+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: DuckDns (/showthread.php?tid=4917308)
DuckDns - N3wb Gamer - Jul 22, 2015
So my dns was working fine and last night I couldn't use remote desktop so I decide to restart LuminosityLink. I see my clients aren't connecting. I restart my computer. Now I decide to test out my dns through LL and it isn't resolving to my IP. Next thing I try to update duckdns and now I don't own my subdomain anymore and it isn't on my account.
It's currently being resolved to 192.169.69.25 after I decided to ping my subdomain
![[Image: dfac77bc1680ee603289d7699e1420d3.png]](https://i.gyazo.com/dfac77bc1680ee603289d7699e1420d3.png)
Has anyone ever had this issue before?
* - Rikanono - Jul 22, 2015
Whois the IP:
Private Customer 192-169-69-16-28-STEALTHYHOSTING (NET-192-169-69-16-1) 192.169.69.16 - 192.169.69.31
Stealthy Hosting STEALTHY-HOSTING-IPV4-NET1 (NET-192-169-68-0-1) 192.169.68.0 - 192.169.71.255
looks like someone got your duckdns account und PWND you...
EDIT: http to this ip = Honeypot http://192.169.69.25/ui/login/?next=%2F
check if your dns is on any known blacklists. (i bet it is)
* - N3wb Gamer - Jul 22, 2015
(Jul 22, 2015 08:57 AM)Rikanono Wrote: Whois the IP:Yeah happened to another person as well https://hackforums.net/showthread.php?tid=4915252
Private Customer 192-169-69-16-28-STEALTHYHOSTING (NET-192-169-69-16-1) 192.169.69.16 - 192.169.69.31
Stealthy Hosting STEALTHY-HOSTING-IPV4-NET1 (NET-192-169-68-0-1) 192.169.68.0 - 192.169.71.255
looks like someone got your duckdns account und PWND you...
Do you recommend any other dns services?
* - Rikanono - Jul 22, 2015
i do not recomend dns in any way.
i mean its easy to get your dns name when a honeypot or any other av company get your stub. all they have to do is contact duckdns or dyndns or no.ip and tell them. they will close your account and u lose all slaves.
also they could conntact your isp and get you... but its to much work for a little RAT boys like us^^. if you dont do high criminal stuff like blackshades you should be fine.
* - N3wb Gamer - Jul 22, 2015
(Jul 22, 2015 09:06 AM)Rikanono Wrote: i do not recomend dns in any way.So should I just be buying a domain?
i mean its easy to get your dns name when a honeypot or any other av company get your stub. all they have to do is contact duckdns or dyndns or no.ip and tell them. they will close your account and u lose all slaves.
* - Armada - Jul 22, 2015
DuckDNS seems to have either gone rogue or has been taken over.
See THIS THREAD
* - N3wb Gamer - Jul 22, 2015
(Jul 22, 2015 09:15 AM)Joker™ Wrote: Use FreeDNS, free and best.Could I be at the chance of losing my subdomain like duckdns?
* - Minato Namikaze - Jul 22, 2015
(Jul 22, 2015 09:35 AM)N3wb Gamer Wrote: Could I be at the chance of losing my subdomain like duckdns?
Yea FreeDNS is the best, been using it for a year, nothing happened to mine ;)
* - kneegurs - Jul 22, 2015
ABANDON DUCKDNS they have some fucktard security company sniffing around accounts
* - N3wb Gamer - Jul 22, 2015
(Jul 22, 2015 09:36 AM)Joker™ Wrote: No, using from over 10 months i think.For some reason it says my ip was found on a blacklist
https://hackforums.net/showthread.php?tid=4251545
* - ©Ratatouille™ - Jul 22, 2015
mother fucker lost 1k http://mediafire.duckdns.org
Alternative DNS ?
No ip = Ban
DNS exit = Ban
DuckDns = Ban
* - President Morty - Jul 24, 2015
NEWB be quiet its simple its gone.
Its a honeypot
Your DNS is confirmed malicious from my post to them.
Dont argue or post on them anymore.
Thats what ya get.
No CS:GO stealing i defend CS:GO players for a reason
* - kəˈrɪzmə - Jul 24, 2015
Dude pm me if you need a different DNS provider