# DataPlane.org - for operators, by operators # dnsrdany # 2019-04-16 05:00 - 2019-04-23 05:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of DataPlane is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # source IP address that has been identified as sending recursive DNS IN # ANY queries to a remote host. This report lists addresses that may be # cataloging open DNS resolvers for the purpose of later using them to # facilitate DNS amplification and reflection attacks. Each entry is # sorted according to a route origination ASN. An entry for the IP # address may be listed more than once if there are multiple origin AS # (MOAS) announcements for the covering prefix. We use the Team Cymru # IP address to ASN mapping service to construct an origin AS number and # name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 2856 | BT-UK-AS BTnet UK Regional net | 86.131.30.124 | 2019-04-18 17:12:22 | dnsrdany 8251 | NFX_ZSPO, CZ | 78.108.97.136 | 2019-04-18 14:41:07 | dnsrdany 9009 | M247, GB | 89.33.8.34 | 2019-04-23 03:53:42 | dnsrdany 9121 | TTNET, TR | 78.170.153.159 | 2019-04-21 09:09:04 | dnsrdany 11272 | TELEPAK-NETWORKS-INC - C Spire | 50.86.49.63 | 2019-04-18 19:39:39 | dnsrdany 14061 | DIGITALOCEAN-ASN - DigitalOcea | 159.203.106.36 | 2019-04-20 22:23:35 | dnsrdany 16509 | AMAZON-02 - Amazon.com, Inc., | 34.244.242.195 | 2019-04-22 06:23:25 | dnsrdany 20473 | AS-CHOOPA - Choopa, LLC, US | 45.32.17.227 | 2019-04-22 22:24:45 | dnsrdany 20473 | AS-CHOOPA - Choopa, LLC, US | 45.77.28.247 | 2019-04-21 08:15:45 | dnsrdany 37963 | CNNIC-ALIBABA-CN-NET-AP Hangzh | 116.62.217.151 | 2019-04-23 00:17:10 | dnsrdany 39244 | TEQNOBASE-AS, NL | 188.65.198.205 | 2019-04-16 11:42:29 | dnsrdany 42397 | ****************************** | 193.29.15.150 | 2019-04-19 13:04:57 | dnsrdany 46573 | GLOBAL-FRAG-NETWORKS - Global | 134.73.148.66 | 2019-04-21 07:52:38 | dnsrdany 46573 | GLOBAL-FRAG-NETWORKS - Global | 157.52.188.66 | 2019-04-17 09:39:05 | dnsrdany 47331 | TTNET, TR | 78.170.153.159 | 2019-04-21 09:09:04 | dnsrdany 54290 | HOSTWINDS - Hostwinds LLC., US | 23.254.231.3 | 2019-04-22 07:06:03 | dnsrdany 57673 | HOSTCLEAN-SRL, RO | 185.101.105.188 | 2019-04-17 13:53:02 | dnsrdany 197068 | QRATOR, RU | 185.94.111.1 | 2019-04-20 02:12:24 | dnsrdany 393437 | HOST-GOOD - KLAYER, US | 185.253.250.167 | 2019-04-18 23:01:56 | dnsrdany # # Statistics # ASNs: 17 # Addresses: 18