[nsp-sec] ACK 15659 -- 700K Open Resolver List

Odd Stoltenberg ods at nextgentel.com
Mon Apr 13 19:54:47 EDT 2009


Ack for 15659

Thanks a lot. CPE investigation time... 

Regards
Odd

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of
> Stephen Gill
> Sent: Saturday, April 11, 2009 1:55 AM
> To: NSP-SEC List
> Subject: [nsp-sec] 700K Open Resolver List
> 
> ----------- nsp-security Confidential --------
> 
> Hi Team,
> 
> I took a somewhat restrictive view of the pcaps we have and parsed out
about
> 700K open resolvers used in the latest DNS amplifier attack across
~10K
> ASNs.  I believe there were closer to 1 Million total.
> 
> You can find the data split up by ASN here:
> 
> https://www.cymru.com/nsp-sec/Owned/recursive3/
> 
> ASNs affected:
> 
> https://www.cymru.com/nsp-sec/Owned/recursive3/asns.txt
> 
> Please do not download the entire list and only fetch the ones you
have
> control or influence over.
> 
> Comments/questions welcome & have a great weekend!
> 
> Cheers,
> -- steve
> 
> --
> Stephen Gill, Chief Scientist, Team Cymru
> http://www.cymru.com | +1 630 230 5423 | gillsr at cymru.com
> 
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
> community. Confidentiality is essential for effective Internet
security counter-measures.
> _______________________________________________



More information about the nsp-security mailing list