Outdated DNSSEC Key IPv6 Report

This report identifies IPv6 hosts that have been observed using an outdated DNSSEC Key.

Once the KSK Rollover happens (currently slated for October 11, 2019), this will break DNSSEC on these servers.

We offer additional information on the IPv4 report here. For more details, see Root Zone KSK Rollover.

This report type was created using data graciously submitted by Verisign.

Fields

  • timestamp
    Time that a lookup was performed in UTC+0
  • ip
    The IP address performing the lookup
  • asn
    ASN announcing the IP performing the lookup
  • geo
    Country where the IP performing the lookup resides
  • region
    State / Province / Administrative region where the IP performing the lookup resides
  • city
    ASN of where the IP performing the lookup resides
  • hostname
    PTR record of the IP performing the lookup
  • dst_ip
    The destination IP of the lookup (belonging to Verisign)
  • dst_port
    Destination port in the lookup: always 53
  • dst_asn
    ASN announcing the destination IP
  • dst_geo
    Country where the destination IP resides
  • naics
    North American Industry Classification System Code of the IP performing the lookup
  • sic
    Standard Industrial Classification System Code of the IP performing the lookup
  • dst_naics
    North American Industry Classification System Code of the destination IP
  • dst_sic
    Standard Industrial Classification System Code of the destination IP
  • sector
    Sector the IP performing the lookup belongs to
  • dst_sector
    Sector the destination IP belongs to
  • tag
    Describing the issue, in this case "outdated-dnssec-key"
  • public_source
    Source of the data
  • protocol
    Protocol used for the lookup: "tcp" or "udp"

Sample

"timestamp","ip","asn","geo","region","city","hostname","dst_ip","dst_port","dst_asn","dst_geo","naics","sic","dst_naics","dst_sic","sector","dst_sector","tag","public_source","protocol"
"2018-09-04 00:01:40","2804:18:681a:766a:2:1:7479:d94b",26599,"BR",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:03:54","2001:1890:1ff:8c9:151:164:110:103",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:03:55","2001:1890:1ff:9c5:151:164:110:157",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:9c5:12:121:117:119",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:9c5:12:121:117:116",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:8c9:151:164:110:80",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:8c9:151:164:110:81",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:05:50","2603:9001:5182:d00:215:5dff:fea4:e80c",237,,,,"2603-9001-5182-0d00-0215-5dff-fea4-e80c.res.spectrum.com","2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:06:13","2a07:a880:4601:101::1004",,,,,"2a07-a880-4601-0101-0000-0000-0000-1004.pool6.ovpn.com","2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:09:28","2804:18:7806:c364:990e:1412:533:166e",26599,"BR",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:15:08","2001:418:1407::f",2914,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 01:35:55","2408:8001:100:3006::3",237,"CN",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","tcp"

Our 76 Report Types