# Dataplane.org - for operators, by operators # dnsrdany # 2024-09-01 17:00 - 2024-09-08 17:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of Dataplane.org is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. This is not a block list. Deriving # malicious or benign intent for an individual entry in the face of # NATs, address spoofing, and certain types of Internet activity # (e.g., surveying research) can be difficult. The report is provided # on an as-is basis with no expressed warranty or guarantee of accuracy. # Use of this data is at your own risk. If you have questions about # this report do not hesitate to contact us. # # Entries below are records of source IP addresses that have been # identified as sending recursive DNS IN ANY queries. # Each entry is sorted according to a route originating ASN. An entry # for the IP address is listed only once even if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # PyASN IP address to ASN mapping service to construct an origin AS # number and name. For details about PyASN, see: # # . # # The report format is as follows: # # ASN | ASname | ipaddr | lastseen | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the # entry IP address. Note, 4-byte ASNs are supported and # will be displayed as a 32-bit integer. NA is shown if # an origin ASN cannot be found. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. NA is shown if an # AS name cannot be found. # # ipaddr The IPv4 address that is being reported. # # lastseen A last seen timestamp formatted as YYYY-mm-dd HH:MM:SS # in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 174 | COGENT-174 | 38.102.8.238 | 2024-09-05 09:27:54 | dnsrdany 680 | DFN Verein zur Foerderung eine | 141.24.210.140 | 2024-09-03 11:52:22 | dnsrdany 1002 | BYTEFILTER-AS | 207.174.40.94 | 2024-09-07 19:12:48 | dnsrdany 14061 | DIGITALOCEAN-ASN | 198.211.113.210 | 2024-09-05 11:27:56 | dnsrdany 16276 | OVH OVH SAS | 66.70.205.227 | 2024-09-04 21:04:47 | dnsrdany 36352 | AS-COLOCROSSING | 23.94.225.252 | 2024-09-07 01:21:38 | dnsrdany 37963 | ALIBABA-CN-NET Hangzhou Alibab | 8.134.11.41 | 2024-09-08 07:50:28 | dnsrdany 38623 | VIETTELCAMBODIA-AS-AP ISPIXP I | 220.158.232.155 | 2024-09-08 02:20:48 | dnsrdany 45090 | TENCENT-NET-AP Shenzhen Tencen | 43.143.209.18 | 2024-09-08 14:12:23 | dnsrdany 48090 | PPTECHNOLOGY PPTECHNOLOGY LIMI | 195.178.110.52 | 2024-09-04 06:52:40 | dnsrdany 48090 | PPTECHNOLOGY PPTECHNOLOGY LIMI | 45.148.10.248 | 2024-09-08 16:56:37 | dnsrdany 48678 | TR-PENTECH-AS PENTECH BILISIM | 78.135.66.198 | 2024-09-03 10:28:15 | dnsrdany 49505 | SELECTEL JSC Selectel | 212.41.30.159 | 2024-09-07 01:46:59 | dnsrdany 49581 | FerdinandZink Ferdinand Zink t | 185.91.127.20 | 2024-09-02 16:37:10 | dnsrdany 49581 | FerdinandZink Ferdinand Zink t | 185.91.127.48 | 2024-09-02 16:39:32 | dnsrdany 49581 | FerdinandZink Ferdinand Zink t | 185.91.127.58 | 2024-09-03 01:31:03 | dnsrdany 49581 | FerdinandZink Ferdinand Zink t | 185.91.127.66 | 2024-09-06 14:38:09 | dnsrdany 49870 | AS49870-BV Alsycon B.V. | 45.95.146.52 | 2024-09-08 16:59:16 | dnsrdany 51115 | HLL-AS HLL LLC | 185.94.111.1 | 2024-09-07 15:09:00 | dnsrdany 51396 | PFCLOUD Pfcloud UG | 154.213.187.152 | 2024-09-04 23:13:29 | dnsrdany 51396 | PFCLOUD Pfcloud UG | 154.213.187.178 | 2024-09-08 15:00:39 | dnsrdany 51396 | PFCLOUD Pfcloud UG | 154.213.192.28 | 2024-09-08 16:34:38 | dnsrdany 53667 | PONYNET | 199.195.249.112 | 2024-09-04 15:43:37 | dnsrdany 53667 | PONYNET | 205.185.127.161 | 2024-09-04 15:45:03 | dnsrdany 55081 | 24SHELLS | 23.227.146.106 | 2024-09-03 17:23:52 | dnsrdany 56067 | METRABYTE-TH 453 Ladplacout Jo | 119.59.101.25 | 2024-09-02 14:07:36 | dnsrdany 60068 | CDN77 Datacamp Limited | 84.17.40.181 | 2024-09-03 17:25:58 | dnsrdany 60068 | CDN77 Datacamp Limited | 89.187.179.199 | 2024-09-04 23:52:12 | dnsrdany 63018 | DEDICATED | 216.146.25.182 | 2024-09-06 06:00:37 | dnsrdany 63023 | AS-GLOBALTELEHOST | 140.99.83.125 | 2024-09-04 15:51:32 | dnsrdany 63025 | NOHAVPS | 23.26.114.108 | 2024-09-05 11:27:56 | dnsrdany 140869 | TGL-AS-AP Turing Group Limited | 103.119.15.177 | 2024-09-03 16:44:03 | dnsrdany 140869 | TGL-AS-AP Turing Group Limited | 45.221.97.103 | 2024-09-05 09:55:04 | dnsrdany 140869 | TGL-AS-AP Turing Group Limited | 45.221.97.67 | 2024-09-07 01:31:23 | dnsrdany 152179 | GCNL-AS-AP GLOBAL COMMUNICATIO | 181.214.250.34 | 2024-09-03 09:32:56 | dnsrdany 152179 | GCNL-AS-AP GLOBAL COMMUNICATIO | 185.126.134.4 | 2024-09-08 09:59:01 | dnsrdany 197071 | ACTIVE-SERVERS active 1 GmbH | 134.255.235.253 | 2024-09-01 22:48:55 | dnsrdany 198831 | HOLYCLOUD Association HOLYCLOU | 163.5.59.86 | 2024-09-03 15:40:45 | dnsrdany 199524 | GCORE G-Core Labs S.A. | 92.223.88.71 | 2024-09-08 08:16:32 | dnsrdany 200019 | AlexHost ALEXHOST SRL | 176.123.6.139 | 2024-09-08 11:23:36 | dnsrdany 200019 | AlexHost ALEXHOST SRL | 93.157.106.243 | 2024-09-06 11:52:04 | dnsrdany 201814 | Mevspace MEVSPACE sp. z o.o. | 185.16.39.29 | 2024-09-08 16:59:44 | dnsrdany 206264 | AMARUTU-TECHNOLOGY Amarutu Tec | 2.57.214.94 | 2024-09-02 09:16:33 | dnsrdany 206728 | MEDIALAND-AS Media Land LLC | 45.141.87.5 | 2024-09-05 18:46:57 | dnsrdany 207252 | Realtox-Media Felix Gassan | 77.90.22.48 | 2024-09-04 10:31:43 | dnsrdany 207252 | Realtox-Media Felix Gassan | 77.90.22.59 | 2024-09-04 13:25:05 | dnsrdany 212271 | C1V Cinzia Tocci trading as C1 | 5.59.248.92 | 2024-09-07 01:49:36 | dnsrdany 215479 | PERFECTO-AS Perfecto Consultor | 95.214.27.235 | 2024-09-08 12:08:19 | dnsrdany 215479 | PERFECTO-AS Perfecto Consultor | 95.214.27.27 | 2024-09-08 15:50:32 | dnsrdany 215479 | PERFECTO-AS Perfecto Consultor | 95.214.27.38 | 2024-09-08 15:44:43 | dnsrdany 215479 | PERFECTO-AS Perfecto Consultor | 95.214.27.39 | 2024-09-08 16:59:57 | dnsrdany 215479 | PERFECTO-AS Perfecto Consultor | 95.214.27.40 | 2024-09-08 16:53:18 | dnsrdany 215479 | PERFECTO-AS Perfecto Consultor | 95.214.27.41 | 2024-09-08 16:58:31 | dnsrdany 215987 | Soliaweb Taylan Gueler trading | 141.98.7.138 | 2024-09-08 02:04:52 | dnsrdany 216240 | MortalSoft MortalSoft Ltd. | 93.123.85.138 | 2024-09-07 05:56:22 | dnsrdany 216240 | MortalSoft MortalSoft Ltd. | 93.123.85.141 | 2024-09-02 03:47:55 | dnsrdany 394711 | LIMENET | 45.89.247.13 | 2024-09-08 09:56:05 | dnsrdany 394711 | LIMENET | 91.92.241.232 | 2024-09-04 16:43:51 | dnsrdany 394711 | LIMENET | 91.92.248.107 | 2024-09-08 01:31:02 | dnsrdany 394711 | LIMENET | 91.92.250.114 | 2024-09-08 16:44:49 | dnsrdany 394711 | LIMENET | 94.156.65.239 | 2024-09-07 22:15:11 | dnsrdany 394711 | LIMENET | 94.156.68.237 | 2024-09-08 13:38:01 | dnsrdany 399296 | RD-BM | 170.39.194.81 | 2024-09-02 10:33:23 | dnsrdany 399486 | VIRTUO | 79.110.49.241 | 2024-09-07 10:35:03 | dnsrdany 400798 | PITIX-INFRA | 23.143.152.86 | 2024-09-02 14:21:45 | dnsrdany # # Statistics # ASNs: 41 # Addresses: 65