# Dataplane.org - for operators, by operators # dnsrdany # 2026-04-30 13:00 - 2026-05-07 13:00 # # The dnsrdany report is free for non-commercial use ONLY. If you wish # to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the dnsrdany report in whole or # in part without the express permission of Dataplane.org is expressly # prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing, and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. This is not a block list. Deriving # malicious or benign intent for an individual entry in the face of # NATs, address spoofing, and certain types of Internet activity # (e.g., surveying research) can be difficult. The report is provided # on an as-is basis with no expressed warranty or guarantee of accuracy. # Use of this data is at your own risk. If you have questions about # this report do not hesitate to contact us. # # Entries below are records of source IP addresses that have been # identified as sending recursive DNS IN ANY queries. # Each entry is sorted according to a route originating ASN. An entry # for the IP address is listed only once even if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # PyASN IP address to ASN mapping service to construct an origin AS # number and name. For details about PyASN, see: # # . # # The report format is as follows: # # ASN | ASname | ipaddr | lastseen | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the # entry IP address. Note, 4-byte ASNs are supported and # will be displayed as a 32-bit integer. NA is shown if # an origin ASN cannot be found. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. NA is shown if an # AS name cannot be found. # # ipaddr The IPv4 address that is being reported. # # lastseen A last seen timestamp formatted as YYYY-mm-dd HH:MM:SS # in UTC time. # # category Descriptive tag name for this entry. For this report, # the text dnsrdany will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 3320 | DTAG Deutsche Telekom AG | 91.26.38.34 | 2026-05-05 18:35:42 | dnsrdany 4811 | CHINANET-SHANGHAI-MAN China Te | 101.89.47.221 | 2026-05-07 04:41:59 | dnsrdany 4811 | CHINANET-SHANGHAI-MAN China Te | 101.89.49.42 | 2026-05-07 04:40:25 | dnsrdany 6698 | virtualsystems Virtual Systems | 154.6.41.103 | 2026-05-05 23:03:00 | dnsrdany 6698 | virtualsystems Virtual Systems | 154.6.41.163 | 2026-05-05 22:56:25 | dnsrdany 6698 | virtualsystems Virtual Systems | 154.6.41.223 | 2026-05-05 23:08:45 | dnsrdany 6698 | virtualsystems Virtual Systems | 154.6.41.43 | 2026-05-05 22:52:06 | dnsrdany 6698 | virtualsystems Virtual Systems | 154.6.41.46 | 2026-05-07 00:08:08 | dnsrdany 13335 | CLOUDFLARENET - Cloudflare, In | 188.114.96.0 | 2026-05-05 20:52:36 | dnsrdany 13335 | CLOUDFLARENET - Cloudflare, In | 188.114.97.0 | 2026-05-05 20:58:12 | dnsrdany 16276 | OVH OVH SAS | 146.59.36.129 | 2026-05-05 20:01:32 | dnsrdany 16509 | AMAZON-02 - Amazon.com, Inc. | 65.8.131.115 | 2026-05-05 12:33:51 | dnsrdany 20454 | SSASN2 - SECURED SERVERS LLC | 125.253.88.217 | 2026-05-06 18:23:44 | dnsrdany 21859 | ZEN-ECN - Zenlayer Inc | 129.227.69.202 | 2026-05-06 23:32:32 | dnsrdany 21859 | ZEN-ECN - Zenlayer Inc | 193.118.52.134 | 2026-05-06 23:01:28 | dnsrdany 30058 | FDCSERVERS - FDCservers.net | 50.7.22.221 | 2026-05-02 09:21:44 | dnsrdany 31898 | ORACLE-BMC-31898 - Oracle Corp | 146.56.180.42 | 2026-05-06 18:50:24 | dnsrdany 32002 | RACKGENIUS - RackGenius | 163.123.236.83 | 2026-05-06 00:01:21 | dnsrdany 32475 | SINGLEHOP-LLC - Internap Holdi | 206.191.154.172 | 2026-05-02 18:05:43 | dnsrdany 36352 | AS-COLOCROSSING - HostPapa | 67.215.232.98 | 2026-05-07 08:20:41 | dnsrdany 36680 | NETIFACELLC - Netiface LLC | 176.65.134.16 | 2026-05-07 12:01:43 | dnsrdany 37963 | ALIBABA-CN-NET Hangzhou Alibab | 118.31.74.146 | 2026-05-01 11:51:22 | dnsrdany 37963 | ALIBABA-CN-NET Hangzhou Alibab | 47.99.198.159 | 2026-05-05 17:05:26 | dnsrdany 41745 | FORTIS-AS Baykov Ilya Sergeevi | 45.10.165.14 | 2026-05-07 09:59:53 | dnsrdany 41745 | FORTIS-AS Baykov Ilya Sergeevi | 45.10.165.182 | 2026-05-07 05:09:15 | dnsrdany 41745 | FORTIS-AS Baykov Ilya Sergeevi | 45.138.101.78 | 2026-05-07 12:26:41 | dnsrdany 51115 | HLL-AS HLL LLC | 185.94.111.1 | 2026-05-06 05:35:24 | dnsrdany 51396 | PFCLOUD Pfcloud UG (haftungsbe | 176.65.148.251 | 2026-05-03 06:55:42 | dnsrdany 51396 | PFCLOUD Pfcloud UG (haftungsbe | 176.65.149.168 | 2026-05-06 13:28:50 | dnsrdany 51847 | NEAROUTE Nearoute Limited | 38.207.137.157 | 2026-05-04 13:59:14 | dnsrdany 51847 | NEAROUTE Nearoute Limited | 38.207.137.31 | 2026-05-07 11:50:25 | dnsrdany 53667 | PONYNET - FranTech Solutions | 199.195.252.194 | 2026-05-05 01:10:41 | dnsrdany 53667 | PONYNET - FranTech Solutions | 205.185.122.239 | 2026-05-04 13:59:37 | dnsrdany 59437 | NORTHERNDATA Northern Data AG | 85.234.91.228 | 2026-05-06 02:24:47 | dnsrdany 60223 | NETIFACE-AS Netiface Limited | 185.242.3.129 | 2026-05-07 01:50:01 | dnsrdany 60223 | NETIFACE-AS Netiface Limited | 185.242.3.179 | 2026-05-06 15:19:47 | dnsrdany 60223 | NETIFACE-AS Netiface Limited | 185.242.3.232 | 2026-05-01 22:30:14 | dnsrdany 60223 | NETIFACE-AS Netiface Limited | 185.242.3.58 | 2026-05-07 12:38:42 | dnsrdany 60223 | NETIFACE-AS Netiface Limited | 185.242.3.59 | 2026-05-07 11:12:52 | dnsrdany 62214 | RACKFOREST-AS Rackforest Zrt. | 185.80.50.31 | 2026-05-07 04:06:19 | dnsrdany 62390 | NEXONHOST NexonHost Srl | 89.47.232.171 | 2026-05-07 00:37:05 | dnsrdany 63949 | AKAMAI-LINODE-AP Akamai Connec | 172.105.16.78 | 2026-05-07 00:05:55 | dnsrdany 141718 | HHXYTC-AS-AP haoxiangyun | 154.6.152.15 | 2026-05-05 11:14:48 | dnsrdany 141718 | HHXYTC-AS-AP haoxiangyun | 154.6.152.17 | 2026-05-05 11:17:20 | dnsrdany 141718 | HHXYTC-AS-AP haoxiangyun | 172.110.220.240 | 2026-05-06 00:06:06 | dnsrdany 141718 | HHXYTC-AS-AP haoxiangyun | 43.250.125.76 | 2026-05-07 01:25:59 | dnsrdany 142430 | DIGIVPS-AS-AP DIGI VPS | 103.168.67.25 | 2026-05-06 18:22:30 | dnsrdany 149440 | EVOXTSDNBHD-AS-AP Evoxt Sdn. B | 23.27.140.245 | 2026-05-07 12:53:27 | dnsrdany 154402 | FREDYUN-AS-AP Fredyun Network | 143.20.246.100 | 2026-05-05 08:03:24 | dnsrdany 197540 | netcup-AS netcup GmbH | 94.16.113.252 | 2026-05-05 07:57:11 | dnsrdany 199701 | SEEDVPS Eldar Perez trading as | 185.248.160.107 | 2026-05-03 17:56:33 | dnsrdany 207279 | MARKAHOST-TELEKOMUNIKASYON-LIM | 78.135.87.65 | 2026-05-06 19:07:55 | dnsrdany 208795 | YANDEXCLOUDKZ "Cloud Services | 94.131.84.118 | 2026-04-30 16:41:44 | dnsrdany 208951 | AS-ITGLOBALCOM ITGLOBAL.COM NL | 188.227.87.144 | 2026-05-02 20:03:32 | dnsrdany 208951 | AS-ITGLOBALCOM ITGLOBAL.COM NL | 45.14.49.118 | 2026-05-02 20:01:32 | dnsrdany 209588 | FLYSERVERS-ASN Flyservers S.A. | 141.98.83.48 | 2026-05-07 05:55:00 | dnsrdany 209605 | hostbaltic UAB Host Baltic | 141.98.11.129 | 2026-05-06 08:04:40 | dnsrdany 209630 | KREDIT-AS LLC VASH KREDIT BANK | 151.243.11.37 | 2026-05-06 05:07:36 | dnsrdany 209974 | AS-ITGLOBALCOM-RU ITGLOBAL.COM | 46.243.182.3 | 2026-05-02 20:03:49 | dnsrdany 209974 | AS-ITGLOBALCOM-RU ITGLOBAL.COM | 78.140.242.68 | 2026-05-02 20:00:57 | dnsrdany 213220 | DATA-DELTA-AS Delta Ltd | 93.88.203.94 | 2026-05-01 14:49:31 | dnsrdany 214472 | STORMINDUSTRIES Offshore LC | 176.65.139.17 | 2026-05-07 12:57:57 | dnsrdany 214472 | STORMINDUSTRIES Offshore LC | 176.65.139.28 | 2026-05-03 19:41:28 | dnsrdany 214481 | wczapkowicz-as Wojciech Czapko | 141.11.62.84 | 2026-05-01 21:54:01 | dnsrdany 215925 | VPSVAULTHOST VPSVAULT.HOST LTD | 45.205.1.2 | 2026-05-07 00:47:13 | dnsrdany 215925 | VPSVAULTHOST VPSVAULT.HOST LTD | 45.205.1.70 | 2026-05-06 21:54:30 | dnsrdany 215925 | VPSVAULTHOST VPSVAULT.HOST LTD | 87.121.84.37 | 2026-05-02 06:35:37 | dnsrdany 215925 | VPSVAULTHOST VPSVAULT.HOST LTD | 87.121.84.93 | 2026-05-05 05:40:59 | dnsrdany 262287 | Latitude.sh LTDA | 206.223.236.169 | 2026-05-06 00:41:43 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.1 | 2026-05-07 04:22:06 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.104 | 2026-05-04 05:40:33 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.124 | 2026-05-07 02:22:18 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.126 | 2026-05-07 01:33:06 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.159 | 2026-05-01 22:37:00 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.195 | 2026-05-01 14:18:39 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.21 | 2026-05-04 03:57:50 | dnsrdany 396982 | GOOGLE-CLOUD-PLATFORM - Google | 216.180.246.3 | 2026-05-01 22:58:35 | dnsrdany 401626 | NETIFACE-TORONTO - Netiface Am | 64.89.163.247 | 2026-05-06 04:28:04 | dnsrdany # # Statistics # ASNs: 45 # Addresses: 78