# DataPlane.org - for operators, by operators # dnsrdany # 2019-10-08 23:00 - 2019-10-15 23:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 8075 | MICROSOFT-CORP-MSN-AS-BLOCK - | 40.89.157.147 | 2019-10-15 14:29:34 | dnsrdany 9009 | M247, GB | 89.33.8.34 | 2019-10-15 19:57:56 | dnsrdany 12876 | AS12876, FR | 51.158.77.21 | 2019-10-14 18:43:28 | dnsrdany 14061 | DIGITALOCEAN-ASN - DigitalOcea | 104.248.95.165 | 2019-10-14 11:40:24 | dnsrdany 43350 | NFORCE, NL | 185.107.80.2 | 2019-10-15 08:19:11 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 172.104.40.5 | 2019-10-09 10:11:33 | dnsrdany 136190 | CHINATELECOM-ZHEJIANG-JINHUA-I | 36.27.214.203 | 2019-10-11 23:09:18 | dnsrdany 197068 | QRATOR, RU | 185.94.111.1 | 2019-10-15 16:23:02 | dnsrdany 197922 | FIRSTHEBERG, FR | 91.229.20.58 | 2019-10-12 00:20:40 | dnsrdany 198375 | INU-AS, FR | 185.81.157.140 | 2019-10-13 06:41:21 | dnsrdany 198375 | INU-AS, FR | 185.81.157.145 | 2019-10-15 22:38:37 | dnsrdany 202984 | TEAM-HOST AS, RU | 45.139.239.2 | 2019-10-13 22:34:59 | dnsrdany 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.121 | 2019-10-12 14:51:15 | dnsrdany # # Statistics # ASNs: 12 # Addresses: 13