Unknown Dynamic DNS Entries

RouterOS General
1

i am using mikrotik 5.18 version in my company and it is working very smoothly.
Few day back i am just checking
IP > DNS > DNS Cache there are some unknown DNS A Entries holding ip address 178.18.19.151 and ns6.worldnic.com* other then that 192.168.1.0/24 is my private network and i have created some Static DNS A records like:

PDC.nizam.com 192.168.1.1
Prod.nizam.com 192.168.1.9.

is there any problem with my configuration or someone is trying to connect my network ???

can anyone help please.

Regards,
Armaan.



mikrotik dns.jpg

2

Can anyone help please…

3

Did you block access to your dns from Internet? Maybe some software which you uses on your pc ask your dns server about this domains?

4

i have created 2 rules in firewall filter.

0 chain=input action=drop protocol=tcp in-interface=Wan dst-port=53

1 chain=input action=drop protocol=udp in-interface=Wan dst-port=53

and also tried to block 178.18.19.151:

11 chain=output action=drop src-address=0.0.0.0/0 dst-address=178.18.19.151

12 chain=forward action=drop src-address=0.0.0.0/0 dst-address=178.18.19.151

additionally i have domain controller with the ip address of 192.168.1.1 and its domain is nizam.com

Regards,
Armaan.