical-branded-search-page-160923|news article]] | +| United States ​ | CenturyLink ​   | 2011-12-21 ​|            ​| DSLReports Forums user     | no  | NXDOMAIN search engine redir     | [[https://​web.archive.org/​web/​20190127174357/​https://​www.dslreports.com/​forum/​r26682725-|Re: [Qwest] Opting out of CenturyLink Web Helper hijacking not w - CenturyLink | DSLReports Forums]] |  
-| United States ​ | RCN            | 2009-10-13 | //blog post// ​             | no         ​| NXDOMAIN search engine redir     | https://​infiniteedge.blogspot.com/​2009/​10/​who-stole-my-web-browser.html | +| Spain          | ONO            | 2010-05-10 ​|            ​| //blog post// ​             | no  | NXDOMAIN search engine redir     | Allowed cross-site-scripting attacks, ​[[https://​web.archive.org/​web/​20180829123420/​http://​www.iniqua.com/​2010/​05/​10/​nxdomain-redirect-xss/​|iniqua » Archive » XSS Reflected dnssearch.Ono.es NXD redirect]] ​
-| United States ​ | Mediacom ​      | 2009-09-25 | YourName on reddit ​        | no         ​| redirection of selective domains | Redirects ''​search.live.com''​ to own search engine, https://​web.archive.org/​web/​20100303205850/​http://​www.reddit.com:80/​r/​programming/​comments/​9o3as/​want_a_real_world_example_of_why_we_need_network | +| Australia ​     | Telstra ​       | 2009-11-20 ​|            ​| //news//, CRN Australia ​   | no  | NXDOMAIN search engine redir     | [[https://​web.archive.org/​web/​20190127174605/​https://​www.crn.com.au/​news/​bigpond-redirects-typos-to-unethical-branded-search-page-160923|BigPond redirects typos to '​unethical'​ branded search page - Collaboration - Networking - CRN Australia]] | 
-| Canada ​        | Bell Internet ​ | 2009-08-04 | timothy on Slashdot ​       | no         ​| NXDOMAIN search engine redir     | https://​tech.slashdot.org/​story/​09/​08/​04/​1512248/​Bell-Starts-Hijacking-NX-Domain-Queries | +| United States ​ | RCN            | 2009-10-13 ​|            ​| //blog post// ​             | no  | NXDOMAIN search engine redir     ​| ​[[https://​web.archive.org/​web/​20190127174651/​https://​infiniteedge.blogspot.com/​2009/​10/​who-stole-my-web-browser.html|InfiniteEdge:​ Who Stole My Web Browser?​]] ​
-| United States ​ | Comcast ​       | 2009-07-28 | //​news// ​                  | no         ​NXDOMAIN ​search engine redir     ​http://​www.theregister.co.uk/​2009/​07/​28/​comcast_dns_hijacker/,​ [[http://​corporate.comcast.com/​comcast-voices/​comcast-domain-helper-shuts-down|disabled ​in August 2009]] | +| United States ​ | Mediacom ​      | 2009-09-25 ​|            ​| YourName on reddit ​        | no  | redirection of selective domains | Redirects ''​search.live.com''​ to own search engine, ​[[https://​web.archive.org/​web/​20100303205850/​http://​www.reddit.com/​r/​programming/​comments/​9o3as/​want_a_real_world_example_of_why_we_need_network|Want a real world example of why we need network neutrality? I have one here. : programming]] ​
-| Germany ​       | T-Online ​      | 2009-04-09 | -                          | no         ​NXDOMAIN ​search engine redir     ​| https://​telekomhilft.telekom.de/​t5/​Browser/​Neues-Leistungsmerkmal-Navigationshilfe/​m-p/​568909#​M1622 ​+| Canada ​        | Bell Internet ​ | 2009-08-04 ​|            ​| timothy on Slashdot ​       | no  | NXDOMAIN search engine redir     ​| ​[[https://​web.archive.org/​web/​20190127174817/​https://​tech.slashdot.org/​story/​09/​08/​04/​1512248/​Bell-Starts-Hijacking-NX-Domain-Queries|Bell Starts Hijacking NX Domain Queries - Slashdot]] ​
-| United States ​ | Optimum Online | 2008-09-25 | -                          | no         ​NXDOMAIN ​search engine redir     ​| [[https://​web.archive.org/​web/​20090813095417/​http://​www.optimum.net/​Article/​DNS|Optimum Online - DNS Assistance]] | +| United States ​ | Comcast ​       | 2009-07-28 ​| 2012-01-01 ​| //​news// ​                  | no  | search engine redir              [[https://​web.archive.org/​web/​20190127174926/​https://​www.theregister.co.uk/​2009/​07/​28/​comcast_dns_hijacker/​|Comcast trials Domain Helper service DNS hijacker • The Register]], [[https://​web.archive.org/​web/​20190127175005/​https://​corporate.comcast.com/​comcast-voices/​comcast-domain-helper-shuts-down|disabled ​2012; Comcast Domain Helper Shuts Down]] | 
-| Canada ​        | Rogers ​        | 2008-07-20 | //​news// ​                  | no         ​HTML ad content injection ​       | http://​www.dslreports.com/​shownews/​Rogers-Uses-Deep-Packet-Inspection-for-DNS-Redirection-96239 | +| Germany ​       | T-Online ​      | 2009-04-09 ​|            ​| -                          | no  | search engine redir              [[https://​web.archive.org/​web/​20190127175144/​https://​telekomhilft.telekom.de/​t5/​Browser/​Neues-Leistungsmerkmal-Navigationshilfe/​m-p/​568909|Neues Leistungsmerkmal '​Navigationshilfe'​ | Telekom hilft Community]] ​
-| Australia ​     | Telstra ​       | 2008-03-15 | //blog post// ​             | no         ​wildcard ​dns redirection ​        ​https://archive.is/​20101210140523/http://​jeffturner.net/​2008/​03/​road-runner-dns-hijack-causing-slow-web-pages/​ | +| United States ​ | Optimum Online | 2008-09-25 ​|            ​| -                          | no  | search engine redir              | [[https://​web.archive.org/​web/​20090813095417/​http://​www.optimum.net/​Article/​DNS|Optimum Online - DNS Assistance]] | 
-| United States ​ | Verizon ​       | 2007-06-21 | -                          | no         ​NXDOMAIN ​search engine redir     ​| https://​www.verizon.com/​support/​residential/​internet/​home-network/​settings/​opt-out-of-dns-assist | +| Canada ​        | Rogers ​        | 2008-07-20 ​|            ​| //​news// ​                  | no  | ad content injection ​            ​[[https://​web.archive.org/​web/​20190127175250/​http://​www.dslreports.com/​shownews/​Rogers-Uses-Deep-Packet-Inspection-for-DNS-Redirection-96239|Rogers Uses Deep Packet Inspection for DNS Redirection - Is hijacking websites for advertising a violation of net neutrality? | DSLReports, ISP Information]] ​
-| United Kingdom | TalkTalk ​      | FIXME      | -                          | no         ​NXDOMAIN ​search engine redir     ​| http://​error.talktalk.co.uk/​main?​FailureMode=14&​LinkType=1 |+| Australia ​     | Telstra ​       | 2008-03-15 ​|            ​| //blog post// ​             | no  | dns redirection ​                 [[http://web.archive.org/web/​20101210140523/​jeffturner.net/​2008/​03/​road-runner-dns-hijack-causing-slow-web-pages/​|Road Runner DNS hijack causing slow web pages | jeff turner]]
 +| United States ​ | Verizon ​       | 2007-06-21 ​|            ​| -                          | no  | search engine redir              [[https://​web.archive.org/​web/​20190127175444/​https://​www.verizon.com/​support/​residential/​internet/​home-network/​settings/​opt-out-of-dns-assist|Opt Out of DNS Assistance | Verizon Internet Support]] ​
 +| United Kingdom | TalkTalk ​      | FIXME      ​|            ​| -                          | no  | search engine redir              [[https://​web.archive.org/​web/​20181018224234/​http://​error.talktalk.co.uk/​main?​FailureMode=14&​LinkType=1|About This Page - TalkTalk]] ​|
  • /wiki/data/attic/abusive_isps.1537578097.txt.gz
  • Last modified: 8 months ago
  • by fusl