Apologies if this is in the wrong place, too small text etc, I've just signed up.

I'm using a 56K dial-up account with an ISP in Thailand. Last night I tried to connect to www.antiwar.com via a 'Bookmark', there was a pause and then a 'page unavailable' screen came up, and 203.146.129.137:10000 (port 10000!) was in the address bar. I found a website to convert 'www.antiwar.com' into numerals, pasted that in the address bar and the site loaded fine. Then out of curiosity I pasted the above address, 203.146.129.137, into the address bar without the port suffix and a Ragnarok game page in Thai loaded. All the other links I used in my favourites list seemed normal; however, I went to a RIPE query page, www.ripe.net/whois, clicked the link at the bottom of the page for ARIN, that loaded normally, and then when I clicked the APNIC link there was a pause and a 'page unavailable' screen appeared, with the same address but port 9000, 203.146.129.137:9000.

The strange thing is, a couple of days ago I reconfigured my connection to point at the OpenDNS servers, www.opendns.com, and used a trick they explain on their website to verify that I was in fact using them. It seemed highly unlikely, if not impossible, that they'd been hacked by Thai gamers. Just for comparison I disconnected, changed my DNS settings back to automatic allocation, reconnected and got exactly the same results with the same bookmark and page link from my ISP's DNS servers, but the port eventually changed to 6009. Even though I'd been using the latest version of Opera with javascript turned off I got paranoid, updated all the anti-malware stuff on my computer, disconnected and checked with Ad-aware, Spybot, AntiVir, AVG Anti-Spyware and Blacklight, with absolutely nothing flagged up by any of them. Is it safe to assume that this was some kind of server pollution or infection, and if so does it sound familiar to anyone, (and is there any way to protect myself from it in future)? According to Idserve my ISP is running Apache.

Many thanks for any ideas people might have, sorry if it takes me a while to post any further comments due to time difference etc

Greetings,

VictorMeldrew
Welcome to CastleCops!

It appears that the IP address range, 203.146.129.0-255, has been reassigned - see the report below: