[nsp-sec] 700K Open Resolver List

Mike Hughes mike at linx.net
Sat Apr 11 07:33:04 EDT 2009


--On 10 April 2009 16:54 -0700 Stephen Gill <gillsr at cymru.com> wrote:

> I took a somewhat restrictive view of the pcaps we have and parsed out
> about 700K open resolvers used in the latest DNS amplifier attack across
> ~10K ASNs.  I believe there were closer to 1 Million total.
> 
> You can find the data split up by ASN here:
> 
> https://www.cymru.com/nsp-sec/Owned/recursive3/
> 
> ASNs affected:
> 
> https://www.cymru.com/nsp-sec/Owned/recursive3/asns.txt

ACK 5459. It's a hosted machine belonging to someone who should know
better, and it's been raised with them.

-- 
Mike Hughes     Chief Technical Officer  London Internet Exchange Ltd.
mike at linx.net   http://www.linx.net/     
Registered in England 3137929 at 3 Park Road, Peterborough, PE1 2UX



More information about the nsp-security mailing list