Duckdns hacked?

pomah · April 29, 2024, 9:28pm

Hi, got this in my duckdns log today…

					</div>
				</div>
			</div>
		</header>
		<main id="main" tabindex="0" role="main" class="ducky">
		    <section class="module panels">
				<div class="container outer-container">
					<div class="match-alignment white">
						<div class="col span-4">
							<div class="panel white logo-holder">
								<p class="ducky-head__logo ducky_icon">
								</p>
							</div>
						</div>
						<div class="col span-7">
							<div class="panel white">
								<h1 class="center">Duck DNS - site down</h1>
								<!-- NEWS:START -->
								<h2 class="center">the site is currently down.</h2>
								<!-- NEWS:END -->
							</div>
						</div>
					</div>
				</div>
		    </section>
		</main>
		<footer>
			<section class="module panels">
				<div class="container">
					<div class="match-alignment">
						<div class="col span-1">
							<form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_top">
								<input type="hidden" name="cmd" value="_donations"/>
								<input type="hidden" name="business" value="76WWWMDFVB43A"/>
								<input type="hidden" name="lc" value="GB"/>
								<input type="hidden" name="item_name" value="Duck DNS"/>
								<input type="hidden" name="currency_code" value="GBP"/>
								<input type="hidden" name="no_shipping" value="1"/>
								<input type="hidden" name="return" value="https://www.duckdns.org"/>
								<input type="hidden" name="cbt" value="return to Duck DNS"/>
								<input type="hidden" name="image_url" value="https://img/ducky_150x50.png"/>
								<input type="hidden" name="cpp_header_ image" value="https://img/ducky_750x90.png"/>
								<input type="hidden" name="cpp_logo_image" value="https://img/ducky_190x60.png"/>
								<input type="hidden" name="cpp_ headerback_ color" value="006699"/>
								<input type="hidden" name="cpp_ headerborder_color" value="333333"/>
								<input type="image" src="https://www.paypalobjects.com/en_GB/i/btn/btn_donate_LG.gif" border="0" name="submit" title="PayPal - The safer, easier way to pay online."/>
								<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="1" height="1"/>
							</form>
						</div>
						<div class="col span-7" style="text-align: center;">
							<span style="overflow: hidden; border: 1px solid black; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; padding: 4px; padding-left: 0px; font-family: Arial; font-size: 12px; font-weight: bold; background-color: white;">
								<span style="padding: 4px; padding-left: 8px; background-color: #E98A0A; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; color: white;">
									<a href="http://www.bitcoin.org/" style="text-decoration: none; color: white; border: none;">
										<span style="-webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; font-weight: normal; color: white; font-size: 15px; background-color: white; color: #E98A0A; padding: 1px 5px; padding-top: 0px;">&#3647;</span>
										Bitcoin
									</a>
								</span>
								<span style="padding: 5px;">
									<a href="bitcoin:16gHnv3NTjpF5ZavMi9QYBFxUkNchdicUS"><span class="bitcoin--full">16gHnv3NTjpF5ZavMi9QYBFxUkNchdicUS</span><span class="bitcoin--small">donate</span></a>
								</span>
							</span>
						</div>
						<div class="col span-3 dogespan" style="text-align: center;">
							<span class="dogecoin-holder">
								<a class="dogecoin-item" href="dogecoin:DP5xzeAcPscMTx9FdgzRxyMGdoC6dta9LK">
									<img src="img/dogecoin.png">
									<span>Donate&nbsp;Dogecoin</span>
								</a>
							</span>
						</div>
						<div class="col span-1 pullright">
							<a target="new" href="https://groups.google.com/forum/#!forum/duckdns"><img title="join the community" id="community" src="img/ggroups_icon.png"/></a>
						</div>
					</div>
				</div>
			</section>
		</footer>
		<script src="//ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js"></script>
		<script src="js/ducky-12.js"></script>
	</body>
</html>
[21:16:09] INFO: Renew certificate for domains: xxxxxxxxx.duckdns.org and aliases: 
# INFO: Using main config file /data/workdir/config
Processing xxxxxxxxx.duckdns.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Jul 12 10:41:22 2024 GMT (Longer than 30 days). Skipping renew!
[22:11:21] WARNING: 
[09:17:19] INFO: Renew certificate for domains: xxxxxxxxx.duckdns.org and aliases: 
# INFO: Using main config file /data/workdir/config
Processing xxxxxxxxxxxx.duckdns.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Jul 12 10:41:22 2024 GMT (Longer than 30 days). Skipping renew!
[21:18:23] INFO: Renew certificate for domains: xxxxxxxx.duckdns.org and aliases: 
# INFO: Using main config file /data/workdir/config
Processing xxxxxxxx.duckdns.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Jul 12 10:41:22 2024 GMT (Longer than 30 days). Skipping renew!

pomah · April 29, 2024, 9:29pm

just restarted it all and all is normal in my log

Anleifr · July 9, 2024, 9:20am

Did you find more info on this? I found this thread after seeing similar stuff in my DuckDNS logs:

pomah · July 9, 2024, 9:22am

Nope, but I see that duckdns seems to have issues and outages that affect my ability to reach my instance, so I’m looking for a way to switch from duckdns to something else.

Anleifr · July 9, 2024, 9:30am

I was hoping I could run something on my own domain, to be fully independent, haven’t found a solution yet. Wrt to the btc address I just noticed it is the same on the Duckdns (Duck DNS) site so I’ll leave it as “I’m not hacked” for now.

malosaa · July 9, 2024, 9:31am

duck dns is poop.

i use on proxmox cloudflare zero trust proxy, much better
Just combune it with mullvad vpn.
Create a virtual pfsense, setup some vpn’s / bind them together and have 8 ip’s.
Speed is 100mbps.

Pfsense main vpn → proxmox - > pfsense 1 → pfsense 2 → cloudflare → homeassistant

pomah · July 9, 2024, 10:43am

I could use the dns feature on my mikrotik router and lets encrypt plugin on hassio, or no-ip integration. I do not want to use cloudflare for privacy issues.