Weird IP hammering my connection-Hacked?

[vinnythejinny]

Since yesterday, whenever i open any webpage in chrome, FF or any other browser, it shows a weird IP at the bottom being accessed to load the page.

I first noticed it while accessing WF but later i found its across the board on any webpage.

The IP range is this,

64.19.142.12
64.19.142.11
64.19.142.13
64.19.142.10
64.19.142.14

little investigation, I found it belongs to, Monmouth Internet Corp

IP address 64.19.142.12 is in
Lyndhurst, United States

I am still not sure WTF is with this IP range and why does it always access it first before loading any page as if its some proxy.

I tried blocking this in HOSTS file in Windows 7 which doesn't seem to work.

i would really appreciate the help. Does HOSTS file block all internet activity or only browser based stuff?

 

[m0rtal]

T-Mobile Using Image Compression Proxy? - Android Forums ?

 

[vinnythejinny]

yeah mortal i saw that post but it doesn't make any sense. Just to update, i now blocked the entire IP range in windows firewall rules. I guess need to restart before its appplied?

 

[ilovewf]

if it doesnt work, try contact your ISP..

 

[nasha]

flush the DNS after changing the hosts file.

ipconfig /flushdns

 

[vinnythejinny]

Looks like fixed for now, but will monitor for next few days. Thanks everyone

 

[lincolndsp]

check your dns settings in tcp/ip settings
maybe just a virus that forces all connections to go through malicious DNSs

 

[vinnythejinny]

thanks lincoln. Checked DNS settings for IPV6 and IPV4 for both LAN and net connection both have no DNS setup. Its auto-DNS.

Then i checked using ipconfig /all, which shows DNS starting with 202

that means those IPs are something else