Advice better not to enter fb and youtube url till this mess ends

sanzilla jackcat

Well-known member
  • Oct 3, 2008
    6,757
    3,343
    113
    ෆ්ලුජා නගරය
    hi all, These are the facebook IP addresses ,
    69.63.184.142
    69.63.187.17
    69.63.187.19
    69.63.181.11
    69.63.181.12

    if your tcpdump program shows the ip 58.27.22.91 then it means
    someone is collecting your cookies or hijacking your sessions.

    Please don't allow that to happen.

    Even better to put the nameserver 8.8.8.8 to access to google.
    Most probablly I think the attacker able to poision a local root name server.


    Please more info.
     
    • Like
    Reactions: cr33py_f41iry

    cr33py_f41iry

    Member
    Feb 1, 2010
    2,076
    94
    0
    N/A
    hi all, These are the facebook IP addresses ,
    69.63.184.142
    69.63.187.17
    69.63.187.19
    69.63.181.11
    69.63.181.12

    if your tcpdump program shows the ip 58.27.22.91 then it means
    someone is collecting your cookies or hijacking your sessions.

    Please don't allow that to happen.

    Even better to put the nameserver 8.8.8.8 to access to google.
    Most probablly I think the attacker able to poision a local root name server.


    Please more info.

    :yes::yes::yes:
    11.gif
    11.gif
    11.gif
     

    sanzilla jackcat

    Well-known member
  • Oct 3, 2008
    6,757
    3,343
    113
    ෆ්ලුජා නගරය
    I get too many internal nameservers when I uses the local nameserver.

    > set type=MX
    > facebook.com
    Server: [192.168.1.1]
    Address: 192.168.1.1

    DNS request timed out.
    timeout was 2 seconds.
    Non-authoritative answer:
    facebook.com MX preference = 10, mail exchanger = mx.snc1.tfbnw.net
    facebook.com MX preference = 10, mail exchanger = mx.sf2p.tfbnw.net

    facebook.com nameserver = ns3.facebook.com
    facebook.com nameserver = ns2.facebook.com
    facebook.com nameserver = ns4.facebook.com
    facebook.com nameserver = ns1.facebook.com
    facebook.com nameserver = ns5.facebook.com
    mx.sf2p.tfbnw.net internet address = 69.63.176.71
    ns1.facebook.com internet address = 204.74.66.132
    ns2.facebook.com internet address = 204.74.67.132
    ns3.facebook.com internet address = 69.63.178.21
    ns4.facebook.com internet address = 69.63.186.49
    ns5.facebook.com internet address = 69.63.176.200
    > server 8.8.8.8
    Default Server: google-public-dns-a.google.com
    Address: 8.8.8.8

    > facebook.com
    Server: google-public-dns-a.google.com
    Address: 8.8.8.8

    Non-authoritative answer:
    facebook.com MX preference = 10, mail exchanger = mx.sf2p.tfbnw.net
    facebook.com MX preference = 10, mail exchanger = mx.snc1.tfbnw.net
    >

    but when I used the google name server only two records is this normal?