# DataPlane.org - for operators, by operators # dnsrdany # 2020-03-26 17:00 - 2020-04-02 17:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 7922 | COMCAST-7922, US | 66.30.236.54 | 2020-03-28 15:18:26 | dnsrdany 12876 | Online SAS, FR | 51.159.59.241 | 2020-03-29 22:36:01 | dnsrdany 14618 | AMAZON-AES, US | 35.175.255.49 | 2020-04-01 01:26:01 | dnsrdany 14618 | AMAZON-AES, US | 54.196.72.32 | 2020-03-30 02:39:31 | dnsrdany 14618 | AMAZON-AES, US | 107.21.9.146 | 2020-04-01 10:35:12 | dnsrdany 14618 | AMAZON-AES, US | 18.234.30.116 | 2020-03-27 13:24:48 | dnsrdany 14618 | AMAZON-AES, US | 100.24.71.236 | 2020-03-31 16:57:08 | dnsrdany 14618 | AMAZON-AES, US | 54.161.69.84 | 2020-04-01 04:29:32 | dnsrdany 14618 | AMAZON-AES, US | 18.232.72.109 | 2020-03-31 23:51:56 | dnsrdany 14618 | AMAZON-AES, US | 52.91.142.27 | 2020-04-02 06:08:14 | dnsrdany 14618 | AMAZON-AES, US | 3.86.68.206 | 2020-03-30 18:36:17 | dnsrdany 14618 | AMAZON-AES, US | 107.22.122.183 | 2020-03-31 00:28:23 | dnsrdany 14618 | AMAZON-AES, US | 34.229.187.158 | 2020-03-30 21:55:10 | dnsrdany 14618 | AMAZON-AES, US | 52.71.95.144 | 2020-03-31 04:44:14 | dnsrdany 14618 | AMAZON-AES, US | 35.153.166.52 | 2020-04-02 04:47:10 | dnsrdany 14618 | AMAZON-AES, US | 54.198.24.173 | 2020-03-31 19:25:24 | dnsrdany 14618 | AMAZON-AES, US | 3.80.170.246 | 2020-04-01 07:52:06 | dnsrdany 14618 | AMAZON-AES, US | 34.203.222.103 | 2020-03-31 16:28:13 | dnsrdany 14618 | AMAZON-AES, US | 3.88.15.77 | 2020-03-31 05:59:42 | dnsrdany 14618 | AMAZON-AES, US | 54.211.34.228 | 2020-03-31 06:36:45 | dnsrdany 14618 | AMAZON-AES, US | 3.81.60.82 | 2020-04-02 02:11:12 | dnsrdany 14618 | AMAZON-AES, US | 18.206.180.29 | 2020-04-01 13:56:10 | dnsrdany 14618 | AMAZON-AES, US | 34.207.73.231 | 2020-04-01 09:48:45 | dnsrdany 14618 | AMAZON-AES, US | 52.200.115.238 | 2020-03-30 09:27:39 | dnsrdany 14618 | AMAZON-AES, US | 18.232.60.254 | 2020-03-31 13:55:31 | dnsrdany 14618 | AMAZON-AES, US | 54.162.48.18 | 2020-04-01 14:33:48 | dnsrdany 14618 | AMAZON-AES, US | 3.89.136.143 | 2020-03-30 21:14:43 | dnsrdany 14618 | AMAZON-AES, US | 18.206.190.72 | 2020-04-01 16:16:39 | dnsrdany 14618 | AMAZON-AES, US | 54.162.111.223 | 2020-03-30 00:37:13 | dnsrdany 14618 | AMAZON-AES, US | 54.165.231.250 | 2020-03-31 08:01:38 | dnsrdany 14618 | AMAZON-AES, US | 107.23.214.63 | 2020-03-31 21:38:36 | dnsrdany 14618 | AMAZON-AES, US | 52.55.70.221 | 2020-04-01 07:06:38 | dnsrdany 14618 | AMAZON-AES, US | 3.90.178.48 | 2020-03-31 07:06:55 | dnsrdany 14618 | AMAZON-AES, US | 18.232.98.238 | 2020-04-01 11:46:22 | dnsrdany 14618 | AMAZON-AES, US | 54.90.236.19 | 2020-03-31 20:42:02 | dnsrdany 14618 | AMAZON-AES, US | 54.86.5.124 | 2020-04-01 13:38:36 | dnsrdany 19318 | IS-AS-1, US | 162.250.123.39 | 2020-04-02 10:49:03 | dnsrdany 19527 | GOOGLE-2, US | 35.211.182.206 | 2020-04-02 14:31:58 | dnsrdany 38701 | PIRANHA-AS-KR Piranha Systems, | 182.163.227.54 | 2020-04-01 08:11:55 | dnsrdany 42397 | ****************************** | 193.29.15.169 | 2020-03-27 17:29:18 | dnsrdany 43350 | NFORCE, NL | 185.107.80.2 | 2020-03-29 13:21:31 | dnsrdany 45102 | CNNIC-ALIBABA-US-NET-AP Alibab | 47.89.192.12 | 2020-03-29 16:14:32 | dnsrdany 46050 | JOGJACAMP-AS-ID PT JC Indonesi | 203.161.185.210 | 2020-04-02 16:45:54 | dnsrdany 48347 | MTW-AS, RU | 93.95.100.163 | 2020-03-31 16:18:42 | dnsrdany 51659 | ASBAXET, RU | 176.32.34.212 | 2020-03-31 14:10:04 | dnsrdany 60781 | LEASEWEB-NL-AMS-01 Netherlands | 95.168.171.156 | 2020-03-31 06:41:16 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 172.105.16.198 | 2020-03-29 17:26:39 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 172.105.222.171 | 2020-03-31 18:00:53 | dnsrdany 64425 | SKB-ENTERPRISE, NL | 5.182.210.101 | 2020-04-01 18:05:37 | dnsrdany 133774 | CHINATELECOM-FUJIAN-FUZHOU-IDC | 117.27.239.28 | 2020-03-28 13:35:46 | dnsrdany 197068 | QRATOR, RU | 185.94.111.1 | 2020-03-31 18:48:12 | dnsrdany 197226 | SPRINT-SDC, PL | 193.56.28.220 | 2020-04-01 09:39:59 | dnsrdany 198375 | INU-AS, FR | 185.81.157.124 | 2020-03-26 18:39:02 | dnsrdany 201978 | OSBIL, CY | 185.50.68.171 | 2020-03-31 15:26:03 | dnsrdany 202425 | INT-NETWORK, SC | 80.82.65.234 | 2020-03-30 02:16:07 | dnsrdany # # Statistics # ASNs: 21 # Addresses: 55