Differences
This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
user:pangea [2023-06-23T07:58:57Z] – created pangea | user:pangea [2024-04-19T07:16:15Z] (current) – [Log Anonymization] pangea | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | # pangea | + | **Note:** Restructuring of infrastructure in progress |
- | WIP - Please come back later. | + | ==== Who is behind pangea? ==== |
+ | |||
+ | Welcome to our little space on the OpenNIC Wiki. We are operating a handful of globally distributed DNS resolvers which are compatible with the OpenNIC TLDs. The servers are configured to log anonymized data in a central location in Europe. This feedback is used for threat intelligence research. The public front of the project is [[https:// | ||
+ | |||
+ | === Public Resolver === | ||
+ | |||
+ | All of our public resolver support DNS over UDP/53, DoT, DoH and support regular OpenNIC and ICANN TLDs. | ||
+ | |||
+ | ^ OpenNIC Domain ^ ICANN Domain ^ Country Code ^ IPv4 ^ IPv6 ^ Status ^ | ||
+ | | ns2.cl.dns.opennic.glue | dns1.cl.newpangea.de | CL | 64.176.6.48 | 2001: | ||
+ | | ns1.fi.dns.opennic.glue | dns1.fi.newpangea.de | FI | 65.21.1.106 | 2a01: | ||
+ | | ns6.in.dns.opennic.glue | dns1.in.newpangea.de | IN | 139.84.165.176 | 2401: | ||
+ | | ns2.pl.dns.opennic.glue | dns1.pl.newpangea.de | PL | 70.34.254.19 | 2a05: | ||
+ | | ns3.ru.dns.opennic.glue | dns1.ru.newpangea.de | RU | 45.84.1.149 | 2a09: | ||
+ | | - | dns1.uk.newpangea.de | UK | - | - | non-operational | | ||
+ | | ns2.va.us.dns.opennic.glue | dns1.us.newpangea.de | US | 5.161.109.23 | 2a01: | ||
+ | |||
+ | |||
+ | === Log Anonymization === | ||
+ | |||
+ | Since IP addresses are considered PII under the GDPR (and some other legislation), | ||
+ | |||
+ | |||
+ | === Research === | ||
+ | |||
+ | With anonymized input, we want to provide some threat intelligence with an exploratory outcome. The goals can be but are not limited to: | ||
+ | |||
+ | * Botnet C2 infrastructure | ||
+ | * DNS R/A DDoS attacks | ||
+ | * DNS query flood attacks | ||
+ | * DNS water torture attacks (Query floods to non-existing domain names) | ||
+ | |||
+ | |||
+ | === Resources === | ||
+ | |||
+ | * Project Website: [[https:// |