# DataPlane.org - for operators, by operators # dnsrdany # 2020-01-13 03:00 - 2020-01-20 03:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 3320 | DTAG Internet service provider | 46.80.111.75 | 2020-01-14 08:55:28 | dnsrdany 12876 | Online SAS, FR | 51.159.59.241 | 2020-01-15 20:34:57 | dnsrdany 14618 | AMAZON-AES, US | 18.234.159.84 | 2020-01-16 18:42:56 | dnsrdany 14618 | AMAZON-AES, US | 54.166.131.154 | 2020-01-14 07:29:06 | dnsrdany 14618 | AMAZON-AES, US | 34.227.95.33 | 2020-01-16 07:08:51 | dnsrdany 14618 | AMAZON-AES, US | 54.80.152.204 | 2020-01-16 06:25:19 | dnsrdany 14618 | AMAZON-AES, US | 54.91.14.232 | 2020-01-14 05:59:28 | dnsrdany 14618 | AMAZON-AES, US | 54.236.228.120 | 2020-01-16 07:42:10 | dnsrdany 14618 | AMAZON-AES, US | 54.81.56.53 | 2020-01-16 07:36:18 | dnsrdany 14618 | AMAZON-AES, US | 3.81.58.239 | 2020-01-15 23:41:38 | dnsrdany 14618 | AMAZON-AES, US | 35.153.206.224 | 2020-01-14 22:32:25 | dnsrdany 14618 | AMAZON-AES, US | 52.205.104.11 | 2020-01-16 00:01:58 | dnsrdany 14618 | AMAZON-AES, US | 34.228.218.155 | 2020-01-20 02:53:57 | dnsrdany 14618 | AMAZON-AES, US | 52.90.184.192 | 2020-01-16 04:16:57 | dnsrdany 14618 | AMAZON-AES, US | 54.80.213.227 | 2020-01-14 22:33:23 | dnsrdany 14618 | AMAZON-AES, US | 3.90.139.206 | 2020-01-19 23:42:44 | dnsrdany 14618 | AMAZON-AES, US | 54.152.212.226 | 2020-01-15 14:15:59 | dnsrdany 14618 | AMAZON-AES, US | 34.201.140.150 | 2020-01-14 15:13:54 | dnsrdany 14618 | AMAZON-AES, US | 54.211.39.67 | 2020-01-19 21:53:29 | dnsrdany 14618 | AMAZON-AES, US | 3.81.110.156 | 2020-01-15 05:58:34 | dnsrdany 14618 | AMAZON-AES, US | 54.80.169.226 | 2020-01-14 13:27:15 | dnsrdany 14618 | AMAZON-AES, US | 54.205.252.61 | 2020-01-20 01:12:54 | dnsrdany 14618 | AMAZON-AES, US | 54.82.230.173 | 2020-01-16 09:25:41 | dnsrdany 14618 | AMAZON-AES, US | 3.94.131.46 | 2020-01-16 03:03:52 | dnsrdany 14618 | AMAZON-AES, US | 35.175.236.209 | 2020-01-16 05:18:42 | dnsrdany 14618 | AMAZON-AES, US | 3.81.89.252 | 2020-01-19 21:10:46 | dnsrdany 14618 | AMAZON-AES, US | 3.95.240.2 | 2020-01-15 06:36:45 | dnsrdany 14618 | AMAZON-AES, US | 54.242.22.139 | 2020-01-15 02:30:27 | dnsrdany 20454 | SSASN2, US | 104.244.74.98 | 2020-01-17 01:07:25 | dnsrdany 42397 | ****************************** | 193.29.15.169 | 2020-01-19 21:28:17 | dnsrdany 50673 | SERVERIUS-AS, NL | 185.164.72.101 | 2020-01-18 21:55:48 | dnsrdany 51167 | CONTABO, DE | 79.143.189.11 | 2020-01-17 10:12:41 | dnsrdany 53667 | PONYNET, US | 104.244.74.98 | 2020-01-17 01:07:25 | dnsrdany 59253 | LEASEWEB-APAC-SIN-11 Leaseweb | 23.106.123.59 | 2020-01-18 01:04:24 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 172.105.20.12 | 2020-01-19 10:33:51 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 212.71.255.153 | 2020-01-14 11:11:14 | dnsrdany 197068 | QRATOR, RU | 185.94.111.1 | 2020-01-18 19:03:42 | dnsrdany 198375 | INU-AS, FR | 185.81.157.140 | 2020-01-14 20:24:50 | dnsrdany 202984 | TEAM-HOST AS, RU | 80.66.85.2 | 2020-01-13 04:40:44 | dnsrdany # # Statistics # ASNs: 13 # Addresses: 38