# DataPlane.org - for operators, by operators # dnsrdany # 2019-02-16 08:00 - 2019-02-23 08:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 2516 | KDDI KDDI CORPORATION, JP | 210.238.201.212 | 2019-02-21 09:01:23 | dnsrdany 2516 | KDDI KDDI CORPORATION, JP | 211.125.178.150 | 2019-02-21 10:26:11 | dnsrdany 2516 | KDDI KDDI CORPORATION, JP | 210.238.201.211 | 2019-02-21 08:54:42 | dnsrdany 4713 | OCN NTT Communications Corpora | 222.151.246.22 | 2019-02-21 09:01:23 | dnsrdany 4788 | TMNET-AS-AP TM Net, Internet S | 175.138.107.177 | 2019-02-16 10:23:42 | dnsrdany 6405 | AIN - American Information Net | 205.134.160.94 | 2019-02-21 09:59:19 | dnsrdany 6876 | TENET-AS, UA | 195.138.79.1 | 2019-02-21 10:38:22 | dnsrdany 7522 | STCN STNet, Incorporated, JP | 210.157.236.33 | 2019-02-21 08:44:53 | dnsrdany 8100 | ASN-QUADRANET-GLOBAL - QuadraN | 45.59.113.131 | 2019-02-16 10:44:00 | dnsrdany 8100 | ASN-QUADRANET-GLOBAL - QuadraN | 204.44.101.56 | 2019-02-21 03:14:50 | dnsrdany 9009 | M247, GB | 185.216.32.170 | 2019-02-17 06:49:43 | dnsrdany 9371 | SAKURA-C SAKURA Internet Inc., | 219.94.145.93 | 2019-02-21 10:11:04 | dnsrdany 9371 | SAKURA-C SAKURA Internet Inc., | 219.94.145.136 | 2019-02-21 09:01:23 | dnsrdany 9371 | SAKURA-C SAKURA Internet Inc., | 219.94.145.154 | 2019-02-21 09:01:23 | dnsrdany 9371 | SAKURA-C SAKURA Internet Inc., | 219.94.154.206 | 2019-02-21 10:26:14 | dnsrdany 9371 | SAKURA-C SAKURA Internet Inc., | 219.94.167.85 | 2019-02-21 09:01:23 | dnsrdany 15169 | GOOGLE - Google LLC, US | 34.73.187.192 | 2019-02-21 23:11:41 | dnsrdany 15169 | GOOGLE - Google LLC, US | 34.73.117.178 | 2019-02-20 07:04:24 | dnsrdany 17506 | UCOM UCOM Corp., JP | 124.39.213.19 | 2019-02-21 09:01:23 | dnsrdany 18182 | SONET-TW Sony Network Taiwan L | 219.84.106.22 | 2019-02-21 09:47:48 | dnsrdany 19079 | LOCL-NET - Locl-Net Inc, US | 216.163.144.130 | 2019-02-21 09:01:23 | dnsrdany 19531 | NODESDIRECT - Nodes Direct, US | 23.239.67.39 | 2019-02-20 03:55:08 | dnsrdany 19531 | NODESDIRECT - Nodes Direct, US | 107.155.152.105 | 2019-02-20 02:37:47 | dnsrdany 20473 | AS-CHOOPA - Choopa, LLC, US | 207.148.124.67 | 2019-02-20 07:47:24 | dnsrdany 23338 | ASN-DCS-01 - DCS Pacific Star, | 205.209.140.130 | 2019-02-22 01:54:48 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 47.94.146.103 | 2019-02-16 08:38:41 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 116.62.217.151 | 2019-02-23 00:30:51 | dnsrdany 45090 | CNNIC-TENCENT-NET-AP Shenzhen | 129.204.58.88 | 2019-02-23 05:10:43 | dnsrdany 45924 | GLOBAL-AS-AP Global Technologi | 203.32.153.65 | 2019-02-21 10:23:18 | dnsrdany 46019 | UNIBRAW-AS-ID Universitas Braw | 175.45.187.194 | 2019-02-21 10:34:30 | dnsrdany 51659 | ASBAXET, RU | 176.32.34.3 | 2019-02-18 10:03:35 | dnsrdany 51659 | ASBAXET, RU | 176.32.34.11 | 2019-02-19 00:05:33 | dnsrdany 133774 | CHINATELECOM-FUJIAN-FUZHOU-IDC | 59.56.19.100 | 2019-02-16 22:51:36 | dnsrdany 197068 | QRATOR, RU | 185.94.111.1 | 2019-02-22 18:23:13 | dnsrdany 205101 | AS205101, TR | 185.219.133.71 | 2019-02-21 03:29:02 | dnsrdany 394625 | WHITELABELIT - WhiteLabel IT S | 199.38.245.231 | 2019-02-22 19:25:33 | dnsrdany # # Statistics # ASNs: 25 # Addresses: 36