Something is wrong with my DNS resolving… and i do not know where to look.
All hostname resolving point to a single iP address: 185.206.144.149
If i ping yahoo or google all traffic is redirected to 185.206.144.149
Also, in my scripts the :resolve is always returning 185.206.144.149
Please help me to fix this.
Which DNS servers have you configured under IP > DNS (/ip dns export OR /ip dns print)?
Try with different DNS-servers to make sure the problem isn’t in your current set of DNS servers.
My DNS settings looks ok to me, i did not make any changes for years.
This problem occurred yesterday without any modification from my side. I also noticed unauthorized attempt to log in into my router viewtopic.php?f=2&t=139702
My current suspicion is that someone managed to log in and made some changes that all traffic is redirected to 185.206.144.149…
Export entire configuration and search for 185.206.144.149..
Does your socks proxy enabled?
You should reinstall your router using netinstall (for safety) then reconfigure it from scratch and this time
not make the mistake of opening up the firewall from internet side allowing people to login to your router.
Also be sure to change all passwords, if you ran a vulnerable version then the attacker got full access to all passwords on user accounts.
Good sugestion ivicask.
I made that and i find full of 185.206.144.149 in DNS static.
Now i disabled all DNS static entries and for the moment there is no redirect to 185.206.144.149
Not sure if this was the only cause but i must monitor carefully the behavior of the router to find out if the problem reappear.
That will not fix it permanently, you really should reinstall it. Your router has been hacked and they are still controlling it.