0

Someone using my account without authorization

I'm seeing traffic from a named device that isn't mine. The IP is coming from a different state. I think someone accidentally typed my setup ID into their device. Is there a way to block a MAC address or something similar? Some way to return a DNS error that indicates "Hey, you're on my account!" ?

Right now I've blocked common domains that they are requesting and turned on the Block Page feature (Display a block page when a domain is being blocked). Hopefully that will give them a clue.

Ideas?

3 replies

null
    • losnad
    • 22 hrs ago
    • Reported - view

    "Is there a way to block a MAC address or something similar?"

    Not on NextDNS, yet (and normally you don't show your MAC address on the internet, including DNS services) , AdGuard has some tools like this: 

    «Access settings

    Your DNS server will only accept a request if it is allowed by the rules below. Denied requests don’t show up in the Query log, and we don’t charge for them

    Allowed clients

    IP addresses, AS numbers, or CIDRs, one per line

    Examples: 1.1.1.1, AS1234, 192.168.0.0/24

    Disallowed clients

    IP addresses, AS numbers, or CIDRs, one per line

    Examples: 1.1.1.1, AS1234, 192.168.0.0/24

    Disallowed domains

    Domain names, wildcards, or DNS filtering rules, one per line

    Examples: example.com, *.example.com, ||example.com^»

    What you can do is to start using a different ID/Profile and delete the one used by some stranger, if that is the case.

    Normally yes, you can try some random ID and use it but you have no access to the logs and settings and if it is just to use a public DNS you can use NextDNS without a profile. So it doesn't make sense to do this. 

    https://help.nextdns.io/t/h7ykbal

    https://help.nextdns.io/t/60y1kyx?r=x2y1kyg#x2y1kyg

    • losnad
    • 21 hrs ago
    • Reported - view

    You might be right that someone could have typed by mistake your ID and it doesn't understand why it doesn't see logs and analytics, I saw some post like this, but there is a error on the Setup page "This device is using NextDNS with another profile.

    This device is currently using X" 

    But also be sure is not one of yours or someone in the family mobile devices, the mobile IP is not usually reported as accurate to the location as the landlines. They use limited numbers of IPs for mobile internet, not like on the cable, and it can geo locate totally false from your real location. 

      • Helena_Handbasket
      • 20 hrs ago
      • Reported - view

       Thanks for the help losnad. I'm going to dupe the profile and switch over to it, delete the old one. It was only for one device so it's no biggy. I wish the IDs were larger so this is less likely to happen.

Login to reply

Content aside

  • 20 hrs agoLast active
  • 3Replies
  • 52Views
  • 1 Following