Mal ein paar DNSSec Statistiken

Mal ein paar DNSSec Statistiken

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Mal ein paar DNSSec Statistiken Lutz Donnerhacke 05-07-2007
Posted by Lutz Donnerhacke on October 1, 2007, 10:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Overview of 11616 signed zones:
1461 -38 Entry Point
9619 +1 Test
5 -1 broken chain
417 +12 chained
0 new
114 +15 unreachable

Top 10 autonomous systems injecting DNSSec zones:
767 -16 AS25537
457 -4 AS15725
125 AS3557
77 AS3333
72 +2 AS22548
70 +1 AS3245
45 AS24776
28 AS39570
19 +2 AS36810
19 AS559

Top 10 TLD containing DNSSec zones:
767 -16 RU
278 +4 ARPA
231 -1 DE
142 -5 COM
102 +2 ORG
91 +3 SE
89 +5 BR
69 BG
48 NET
38 FR

911 (-39) weak keys:
Top 10 autonomous systems injecting weak keys:
715 -38 AS25537
45 AS24776
18 AS3216
16 AS8228
13 AS29632
9 +1 AS20943
8 -1 AS7132
4 AS29344
3 AS2119
3 AS3215

5 (-1) broken DS chains:
17.32.198.in-addr.arpa, 42.32.198.in-addr.arpa, bitstring.se
xn--ihrn-dpa.se, xn--lda-ula.xn--ihrn-dpa.se

46 (+22) parent DS to unsigned zones:
0.20.149.in-addr.arpa, 20.20.149.in-addr.arpa, 64.20.149.in-addr.arpa
157.110.193.in-addr.arpa, 228.111.193.in-addr.arpa, 98.227.193.in-addr.arpa
128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa, 130.111.89.in-addr.arpa
131.111.89.in-addr.arpa, 132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa
134.111.89.in-addr.arpa, 135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa
137.111.89.in-addr.arpa, 138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa
140.111.89.in-addr.arpa, niet.verweg.com, dnssec.test.kr, drone.test.kr
khj.test.kr, prove.test.kr, ldap.trstech.net, pdnssec.jelte.nlnetlabs.nl
sub.sub.jelte.nlnetlabs.nl, backgammon.brixtal.se, cycled.brixtal.se
decay.brixtal.se, mods.brixtal.se, nyetworks.brixtal.se, spiffy.brixtal.se
swabbing.brixtal.se, tooled.brixtal.se, zenning.brixtal.se, zero.brixtal.se
hogskolaniboras.se, klan-csa.se, kristianstadpower.se, lyrek.se
nl-dnssectest.se, tshirttryck.se, umdac.se, webro.se, xelerance.se

29 (+3) unnecessary islands:
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
146.32.198.in-addr.arpa, 178.32.198.in-addr.arpa, 4.32.198.in-addr.arpa
178.25.217.in-addr.arpa, 241.75.217.in-addr.arpa
4.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 5.2.0.0.1.6.0.1.0.0.2.ip6.arpa
6.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 7.2.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, pixaco.com.br, eficacia.eng.br
conectway.net.br, sub.jelte.nlnetlabs.nl, ipv6.stack.nl, dyn.johani.org
ddns.klubkev.org, autonomica.se, cafax.se, echo-lan.se, gavle.se, nning.se
ockelbo.se, shinkuro.se, skabb.se, staver.se, zkt.se

114 (+15) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
52 +22 AS25537
12 AS5537
5 -2 AS15725
5 +1 AS39570
2 AS3265
1 AS2833
1 +1 AS13270
1 AS23342
1 +1 AS12322
1 +1 AS20712


--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php

Posted by Lutz Donnerhacke on December 7, 2007, 5:12 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Overview of 11656 signed zones:
1496 +35 Entry Point
9618 -1 Test
5 broken chain
440 +23 chained
0 new
97 -17 unreachable

Top 10 autonomous systems injecting DNSSec zones:
733 -34 AS25537
456 -1 AS15725
128 +3 AS3557
81 +9 AS22548
78 +1 AS3333
72 +2 AS3245
45 AS24776
32 -353 AS3265
29 +1 AS39570
21 +2 AS36810

Top 10 TLD containing DNSSec zones:
733 -34 RU
285 +7 ARPA
233 +2 DE
159 +17 COM
122 +20 ORG
99 +10 BR
84 -7 SE
71 +2 BG
53 +5 NET
38 FR

871 (-40) weak keys:
Top 10 autonomous systems injecting weak keys:
689 -26 AS25537
45 AS24776
18 AS3216
15 -1 AS8228
9 -4 AS29632
8 -1 AS20943
4 AS29344
4 AS12859
3 AS2119
3 AS3215

5 broken DS chains:
228.111.193.in-addr.arpa, sparta.dnsops.biz, ornl.dnsops.gov, bitstring.se
tgfslp.dalmany.co.uk

31 (-15) parent DS to unsigned zones:
0.20.149.in-addr.arpa, 64.20.149.in-addr.arpa, 157.110.193.in-addr.arpa
178.170.195.in-addr.arpa, 128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa
130.111.89.in-addr.arpa, 131.111.89.in-addr.arpa, 132.111.89.in-addr.arpa
133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa, 135.111.89.in-addr.arpa
136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa, 138.111.89.in-addr.arpa
139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa, dnssec.test.kr
drone.test.kr, khj.test.kr, prove.test.kr, blopp.se, hogskolaniboras.se
klan-csa.se, kristianstadpower.se, lyrek.se, mirall.se, nl-dnssectest.se
tshirttryck.se, webro.se, xn--botsmarksdck-pcb.se

31 (+2) unnecessary islands:
8.4.e164.arpa, 2.2.0.2.4.6.3.3.6.6.9.4.e164.arpa, 1.2.0.0.1.8.e164.arpa
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa, 42.32.198.in-addr.arpa
178.25.217.in-addr.arpa, 241.75.217.in-addr.arpa
4.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 5.2.0.0.1.6.0.1.0.0.2.ip6.arpa
6.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 7.2.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, 1.0.0.0.e.4.7.c.3.6.8.d.2.0.0.2.ip6.arpa
e.8.1.c.8.0.3.0.1.0.a.2.ip6.arpa, cerebrohidroponico.blog.br, pixaco.com.br
eficacia.eng.br, rev.faelix.net, ipv6.stack.nl, parent.dnssec-test.org
signed.dnssec-test.org, dyn.johani.org, ddns.klubkev.org, autonomica.se
echo-lan.se, shinkuro.se, skabb.se, staver.se, xn--lda-ula.xn--ihrn-dpa.se
zkt.se

97 (-17) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
44 -8 AS25537
12 AS5537
6 +1 AS39570
4 +4 AS28860
4 +4 AS29632
2 +2 AS1103
1 +1 AS3245
1 -1 AS3265
1 +1 AS39858
1 -4 AS15725


--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php

Posted by Lutz Donnerhacke on January 2, 2008, 5:36 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Overview of 11647 signed zones:
1495 -1 Entry Point
9618 Test
6 +1 broken chain
453 +13 chained
0 new
75 -22 unreachable

Top 10 autonomous systems injecting DNSSec zones:
720 -13 AS25537
456 AS15725
136 +136 AS1280
81 AS22548
78 AS3333
71 -1 AS3245
46 +1 AS24776
32 AS3265
29 AS39570
21 AS36810

Top 10 TLD containing DNSSec zones:
720 -13 RU
288 +3 ARPA
234 +1 DE
161 +2 COM
121 -1 ORG
100 +1 BR
84 SE
70 -1 BG
53 NET
37 -1 FR

872 (+1) weak keys:
Top 10 autonomous systems injecting weak keys:
690 +1 AS25537
42 -3 AS24776
18 AS3216
15 AS8228
10 +1 AS29632
8 AS20943
4 AS1103
4 AS29344
4 AS12859
3 AS2119

6 (+1) broken DS chains:
228.111.193.in-addr.arpa, sparta.dnsops.biz, llnl.dnsops.gov, bitstring.se
dyn.niconet.se, tgfslp.dalmany.co.uk

27 (-4) parent DS to unsigned zones:
0.20.149.in-addr.arpa, 64.20.149.in-addr.arpa, 157.110.193.in-addr.arpa
178.170.195.in-addr.arpa, 128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa
130.111.89.in-addr.arpa, 131.111.89.in-addr.arpa, 132.111.89.in-addr.arpa
133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa, 135.111.89.in-addr.arpa
136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa, 138.111.89.in-addr.arpa
139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa, blopp.se
hogskolaniboras.se, klan-csa.se, kristianstadpower.se, lyrek.se, mirall.se
nl-dnssectest.se, tshirttryck.se, webro.se, xn--botsmarksdck-pcb.se

33 (+2) unnecessary islands:
8.4.e164.arpa, 2.2.0.2.4.6.3.3.6.6.9.4.e164.arpa, 1.2.0.0.1.8.e164.arpa
64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa, 42.32.198.in-addr.arpa
178.25.217.in-addr.arpa, 241.75.217.in-addr.arpa
4.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 5.2.0.0.1.6.0.1.0.0.2.ip6.arpa
6.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 7.2.0.0.1.6.0.1.0.0.2.ip6.arpa
7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, e.8.1.c.8.0.3.0.1.0.a.2.ip6.arpa
cerebrohidroponico.blog.br, digitaltv.blog.br, pixaco.com.br
eficacia.eng.br, antd.nist.gov, rev.faelix.net, broken.jelte.nlnetlabs.nl
sub.jelte.nlnetlabs.nl, ipv6.stack.nl, signed.dnssec-test.org
dyn.johani.org, ddns.klubkev.org, autonomica.se, echo-lan.se, shinkuro.se
skabb.se, staver.se, xn--lda-ula.xn--ihrn-dpa.se, zkt.se

75 (-22) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
30 -14 AS25537
12 AS5537
6 AS39570
4 +3 AS24776
2 +1 AS15725
1 AS22894
1 +1 AS9700
1 AS3265
1 AS39858
1 AS7132


--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php

Posted by Lutz Donnerhacke on January 2, 2008, 5:38 am
If you were  Registered and logged in, you could reply and use other advanced thread options
* Lutz Donnerhacke wrote:
10 autonomous systems injecting DNSSec zones:
> 136 +136 AS1280


Simple reason: ISC changed their AS.

Posted by Lutz Donnerhacke on February 4, 2008, 10:38 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Overview of 11666 signed zones:
1510 +15 Entry Point
9620 +2 Test
4 -2 broken chain
469 +16 chained
0 new
63 -12 unreachable

Top 10 autonomous systems injecting DNSSec zones:
717 -3 AS25537
465 +9 AS15725
137 +1 AS1280
85 +4 AS22548
78 AS3333
71 AS3245
42 -4 AS24776
31 -1 AS3265
28 -1 AS39570
25 +4 AS36810

Top 10 TLD containing DNSSec zones:
717 -3 RU
290 +2 ARPA
233 -1 DE
166 +5 COM
122 +1 ORG
107 +7 BR
88 +4 SE
70 BG
58 +5 NET
34 -3 FR

33 (-839) weak keys:
55.129.in-addr.arpa, 124.32.198.in-addr.arpa, omnity.biz
sandelman.ottawa.on.ca, arakelian.com, gothea.com, intra-links.com
lecorvaisier.com, nikomotos.com, richelieu-consultants.com
agent-factory.de, the-agent-factory.de, bethelks.edu, ll.mit.edu
aarechargement.fr, gigamax.fr, guiraudsa.fr, intra-links.fr, john-nathan.fr
lbpdecoration.fr, lesbeauxpapiers.fr, taplow-consulting.fr, vrai-decor.fr
intra-links.net, rp.secret-wg.org, interlan.se, keyserver.se, skabb.se
spam112.se, staver.se, umdac.se, vfqa.se, zkt.se

4 (-2) broken DS chains:
228.111.193.in-addr.arpa, sparta.dnsops.biz, ch.pr, bitstring.se

25 (-2) parent DS to unsigned zones:
0.20.149.in-addr.arpa, 64.20.149.in-addr.arpa, 157.110.193.in-addr.arpa
178.170.195.in-addr.arpa, 128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa
130.111.89.in-addr.arpa, 131.111.89.in-addr.arpa, 132.111.89.in-addr.arpa
133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa, 135.111.89.in-addr.arpa
136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa, 138.111.89.in-addr.arpa
139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa, blopp.se
hogskolaniboras.se, klan-csa.se, kristianstadpower.se, lyrek.se, mirall.se
tshirttryck.se, xn--botsmarksdck-pcb.se

31 (-2) unnecessary islands:
8.4.e164.arpa, 8.0.6.4.1.4.6.3.9.4.e164.arpa, 3.7.5.1.4.6.3.9.4.e164.arpa
2.2.0.2.4.6.3.3.6.6.9.4.e164.arpa, 1.2.0.0.1.8.e164.arpa
0.68.193.in-addr.arpa, 42.32.198.in-addr.arpa, 178.25.217.in-addr.arpa
241.75.217.in-addr.arpa, 4.2.0.0.1.6.0.1.0.0.2.ip6.arpa
5.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 6.2.0.0.1.6.0.1.0.0.2.ip6.arpa
7.2.0.0.1.6.0.1.0.0.2.ip6.arpa, 7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa
1.0.0.0.e.4.7.c.3.6.8.d.2.0.0.2.ip6.arpa, e.8.1.c.8.0.3.0.1.0.a.2.ip6.arpa
metalplast.bg, cerebrohidroponico.blog.br, digitaltv.blog.br, pixaco.com.br
eficacia.eng.br, tjmg.gov.br, rev.faelix.net, dyn.johani.org, autonomica.se
echo-lan.se, shinkuro.se, skabb.se, staver.se, xn--lda-ula.xn--ihrn-dpa.se
zkt.se

63 (-12) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
25 -5 AS25537
12 AS5537
5 -1 AS39570
3 +3 AS23504
1 AS3265
1 AS7132
1 +1 AS45
1 AS39858
1 -1 AS15725
1 AS24940


--
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php

Similar ThreadsPosted
My personal DNSSEC key distribution November 27, 2007, 6:45 am

The site map in XML format XML site map

Contact Us | Privacy Policy