Stream

Join this community to post or comment
 
Domain: vicster.duckdns.org
IP address: 141.255.159.204
Port: 1177
Location: Netherlands
Malware: NjRAT (remote administration tool)
1
Unreal Security's profile photo
2 comments
Add a comment...

whereserik

Questions  - 
 
Greetings! I'm having an identity crisis. Many of the sites (listed below) that will tell you your public IP address are telling me the I have Public IP Address A.

DuckDNS seems to think that I have Public IP Address B. I have set a script on my router to autoupdate with DuckDNS. When I try to manually use the update IP button on the duckdns.org website, I get this error:
error: ip address for ***.duckdns.org was already "Public IP Address B" not updated

Public IP Address A and Public IP Address B both have the same first two octets, so they both look like possibilities from my ISP.

To check myself further, I RDP'd into a remote Windows server, and ran a 'netstat -a'. Sure enough, I see Public IP Address A.

Can anyone help me figure out why duckdns is seeing a different public IP address for me than all other sites?

Sites to view public IP Address that think I have Public IP Address A:
http://www.google.com/search?q=what's+my+ip?
http://whatismyipaddress.com/
http://www.whatsmyip.org/
http://icanhazip.com/
Duck DNS free dynamic DNS hosted on Amazon VPC
1
whereserik's profile photoStephan van Beerschoten's profile photo
3 comments
 
No problem. Glad you figured it out. 
Add a comment...

Marco Ghizzi

Questions  - 
 
Unable to login with persona.

Hi I need to access my account in Persona login service, but whenever I try to access it gives me the "wrong email or token" message.
Is it still working?

As suggested, I would like to move my domains to another login.

Please, help me.

Thanks.
1
Steven Harper's profile photoRichard Harper's profile photo
2 comments
 
Can you send me an email from the registered persona email to richard@duckdns.org
Add a comment...
 
hola chicos, alguien de habla hispana.

saludos
 ·  Translate
1
Jorge Guerrero Paredes's profile photoRichard Harper's profile photo
4 comments
 
+Jorge Guerrero Paredes yes, how many? email me your domain to richard@duckdns.org
Add a comment...
 
CyberGate C2 location:

sromero.duckdns.org:7059

Network capture is being emailed!

1
Richard Harper's profile photo
 
Dealt with, thanks
Add a comment...

Joe Beauchamp

Suggestions  - 
 
Great service - signed up a year ago. I did just learn that the duckdns.vbs script has not been working for me for the year, however. It seems that the objRequest.Send command fails on WinXP, most of my old pc's.

I assume you aren't interested in fixing it, so just next time you update your install page, you can say that it does not work on XP.

Thx for the nice free service!
1
Joe Beauchamp's profile photoJared Scott's profile photo
3 comments
 
The problem is because the SSL ciphers supported on Windows XP are so old they aren't in the allowed list of the default Amazon ELB security profile. There is nothing that I know of to make VBScript work via HTTPS on Windows XP. If you need to use XP and you want to keep using SSL, then try to install something that has OpenSSL support built in (like curl) if you don't care about SSL switch to http and the VBScript will work fine.
Add a comment...

U_my U_my

Feedback - Client  - 
 
Hello,

I have no access to my account (because of Persona).
I cannot create the new domain, because the devices which using it are far from me and I am not able to change their configuration.
That is why I kindly ask you for this.


1
Steven Harper's profile photo
 
Can you email me from the email account you used persona for. I will reply back with your token. Steven@duckdns.org
Add a comment...
 
New XtremeRAT c2 location:

http://almacencentro.duckdns.org:5001/1234567890.functions

Network capture being emailed to you, Richard.
1
taki nota's profile photoRichard Harper's profile photo
2 comments
 
Dealt with them both, thanks
Add a comment...
 
I wonder if I can verify my domain with google somehow? They ask to either add a TXT or CNAME for a subdomain for verification purposes.
1
Mikhail Chernov's profile photoRichard Harper's profile photo
3 comments
 
My pleasure.
Add a comment...

Yusuf Selçuk

Suggestions  - 
 
My Duckdns account is blocked.I dont know this reason.Please help me
1
Richard Harper's profile photo
Add a comment...
1 comment
 
Hello everyone,

Recently setup Duck DNS at a client site since they will now be using RDP frequently to connect to an app server.

I was wondering if anyone might know why they can't connect to the server on the LAN using the Duck DNS address.

I am able to connect to the server using the address from an external location.

Any help would be appreciated.

Kind regards,
Nikolas Bretschneider
1
Evert Guzman's profile photoHarold Asmis's profile photo
7 comments
 
That's split dns. There should be a different dns for inquiries coming from the inside. Then you can have santa.duckies pointing to the inside ip. And external queries would go through the main dns servers to your current ip address.
Add a comment...

Created by

About this community

We provide a free dynamic DNS hosted on Amazon EC2
 
XtremeRAT C2
================
http://nuevochance1.duckdns.org:7070/1234567890.functions

(181.58.17.42)
1
Richard Harper's profile photo
 
Dealt with, thanks
Add a comment...

hamid neha

Feedback - Site  - 
 
This client duckdns :lumky.duckdns.org

uses his account for ciber criminals using Hacker.trojan

please take care and warning this client.


thanks team duckdns
1
Steven Harper's profile photo
 
Can you link evidence please
Add a comment...
 
Command and Control:
=============================
http://sromero.duckdns.org:8090


The malicious Microsoft executable is infected with the Bancodor Remote Access Trojan (RAT). The Bancodor RAT, is capable of recording keystrokes, capturing video and audio, and exfiltrating usernames and passwords.

We have also emailed the proper contacts regarding this incident.

Thank you for the help!
1
Richard Harper's profile photo
 
Dealt with, thanks
Add a comment...

Okkar Kyaw

Questions  - 
 
I created a few hostnames for myself and some relatives some time ago using persona accounts (since all of us were on static IP) but now that the way to log in is gone, can I delete those hostnames and add them to a new Google log-in account?
1
Rafał Pokrywka's profile photoRichard Harper's profile photo
5 comments
 
yes send me the old token and the new one and ill migrate the domains across. 
Add a comment...
 
So, if I used Persona and I didn't delete my hostname from the old account, am I screwed now?
1
Elisamuel Resto's profile photoRichard Harper's profile photo
7 comments
 
If you can email from the email you set the persona account up with along with your new token, I will migrate your domain across to your new account.
Add a comment...
 
Seems my account is blocked or doesn't work for some reason. Executing the script returns an OK, but my server is still unreachable. Can you confirm that and tell me what's wrong?

Although, I can not login to duckdns.org as I don't own that old E-Mail address (dieterdervermieter@gmail.com) anymore (got duckdns running in the background for years and forgot to move my mail address). Is there any way you could help me reset this to my new mail address if I provide my token?

Thank you!

Duck DNS free dynamic DNS hosted on Amazon VPC
1
Rafał Pokrywka's profile photoHorst Schneider's profile photo
2 comments
 
Hey, gonna do that, thanks!
Add a comment...

Yusuf Selçuk

Feedback - Client  - 
 
My account is blocked.I dont know this reason but i want unlock my account please help me !
1
Rafał Pokrywka's profile photoRichard Harper's profile photo
2 comments
 
I suggest you create a new account with new domains, this shouldn't be an issue unless you need to retain the domain for a specific reason...
Add a comment...
 

I setup duckdns to connect to my ssh server but I can't From lan works. From wan not works.
I see OK in duckdns log every time that I execute script of duckdns.
Please any help? Thanks

1
Evert Guzman's profile photoRichard Harper's profile photo
3 comments
 
Are you forwarding your traffic on you router by port to the computer on the LAN running the service.
Add a comment...