Este informe identifica hosts IPv6 que se han observado usando una clave DNSSEC desactualizada.
Una vez que ocurra el traspaso de KSK (actualmente programado para el 11 de octubre de 2019), esto romperá DNSSEC en estos servidores.
Se ofrece la información adicional sobre el informe de IPv4 aquí . Para obtener más detalles, consulte Transferencia de KSK de la zona raíz .
Este tipo de informe se creó utilizando datos enviados por Verisign.
CAMPOS
| timestamp | Hora en que se sondeó la IP en UTC+0 |
| ip | IP del dispositivo en cuestión |
| asn | ASN de donde reside el dispositivo en cuestión |
| geo | País donde reside el dispositivo en cuestión |
| region | Estado/Provincia/Región administrativa donde reside el dispositivo en cuestión |
| city | Ciudad donde reside el dispositivo en cuestión |
| hostname | Registro PTR de la IP que realiza la consulta |
| dst_ip | La IP de destino de la búsqueda (perteneciente a Verisign) |
| dst_port | Puerto de destino en la búsqueda: siempre 53 |
| dst_asn | ASN anunciando la IP de destino |
| dst_geo | País donde reside la IP de destino |
| naics | Código del sistema de clasificación de la industria de América del Norte de la IP que realiza la búsqueda |
| sic | Código del Sistema de Clasificación Industrial Estándar de la IP que realiza la consulta |
| dst_naics | Sistema de Clasificación Industrial Estándar Código de la IP de destino |
| dst_sic | Sector al que pertenece la IP que realiza la consulta |
| dst_sector | Sector al que pertenece la IP de destino |
| tag | Describiendo el problema, en este caso «clave-dnssec obsoleta» |
| public_source | Fuente de los datos |
| protocol | Protocolo utilizado para la búsqueda: «tcp» o «udp» |
EJEMPLO
"timestamp","ip","asn","geo","region","city","hostname","dst_ip","dst_port","dst_asn","dst_geo","naics","sic","dst_naics","dst_sic","sector","dst_sector","tag","public_source","protocol"
"2018-09-04 00:01:40","2804:18:681a:766a:2:1:7479:d94b",26599,"BR",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:03:54","2001:1890:1ff:8c9:151:164:110:103",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:03:55","2001:1890:1ff:9c5:151:164:110:157",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:9c5:12:121:117:119",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:9c5:12:121:117:116",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:8c9:151:164:110:80",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:04:10","2001:1890:1ff:8c9:151:164:110:81",7018,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:05:50","2603:9001:5182:d00:215:5dff:fea4:e80c",237,,,,"2603-9001-5182-0d00-0215-5dff-fea4-e80c.res.spectrum.com","2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:06:13","2a07:a880:4601:101::1004",,,,,"2a07-a880-4601-0101-0000-0000-0000-1004.pool6.ovpn.com","2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:09:28","2804:18:7806:c364:990e:1412:533:166e",26599,"BR",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 00:15:08","2001:418:1407::f",2914,"US",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","udp"
"2018-09-04 01:35:55","2408:8001:100:3006::3",237,"CN",,,,"2001:503:ba3e::2:30",53,26415,"US",,,,,,,"outdated-dnssec-key","verisign","tcp"
Fuente: https://www.shadowserver.org/what-we-do/network-reporting/outdated-dnssec-key-ipv6-report/