|
Posted by Lutz Donnerhacke on May 7, 2007, 11:27 am
If you were Registered and logged in, you could reply and use other advanced thread options
Overview of 1449 signed zones:
1098 +5 Entry Point
7 broken chain
222 +27 chained
122 +85 unreachable
Top 10 autonomous systems injecting DNSSec zones:
440 -1 AS15725
387 AS3265
70 AS3333
69 AS3557
45 +45 AS16350
32 AS25537
32 AS3245
27 AS24776
23 +23 AS39570
17 AS36810
Top 10 TLD containing DNSSec zones:
359 +59 NL
242 ARPA
219 +1 DE
213 +8 COM
70 +38 SE
64 +2 ORG
54 +2 NET
33 BG
33 RU
26 INFO
577 (+9) weak keys:
Top 10 autonomous systems injecting weak keys:
360 AS3265
31 -1 AS25537
27 AS24776
13 AS3216
12 AS29632
10 -1 AS7132
7 AS20943
6 AS8228
5 -1 AS23342
5 AS8683
7 broken DS chains:
42.32.198.in-addr.arpa, badds.dnssec.jp, hostcount.ripe.net, k.ripe.net
ris.ripe.net, jelte.nlnetlabs.nl, bitstring.se
12 parent DS to unsigned zones:
128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa, 131.111.89.in-addr.arpa
132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa
135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa
138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa
24 (+7) unnecessary islands:
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
241.75.217.in-addr.arpa, 3.1.6.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, amstel.bg, badnxt.dnssec.jp
nods-ns.test.dnssec-tools.org, autonomica.se, bildframkallning.se, cafax.se
echo-lan.se, fotoaffisch.se, fotopresent.se, fotoprints.se, hooden.se
kortframkallning.se, nning.se, onlinefoto.se, pixaco.se, shinkuro.se
skabb.se, staver.se, zkt.se
122 unreachable zones:
Top 10 autonomous systems containing unreachable zones:
45 AS16350
4 AS10370
4 AS5537
2 AS7132
2 AS9150
2 AS40009
2 AS3561
1 AS39003
1 AS12996
1 AS31680
--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php
|
|
Posted by Lutz Donnerhacke on May 14, 2007, 11:00 am
If you were Registered and logged in, you could reply and use other advanced thread options
[ The amount of zones and the state of the zones stabilizes slowly.
I'll drop the posting frequency accordingly. -- lutz ]
[ Mit zunehmender Beruhigung der Statistik wird seltener gepostet. -- lutz ]
Overview of 1459 signed zones:
1084 -14 Entry Point
8 +1 broken chain
237 +15 chained
130 +8 unreachable
Top 10 autonomous systems injecting DNSSec zones:
440 AS15725
386 -1 AS3265
70 AS3333
69 AS3557
45 AS16350
43 +11 AS3245
31 -1 AS25537
27 AS24776
23 AS39570
17 AS36810
Top 10 TLD containing DNSSec zones:
359 NL
242 ARPA
219 DE
212 -1 COM
70 SE
64 ORG
54 NET
44 +11 BG
33 RU
26 INFO
568 (-9) weak keys:
Top 10 autonomous systems injecting weak keys:
354 -6 AS3265
31 AS25537
27 AS24776
13 AS3216
12 AS29632
10 AS7132
7 AS20943
6 AS8228
5 AS23342
5 AS8683
8 (+1) broken DS chains:
42.32.198.in-addr.arpa, wesh.netsec.tislabs.com, badds.dnssec.jp
hostcount.ripe.net, k.ripe.net, ris.ripe.net, jelte.nlnetlabs.nl
bitstring.se
14 (+2) parent DS to unsigned zones:
128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa, 131.111.89.in-addr.arpa
132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa
135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa
138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa
mike.netsec.tislabs.com, ldap.trstech.net
17 (-7) unnecessary islands:
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
241.75.217.in-addr.arpa, 3.1.6.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, amstel.bg, badnxt.dnssec.jp
nods-ns.test.dnssec-tools.org, autonomica.se, cafax.se, echo-lan.se
hooden.se, nning.se, shinkuro.se, skabb.se, staver.se, zkt.se
130 (+8) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
45 AS16350
5 +5 AS3265
4 AS10370
4 AS5537
2 AS7132
2 AS9150
2 AS40009
2 +1 AS20857
2 AS3561
1 AS39003
--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php
|
|
Posted by Lutz Donnerhacke on May 29, 2007, 4:11 am
If you were Registered and logged in, you could reply and use other advanced thread options
714 -370 Entry Point
11 +3 broken chain
235 -2 chained
26 +20 new
494 +364 unreachable
Top 10 autonomous systems injecting DNSSec zones:
440 AS15725
387 +1 AS3265
70 AS3333
69 +26 AS3245
68 -1 AS3557
45 AS16350
31 AS25537
27 AS24776
23 AS39570
17 AS36810
Top 10 TLD containing DNSSec zones:
356 -3 NL
241 -1 ARPA
220 +1 DE
212 COM
70 SE
70 +26 BG
64 ORG
53 -1 NET
32 -1 RU
26 INFO
223 (-345) weak keys:
Top 10 autonomous systems injecting weak keys:
31 AS25537
27 AS24776
13 AS3216
12 +2 AS7132
12 AS29632
7 AS20943
7 -347 AS3265
5 -1 AS8228
5 AS8683
4 AS546
11 (+3) broken DS chains:
17.32.198.in-addr.arpa, 42.32.198.in-addr.arpa, wesh.netsec.tislabs.com
badds.dnssec.jp, hostcount.ripe.net, k.ripe.net, ris.ripe.net
jelte.nlnetlabs.nl, bitstring.se, xn--ihrn-dpa.se
xn--lda-ula.xn--ihrn-dpa.se
23 (+9) parent DS to unsigned zones:
228.111.193.in-addr.arpa, 98.227.193.in-addr.arpa, 128.111.89.in-addr.arpa
129.111.89.in-addr.arpa, 130.111.89.in-addr.arpa, 131.111.89.in-addr.arpa
132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa
135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa
138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa
demo.netsec.tislabs.com, isles.netsec.tislabs.com, lindy.netsec.tislabs.com
mike.netsec.tislabs.com, orange.dnssec.jp, segdns.test.mx, ldap.trstech.net
a.smallzone.uk-dnssec.nic.uk
16 (-1) unnecessary islands:
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
241.75.217.in-addr.arpa, 3.1.6.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, badnxt.dnssec.jp
nods-ns.test.dnssec-tools.org, autonomica.se, cafax.se, echo-lan.se
hooden.se, nning.se, shinkuro.se, skabb.se, staver.se, zkt.se
494 (+364) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
380 +375 AS3265
45 AS16350
4 AS5537
2 -2 AS10370
2 AS9150
2 AS20857
2 AS3561
1 AS39003
1 AS12996
1 AS31680
--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php
|
|
Posted by Lutz Donnerhacke on May 29, 2007, 4:15 am
If you were Registered and logged in, you could reply and use other advanced thread options > Overview of 1480 signed zones:
> 714 -370 Entry Point
> 494 +364 unreachable
>
> Top 10 autonomous systems containing unreachable zones:
> 380 +375 AS3265
AS3265 did change their nameserver software. The new one is unable to serve
DNSSEC at the moment. They promise a fix.
> Overview of 1480 signed zones:
> 26 +20 new
>
> Top 10 TLD containing DNSSec zones:
> 70 +26 BG
Bulgaria introduced the twenty six new SLDs [a-z].bg and a signed domain is
registred by all these new SLDs, too.
|
|
Posted by Lutz Donnerhacke on June 11, 2007, 4:42 am
If you were Registered and logged in, you could reply and use other advanced thread options
709 -5 Entry Point
10 -1 broken chain
279 +44 chained
0 -26 new
421 -73 unreachable
Top 10 autonomous systems injecting DNSSec zones:
440 AS15725
385 -2 AS3265
70 AS3333
69 AS3245
68 AS3557
30 -1 AS25537
27 AS24776
23 AS39570
19 +19 AS22548
17 AS36810
Top 10 TLD containing DNSSec zones:
296 -60 NL
241 ARPA
219 -1 DE
204 -8 COM
70 SE
70 BG
62 -2 ORG
51 -2 NET
31 -1 RU
26 INFO
212 (-11) weak keys:
Top 10 autonomous systems injecting weak keys:
30 -1 AS25537
26 -1 AS24776
13 AS3216
12 AS7132
12 AS29632
7 AS20943
7 AS3265
5 AS8228
5 AS8683
4 AS546
10 (-1) broken DS chains:
17.32.198.in-addr.arpa, 42.32.198.in-addr.arpa, wesh.netsec.tislabs.com
badds.dnssec.jp, hostcount.ripe.net, k.ripe.net, ris.ripe.net, bitstring.se
xn--ihrn-dpa.se, xn--lda-ula.xn--ihrn-dpa.se
28 (+5) parent DS to unsigned zones:
228.111.193.in-addr.arpa, 98.227.193.in-addr.arpa, 128.111.89.in-addr.arpa
129.111.89.in-addr.arpa, 130.111.89.in-addr.arpa, 131.111.89.in-addr.arpa
132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa
135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa
138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa
demo.netsec.tislabs.com, isles.netsec.tislabs.com, lindy.netsec.tislabs.com
mike.netsec.tislabs.com, robert.wesh.netsec.tislabs.com, orange.dnssec.jp
segdns.test.mx, ldap.trstech.net, klan-csa.se, nl-dnssectest.se, umdac.se
webro.se, a.smallzone.uk-dnssec.nic.uk
17 (+1) unnecessary islands:
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
241.75.217.in-addr.arpa, 3.1.6.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, pixaco.com.br, badnxt.dnssec.jp
nods-ns.test.dnssec-tools.org, autonomica.se, cafax.se, echo-lan.se
hooden.se, nning.se, shinkuro.se, skabb.se, staver.se, zkt.se
421 (-73) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
378 -2 AS3265
4 +2 AS10370
4 AS5537
1 +1 AS24776
1 +1 AS23342
1 +1 AS39570
1 +1 AS1273
1 +1 AS15083
1 +1 AS22548
1 +1 AS6245
--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php
|
|
XML site map