[nsp-sec] ACK 174 RE: 700K Open Resolver List

[Shelton, Steve]

 Stephen,

ACK for 174 and whatever else I can influence downstream.

Steve Shelton
Network Security Engineer
Cogent Communications

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Stephen Gill
Sent: Friday, April 10, 2009 5:55 PM
To: NSP-SEC List
Subject: [nsp-sec] 700K Open Resolver List

----------- nsp-security Confidential --------

Hi Team,

I took a somewhat restrictive view of the pcaps we have and parsed out
about 700K open resolvers used in the latest DNS amplifier attack across
~10K ASNs.  I believe there were closer to 1 Million total.

You can find the data split up by ASN here:

https://www.cymru.com/nsp-sec/Owned/recursive3/

ASNs affected:

https://www.cymru.com/nsp-sec/Owned/recursive3/asns.txt

Please do not download the entire list and only fetch the ones you have
control or influence over.

Comments/questions welcome & have a great weekend!

Cheers,
-- steve

--
Stephen Gill, Chief Scientist, Team Cymru http://www.cymru.com | +1 630
230 5423 | gillsr at cymru.com




_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________