[nsp-sec] 700K Open Resolver List

Fredrik Widell fredrik at widell.net
Sat Apr 11 08:52:37 EDT 2009


On Fri, 10 Apr 2009, Stephen Gill wrote:

> ----------- nsp-security Confidential --------
>
> Hi Team,
>
> I took a somewhat restrictive view of the pcaps we have and parsed out about
> 700K open resolvers used in the latest DNS amplifier attack across ~10K
> ASNs.  I believe there were closer to 1 Million total.
>
> You can find the data split up by ASN here:
>
> https://www.cymru.com/nsp-sec/Owned/recursive3/



Ack 12381
proxy-ack 48285



>
> ASNs affected:
>
> https://www.cymru.com/nsp-sec/Owned/recursive3/asns.txt
>
> Please do not download the entire list and only fetch the ones you have
> control or influence over.
>
> Comments/questions welcome & have a great weekend!
>
> Cheers,
> -- steve
>
>

-- 

Best regards

 	/Fredrik
 	icq:2991999 jabber:widell at jabber.se msn:fredrik at widell.net
 	WIDL1-RIPE | FW526-RIPE | TETE2-RIPE :)



More information about the nsp-security mailing list