Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Recently when I browse some multi-language websites, the default language becomes Russian.

An example is which redirects me to

I am sure I don't specified any change to my browser/computer language options.

I even tried on my friend's laptop. same result.

Based on the recent unrest and political issues in my country (Iran) and good relations between Iran regime and Russia, I guess they are redirecting our requests to Russia to monitor our traffic by their technologies.

How can I tell this is a regular thing (maybe misconfiguration of DNS or something) or an vicious action of the dictator?

here is the output of tracert

Tracing route to []
over a maximum of 30 hops:

  1     1 ms     4 ms     1 ms  SHOHADAROUTER []
  2    17 ms    27 ms     *
  3    13 ms    15 ms     7 ms
  4    92 ms    98 ms   103 ms
  5   199 ms    89 ms     *
  6   115 ms     *      162 ms
  7   561 ms    89 ms   156 ms
  8   106 ms   101 ms   110 ms
  9     *      188 ms   199 ms [213.24
 10   192 ms   195 ms   192 ms []
 11   204 ms   214 ms   206 ms []
 12     *      227 ms   220 ms []
 13   240 ms   329 ms   246 ms []
 14   280 ms   345 ms   284 ms []
 15   276 ms   232 ms   264 ms []
 16   167 ms   179 ms     * [213.15
 17   163 ms   169 ms   162 ms [213.15

Trace complete.
share|improve this question

migrated from Apr 11 '11 at 19:24

This question came from our site for computer enthusiasts and power users.

closed as off topic by coredump, EEAA, Ben Pilbrow, Chris S, RobM Apr 11 '11 at 19:41

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

Why in the world was this migrated from superuser? IMHO it needs to go back there. – EEAA Apr 11 '11 at 19:29
IMHO Maybe because it is related to networking and network configuration issues. It is not a problem of special person or computer. – Isaac Apr 11 '11 at 19:36
@Isaac - read the FAQ. SF is "Server Fault is for system administrators and desktop support professionals, people who manage or maintain computers in a professional capacity." – EEAA Apr 11 '11 at 19:38
@Isaac - the difference is that we'd drown in "why can't I get to Plz help. kthx" type questions if we allowed anyone to post. The superuser community is more than capable of providing an adequate answer to this question, so it's unfortunate that a single moderator there thought (incorrectly IMHO) that it should be migrated. – EEAA Apr 11 '11 at 20:01
@Isaac - FYI, after a short discussion with one of the SU mods, your question has been re-opened over there:… – EEAA Apr 11 '11 at 21:59

No one is "spying" on your internet connection. This symptom is most likely due to an incorrect entry in the database of whatever IP Geolocation system being used by the website of interest.

share|improve this answer
+1 Note: I've noticed problems like this when using Firefox 4.0 that has been upgraded from a previous version. Basically it's region setting got corrupted in the upgrade; from what I've seen it's sort of a common issue. – Chris S Apr 11 '11 at 19:37
But as far as i know, Iran never had it's bandwidth from Russia. Iran gets internet connection from Turkey and some Arabian countries. – Isaac Apr 11 '11 at 19:39
@Chirs S: i am still using firefox 3.6. I have same problem with IE and my friends' laptops. Clearly this is a network issue. – Isaac Apr 11 '11 at 19:39
@Isaac - it's not a network issue. As mentioned in my answer, it's an IP Geolocation issue, which can only be fixed by the owner of the Geo database. – EEAA Apr 11 '11 at 19:41
The regime is really interested in this kind of things. They just hacked gmail certificates: – Isaac Apr 11 '11 at 19:44

Not the answer you're looking for? Browse other questions tagged or ask your own question.