# DataPlane.org - for operators, by operators # dnsrdany # 2019-08-16 23:00 - 2019-08-23 23:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 9009 | M247, GB | 89.33.8.34 | 2019-08-23 19:57:28 | dnsrdany 17444 | NWT-AS-AP AS number for New Wo | 113.10.152.144 | 2019-08-18 23:40:09 | dnsrdany 24961 | MYLOC-AS, DE | 194.15.36.102 | 2019-08-23 02:19:07 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 116.62.217.151 | 2019-08-23 22:54:59 | dnsrdany 41722 | MIRAN-AS Miran DC, RU | 185.53.22.83 | 2019-08-20 06:40:02 | dnsrdany 43350 | NFORCE, NL | 185.107.80.2 | 2019-08-18 20:57:03 | dnsrdany 45090 | CNNIC-TENCENT-NET-AP Shenzhen | 148.70.125.96 | 2019-08-23 14:37:21 | dnsrdany 50673 | SERVERIUS-AS, NL | 185.164.72.122 | 2019-08-21 20:44:29 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 176.58.120.225 | 2019-08-21 08:41:59 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 172.105.10.146 | 2019-08-21 11:04:36 | dnsrdany 136190 | CHINATELECOM-ZHEJIANG-JINHUA-I | 36.27.214.155 | 2019-08-22 11:29:49 | dnsrdany 197068 | QRATOR, RU | 185.94.111.1 | 2019-08-22 23:39:51 | dnsrdany 198375 | INU-AS, FR | 185.81.157.104 | 2019-08-21 11:07:05 | dnsrdany 200000 | UKRAINE-AS, UA | 185.25.116.193 | 2019-08-22 15:26:35 | dnsrdany # # Statistics # ASNs: 13 # Addresses: 14