# DataPlane.org - for operators, by operators # dnsrdany # 2020-11-24 23:00 - 2020-12-01 23:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 701 | UUNET, US | 173.48.232.248 | 2020-11-25 05:22:43 | dnsrdany 701 | UUNET, US | 141.156.134.53 | 2020-11-25 23:04:23 | dnsrdany 701 | UUNET, US | 173.54.121.21 | 2020-11-26 22:44:54 | dnsrdany 4804 | MPX-AS Microplex PTY LTD, AU | 114.74.156.246 | 2020-11-26 10:06:42 | dnsrdany 4837 | CHINA169-BACKBONE CHINA UNICOM | 101.71.138.9 | 2020-11-30 02:55:43 | dnsrdany 4837 | CHINA169-BACKBONE CHINA UNICOM | 103.95.221.2 | 2020-11-30 06:31:40 | dnsrdany 7018 | ATT-INTERNET4, US | 107.140.26.123 | 2020-11-25 08:48:36 | dnsrdany 7922 | COMCAST-7922, US | 69.181.156.188 | 2020-11-25 07:02:07 | dnsrdany 9790 | VOCUSGROUPNZ VocusGroup, NZ | 202.150.120.178 | 2020-11-30 05:08:05 | dnsrdany 14618 | AMAZON-AES, US | 54.225.33.190 | 2020-11-30 19:00:35 | dnsrdany 14618 | AMAZON-AES, US | 54.205.244.248 | 2020-11-27 15:36:41 | dnsrdany 14618 | AMAZON-AES, US | 3.91.236.72 | 2020-11-30 08:30:31 | dnsrdany 14618 | AMAZON-AES, US | 18.232.123.157 | 2020-12-01 11:50:08 | dnsrdany 14618 | AMAZON-AES, US | 107.23.235.133 | 2020-11-29 00:06:12 | dnsrdany 14618 | AMAZON-AES, US | 54.87.184.128 | 2020-11-29 13:18:26 | dnsrdany 14618 | AMAZON-AES, US | 52.4.237.96 | 2020-11-30 08:23:51 | dnsrdany 14618 | AMAZON-AES, US | 54.198.9.0 | 2020-12-01 11:50:15 | dnsrdany 14618 | AMAZON-AES, US | 54.84.252.231 | 2020-11-27 15:28:24 | dnsrdany 14618 | AMAZON-AES, US | 3.91.73.60 | 2020-11-27 15:38:51 | dnsrdany 14618 | AMAZON-AES, US | 34.229.113.79 | 2020-12-01 11:56:02 | dnsrdany 14618 | AMAZON-AES, US | 174.129.102.137 | 2020-11-29 13:28:55 | dnsrdany 14618 | AMAZON-AES, US | 54.81.104.194 | 2020-11-29 13:20:01 | dnsrdany 14618 | AMAZON-AES, US | 54.172.53.228 | 2020-11-28 23:59:31 | dnsrdany 14618 | AMAZON-AES, US | 3.89.7.95 | 2020-11-30 08:28:38 | dnsrdany 20473 | AS-CHOOPA, US | 78.141.212.39 | 2020-11-26 13:07:52 | dnsrdany 35600 | ASN-VEDEGE Vedege SAS, FR | 194.117.246.121 | 2020-11-26 21:44:37 | dnsrdany 36007 | KAMATERA, US | 199.244.49.62 | 2020-12-01 22:06:29 | dnsrdany 36007 | KAMATERA, US | 199.244.49.220 | 2020-12-01 22:06:29 | dnsrdany 36231 | TEMPEST-HOSTING, US | 199.231.233.146 | 2020-11-27 22:35:02 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 39.98.50.101 | 2020-11-25 02:32:37 | dnsrdany 41652 | SAS-SHPV-FRANCE SHPV FRANCE SA | 185.212.227.226 | 2020-11-27 07:23:47 | dnsrdany 43350 | NFORCE NForce Entertainment B. | 109.201.142.34 | 2020-11-27 20:33:00 | dnsrdany 44901 | belcloud Belcloud LTD, BG | 88.80.148.137 | 2020-11-25 13:52:20 | dnsrdany 53667 | PONYNET, US | 198.98.48.123 | 2020-11-30 06:06:19 | dnsrdany 62380 | BUNEA-HIGH-PEER-NETWORK Bunea | 185.232.64.121 | 2020-12-01 20:58:16 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 45.79.145.119 | 2020-11-25 01:05:29 | dnsrdany 63949 | LINODE-AP Linode, LLC, US | 45.33.80.190 | 2020-12-01 17:08:50 | dnsrdany 64425 | SKB-Enterprise SKB Enterprise | 45.148.122.101 | 2020-11-30 02:55:42 | dnsrdany 133774 | CHINATELECOM-FUJIAN-FUZHOU-IDC | 117.27.239.28 | 2020-11-30 06:26:18 | dnsrdany 197068 | QRATOR HLL LLC, RU | 185.94.111.1 | 2020-12-01 01:29:52 | dnsrdany 198375 | INU-AS INULOGIC SARL, FR | 185.81.158.149 | 2020-11-30 17:21:04 | dnsrdany 200019 | AlexHost ALEXHOST SRL, MD | 176.123.8.47 | 2020-11-28 12:24:06 | dnsrdany 202425 | INT-NETWORK IP Volume inc, SC | 94.102.51.75 | 2020-11-29 10:58:41 | dnsrdany 202984 | team-host Chernyshov Aleksandr | 45.139.239.4 | 2020-11-30 23:08:04 | dnsrdany 209371 | TECHNOX Cenk Aksit trading as | 185.184.24.15 | 2020-11-26 18:42:31 | dnsrdany # # Statistics # ASNs: 26 # Addresses: 45