Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
user:pangea [2024-04-19T07:16:15Z] – [Log Anonymization] pangea | user:pangea [2025-03-20T15:55:50Z] (current) – pangea | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | **Note:** Restructuring of infrastructure in progress | + | **Depracated...** Project no longer active. |
- | ==== Who is behind pangea? ==== | ||
- | |||
- | Welcome to our little space on the OpenNIC Wiki. We are operating a handful of globally distributed DNS resolvers which are compatible with the OpenNIC TLDs. The servers are configured to log anonymized data in a central location in Europe. This feedback is used for threat intelligence research. The public front of the project is [[https:// | ||
- | |||
- | === Public Resolver === | ||
- | |||
- | All of our public resolver support DNS over UDP/53, DoT, DoH and support regular OpenNIC and ICANN TLDs. | ||
- | |||
- | ^ OpenNIC Domain ^ ICANN Domain ^ Country Code ^ IPv4 ^ IPv6 ^ Status ^ | ||
- | | ns2.cl.dns.opennic.glue | dns1.cl.newpangea.de | CL | 64.176.6.48 | 2001: | ||
- | | ns1.fi.dns.opennic.glue | dns1.fi.newpangea.de | FI | 65.21.1.106 | 2a01: | ||
- | | ns6.in.dns.opennic.glue | dns1.in.newpangea.de | IN | 139.84.165.176 | 2401: | ||
- | | ns2.pl.dns.opennic.glue | dns1.pl.newpangea.de | PL | 70.34.254.19 | 2a05: | ||
- | | ns3.ru.dns.opennic.glue | dns1.ru.newpangea.de | RU | 45.84.1.149 | 2a09: | ||
- | | - | dns1.uk.newpangea.de | UK | - | - | non-operational | | ||
- | | ns2.va.us.dns.opennic.glue | dns1.us.newpangea.de | US | 5.161.109.23 | 2a01: | ||
- | |||
- | |||
- | === Log Anonymization === | ||
- | |||
- | Since IP addresses are considered PII under the GDPR (and some other legislation), | ||
- | |||
- | |||
- | === Research === | ||
- | |||
- | With anonymized input, we want to provide some threat intelligence with an exploratory outcome. The goals can be but are not limited to: | ||
- | |||
- | * Botnet C2 infrastructure | ||
- | * DNS R/A DDoS attacks | ||
- | * DNS query flood attacks | ||
- | * DNS water torture attacks (Query floods to non-existing domain names) | ||
- | |||
- | |||
- | === Resources === | ||
- | |||
- | * Project Website: [[https:// |