Hack Forums
PLZ HELP, IDK WHATS GOING ON - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: PLZ HELP, IDK WHATS GOING ON (/showthread.php?tid=5910474)

PLZ HELP, IDK WHATS GOING ON - whiter0x - Nov 21, 2018

hey all, so i was scanning my network and my mom's phone sent off this weird mdns query, and the ip is to DoD network information center
wtf???????

My mom picked up a call from a weird number the other day

RE: PLZ HELP, IDK WHATS GOING ON - Zeqoi - Nov 22, 2018

I happened to notice the same thing in wireshark I looked it up I was a little sketch as well

RE: PLZ HELP, IDK WHATS GOING ON - no$fer7u - Nov 22, 2018

what did you do? it might be the feds

RE: PLZ HELP, IDK WHATS GOING ON - Nyx - Nov 23, 2018

(Nov 22, 2018 11:54 PM)mael Wrote:  what did you do? it might be the feds


Calling from DoD? Doubtful.

Anyway, if you comitted a Cybercrime chances are IC3 or the Secret Service- (fraudulent or bank related crimes)

RE: PLZ HELP, IDK WHATS GOING ON - Super - Nov 24, 2018

There are 13 official DNS root servers in the world; they are the authority that gives you an IP address when you type in a website address such as "google.com". Interestingly enough, the US Department of Defense owns one of these 13 root servers. So if you're located in the United States a lot of your network traffic passes through them.

Now you're probably wondering why US government would be controlling your Internet traffic. Well, you have to realize that the initial prototype of the internet was created under the code name ARPANET, by, you guessed it, the US Department of Defense. To this day, the US government controls three of the thirteen DNS root zones (one controlled by the DoD, one by the US Army, and one by NASA).

Nothing to be worried about. Hope this was helpful.

[Image: ItQSHfN.png]

RE: PLZ HELP, IDK WHATS GOING ON - whiter0x - Nov 29, 2018

(Nov 24, 2018 02:33 PM)Dynamo Wrote:  There are 13 official DNS root servers in the world; they are the authority that gives you an IP address when you type in a website address such as "google.com". Interestingly enough, the US Department of Defense owns one of these 13 root servers. So if you're located in the United States a lot of your network traffic passes through them.

Now you're probably wondering why US government would be controlling your Internet traffic. Well, you have to realize that the initial prototype of the internet was created under the code name ARPANET, by, you guessed it, the US Department of Defense. To this day, the US government controls three of the thirteen DNS root zones (one controlled by the DoD, one by the US Army, and one by NASA).

Nothing to be worried about. Hope this was helpful.

[Image: ItQSHfN.png]

But I'm in Canada! wtf?

(Nov 24, 2018 02:33 PM)Dynamo Wrote:  There are 13 official DNS root servers in the world; they are the authority that gives you an IP address when you type in a website address such as "google.com". Interestingly enough, the US Department of Defense owns one of these 13 root servers. So if you're located in the United States a lot of your network traffic passes through them.

Now you're probably wondering why US government would be controlling your Internet traffic. Well, you have to realize that the initial prototype of the internet was created under the code name ARPANET, by, you guessed it, the US Department of Defense. To this day, the US government controls three of the thirteen DNS root zones (one controlled by the DoD, one by the US Army, and one by NASA).

Nothing to be worried about. Hope this was helpful.

[Image: ItQSHfN.png]

It was 21.0 something

RE: PLZ HELP, IDK WHATS GOING ON - Super - Nov 29, 2018

It doesn't matter what country you're in. Root zones are shared internationally.

RE: PLZ HELP, IDK WHATS GOING ON - a323109 - Nov 29, 2018

(Nov 21, 2018 12:44 PM)whiter0x Wrote:  hey all, so i was scanning my network and my mom's phone sent off this weird mdns query, and the ip is to DoD network information center
wtf???????

My mom picked up a call from a weird number the other day

Me too. Dont worry too much about it. If i start wireshark i always find out weird IPs connecting to me. One i traked down up to an office inside the UK Ministery of Defence. I am in Italy. What does the hell want UK from me?

(Nov 22, 2018 11:51 PM)Zeqoi Wrote:  I happened to notice the same thing in wireshark I looked it up I was a little sketch as well

(Nov 24, 2018 02:33 PM)Dynamo Wrote:  There are 13 official DNS root servers in the world; they are the authority that gives you an IP address when you type in a website address such as "google.com". Interestingly enough, the US Department of Defense owns one of these 13 root servers. So if you're located in the United States a lot of your network traffic passes through them.

Now you're probably wondering why US government would be controlling your Internet traffic. Well, you have to realize that the initial prototype of the internet was created under the code name ARPANET, by, you guessed it, the US Department of Defense. To this day, the US government controls three of the thirteen DNS root zones (one controlled by the DoD, one by the US Army, and one by NASA).

Nothing to be worried about. Hope this was helpful.

[Image: ItQSHfN.png]



Google DNS are missing. I am using Google DNS, go imagine...let's spy!

[Image: XZaAVyn.png]

RE: PLZ HELP, IDK WHATS GOING ON - Super - Nov 29, 2018

(Nov 29, 2018 10:07 AM)a323109 Wrote:  Me too. Dont worry too much about it. If i start wireshark i always find out weird IPs connecting to me. One i traked down up to an office inside the UK Ministery of Defence. I am in Italy. What does the hell want UK from me?





Google DNS are missing. I am using Google DNS, go imagine...let's spy!

[Image: XZaAVyn.png]

Google DNS is not one of the root zones. They are a third party DNS provider that communicates with the root zones to serve your requests. This means that even if you are using 8.8.8.8 and 8.8.4.4, you are still getting your IP addresses from one of the thirteen root authorities.

From Google's website:
Code
Google Public DNS uses Name Server (NS) records published in the DNS root zone and zones of top-level domains to find the names and addresses of the DNS servers that are authoritative for any domain. Some of those name servers also use anycast routing.

Source: https://developers.google.com/speed/public-dns/faq