Community discussions

MikroTik App
 
da89ni
newbie
Topic Author
Posts: 25
Joined: Sun Mar 16, 2014 4:03 am

something is wrong with my DNS resolving...

Fri Sep 28, 2018 11:00 am

Something is wrong with my DNS resolving... and i do not know where to look.
All hostname resolving point to a single iP address: 185.206.144.149

If i ping yahoo or google all traffic is redirected to 185.206.144.149
Also, in my scripts the :resolve is always returning 185.206.144.149

Please help me to fix this.

Image Image
 
User avatar
bramwittendorp
Member Candidate
Member Candidate
Posts: 101
Joined: Thu Jun 16, 2016 3:48 pm
Location: The Netherlands
Contact:

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 11:45 am

Which DNS servers have you configured under IP > DNS (/ip dns export OR /ip dns print)?

Try with different DNS-servers to make sure the problem isn't in your current set of DNS servers.
 
da89ni
newbie
Topic Author
Posts: 25
Joined: Sun Mar 16, 2014 4:03 am

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 11:57 am

Image

My DNS settings looks ok to me, i did not make any changes for years.
This problem occurred yesterday without any modification from my side. I also noticed unauthorized attempt to log in into my router viewtopic.php?f=2&t=139702
My current suspicion is that someone managed to log in and made some changes that all traffic is redirected to 185.206.144.149...
 
ivicask
Member
Member
Posts: 425
Joined: Tue Jul 07, 2015 2:40 pm
Location: Croatia, Zagreb

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 12:15 pm

Image

My DNS settings looks ok to me, i did not make any changes for years.
This problem occurred yesterday without any modification from my side. I also noticed unauthorized attempt to log in into my router viewtopic.php?f=2&t=139702
My current suspicion is that someone managed to log in and made some changes that all traffic is redirected to 185.206.144.149...
Export entire configuration and search for 185.206.144.149..
 
User avatar
Anumrak
Forum Guru
Forum Guru
Posts: 1174
Joined: Fri Jul 28, 2017 2:53 pm

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 12:33 pm

Does your socks proxy enabled?
 
pe1chl
Forum Guru
Forum Guru
Posts: 10240
Joined: Mon Jun 08, 2015 12:09 pm

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 12:42 pm

You should reinstall your router using netinstall (for safety) then reconfigure it from scratch and this time
not make the mistake of opening up the firewall from internet side allowing people to login to your router.
 
R1CH
Forum Guru
Forum Guru
Posts: 1101
Joined: Sun Oct 01, 2006 11:44 pm

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 3:08 pm

Also be sure to change all passwords, if you ran a vulnerable version then the attacker got full access to all passwords on user accounts.
 
da89ni
newbie
Topic Author
Posts: 25
Joined: Sun Mar 16, 2014 4:03 am

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 7:58 pm

Export entire configuration and search for 185.206.144.149..
Good sugestion ivicask.
I made that and i find full of 185.206.144.149 in DNS static.
Now i disabled all DNS static entries and for the moment there is no redirect to 185.206.144.149
Not sure if this was the only cause but i must monitor carefully the behavior of the router to find out if the problem reappear.

Image
 
pe1chl
Forum Guru
Forum Guru
Posts: 10240
Joined: Mon Jun 08, 2015 12:09 pm

Re: something is wrong with my DNS resolving...

Fri Sep 28, 2018 8:02 pm

That will not fix it permanently, you really should reinstall it. Your router has been hacked and they are still controlling it.

Who is online

Users browsing this forum: alibloke, Bing [Bot], cotin, Google [Bot], sanbok, sid5632 and 111 guests