Intermittent Disconnections

Need Help?

That's what we're here for! The goal of the Rogers Community is to help you find answers on everything Rogers. Can't find what you're looking for? Just ask!
cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
I Plan to Stick Around
Posts: 23

Re: Intermittent Disconnections

Hi Asif,

 

The tech was just here. He said the signal is good. The problem recurred. This is the specific URL that is timing out: http://64.71.255.194/dyn/bg/ByteCap/index.js 

 

I feel pretty certain at this point it's tied to the usage notification.

 

-Jason

I Plan to Stick Around
Posts: 23

Re: Intermittent Disconnections

Here is the full code using the Opera Developer Tools:

 

<html><head><noscript><meta http-equiv="refresh" content="0;URL=http://64.71.255.194/cgi-bin/noscript.pl?policy=351&category=ByteCap-100"></noscript><title></title>... type="text/javascript">var version=2; var webServer="http://64.71.255.194";</script><script type="text/javascript" src="http://64.71.255.194/dyn/bg/ByteCap/index.js"></script></head><noscript><frameset><frame src="http://64.71.255.194/cgi-bin/noscript.pl?policy=351&category=ByteCap-100"></frameset></noscript><bod... style="margin:0;"><script type="text/javascript">Bulletin("policy=351&category=ByteCap-100");</script></body></html>

Highlighted
Retired Moderator RogersAsif
Retired Moderator
Posts: 700

Re: Intermittent Disconnections

Hi Jason

 

Very sorry to hear that you are still experiencing issuesSmiley Sad I can understand the frustration so I would like to thank you for your patience.

 

I am going to have someone from the @CommunityHelps team reach out to you via Private Message. Please check your inbox shortly.

 

RogersAsif

 

 

I'm Here A Lot
Posts: 7

Re: Intermittent Disconnections

I too am randomly I receiving the following header with added script appended to an http get response and the IP address appears to be owned by Rogers.  I have seen it when pulling up google.ca or other non-Rogers affiliated webpages.  The address 64.71.255.194 appears to be offline but it hangs up browser looking for it.  I also noticed that when block by script blocker the detination page does not load.  As I have my cable modem in gateway mode I am able to pull a packet capture directly of the front of my firewall proving that this is coming in from outside my house.

 

Sample:

<html><head><noscript><meta http-equiv="refresh" content="0;URL=http://64.71.255.194/cgi-bin/noscript.pl?policy=350&category=ByteCap-075"></noscript><title></title>... type="text/javascript">var version=2; var webServer="http://64.71.255.194";</script><script type="text/javascript" src="http://64.71.255.194/dyn/bg/ByteCap/index.js"></script></head><noscript><frameset><frame src="http://64.71.255.194/cgi-bin/noscript.pl?policy=350&category=ByteCap-075"></frameset></noscript><bod... style="margin:0;"><script type="text/javascript">Bulletin("policy=350&category=ByteCap-075");</script></body></html>

 

I am very concerned as to why this would be injected into a http stream, and most concerning is it appearst o be coming from my ISP (i.e. Rogers).

 

Resident Expert
Resident Expert
Posts: 6,140

Re: Intermittent Disconnections

Are you using Rogers DNS?  If so, I wonder what you would see if you switched to Google or OpenDNS?



I'm Here A Lot
Posts: 7

Re: Intermittent Disconnections

Good question.  No, I use Google DNS currently, I switched weeks ago from OpenDNS when they had service issues.  But this is not a case of DNS resolving to the wrong name.  This appears in the HTTP stream originating from the correct web server.  Somewhere between the source web server and my machine this script request is added.  Very strange.

Resident Expert
Resident Expert
Posts: 6,140

Re: Intermittent Disconnections

Which then begs the question:  what does it do, and why is it sourced from a Rogers address?



I'm Here A Lot
Posts: 7

Re: Intermittent Disconnections

Exactly!  As a Security Pro I have attempted to aquire the targeted script in hopes to understand it's purpose but unfortunately the web server hosting that script does not appear to be running.

Resident Expert
Resident Expert
Posts: 6,140

Re: Intermittent Disconnections

Food for thought.  Load Adblock Plus, if you run Firefox or Chrome.  In the Firefox version, under the Filter Preferences, there is a check box to select / deselect "Allow some non-intrusive advertising"  I have that deselected.  But I also have other blockers loaded and I don't see any hang-ups on web pages, or at least, so I think.



I'm Here A Lot
Posts: 7

Re: Intermittent Disconnections

I do run Adblock Plus but also NoScript.  I have found that the page does not load anytime the 64.71.255.194 js is "injected" even on browsers without any extensions or plugins.  The only reliable solution I found is to refresh the page and when the "injection" does not take place the page loads.  The bottom line here to understand is why is their a MITM Javascript Injection into the HTTP stream.  That is what needs to get resolved.