# DataPlane.org - for operators, by operators # dnsrdany # 2018-05-21 05:00 - 2018-05-28 05:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a blacklist, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 5483 | HTC-AS Magyar Telekom Nyrt., H | 84.1.159.86 | 2018-05-28 01:53:01 | dnsrdany 12876 | AS12876, FR | 163.172.58.188 | 2018-05-22 08:24:29 | dnsrdany 14061 | DIGITALOCEAN-ASN - DigitalOcea | 159.65.104.143 | 2018-05-23 11:59:25 | dnsrdany 36352 | AS-COLOCROSSING - ColoCrossing | 198.12.97.79 | 2018-05-26 09:51:49 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 39.105.76.113 | 2018-05-24 10:42:55 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 123.56.40.8 | 2018-05-26 02:06:10 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 47.94.226.78 | 2018-05-24 09:10:57 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 39.106.103.172 | 2018-05-24 08:23:19 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 39.105.132.162 | 2018-05-24 09:50:34 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 39.105.138.91 | 2018-05-24 08:42:19 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 39.105.132.201 | 2018-05-24 10:41:38 | dnsrdany 38880 | M21-AS-AP Micron21 Datacentre | 43.245.69.6 | 2018-05-28 04:46:27 | dnsrdany 43350 | NFORCE, NL | 191.101.35.47 | 2018-05-27 14:35:24 | dnsrdany 46573 | GLOBAL-FRAG-NETWORKS - Global | 23.247.15.210 | 2018-05-21 18:48:16 | dnsrdany 50113 | SUPERSERVERSDATACENTER, RU | 185.40.4.83 | 2018-05-24 16:36:27 | dnsrdany 52030 | SERVERPLAN-AS, IT | 46.254.36.139 | 2018-05-21 11:01:01 | dnsrdany 197068 | QRATOR, RU | 185.94.111.1 | 2018-05-27 11:34:32 | dnsrdany 199653 | ARUBAFR-AS, FR | 217.61.96.195 | 2018-05-28 04:22:32 | dnsrdany 199653 | ARUBAFR-AS, FR | 217.61.96.184 | 2018-05-28 01:08:31 | dnsrdany 199653 | ARUBAFR-AS, FR | 185.8.50.38 | 2018-05-25 09:16:51 | dnsrdany # # Statistics # ASNs: 12 # Addresses: 20