[nsp-sec] 700K Open Resolver List

Gert Doering gert at greenie.muc.de
Tue Apr 14 09:51:10 EDT 2009


Hi,

On Fri, Apr 10, 2009 at 04:54:50PM -0700, Stephen Gill wrote:
> I took a somewhat restrictive view of the pcaps we have and parsed out about
> 700K open resolvers used in the latest DNS amplifier attack across ~10K
> ASNs.  I believe there were closer to 1 Million total.

ACK 5539.  Customers with virtual www servers and BIND listening on 
*all* IP addresses of the system.  Plus "dumb routers answering on net &
broadcast addresses".

'twill take some time.

gert
-- 
Gert Doering
SpaceNet AG, AS 5539, gert at space.net.  PGP-KeyID: 0x65514975
Also reachable via gert at greenie.muc.de and gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 304 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20090414/bc9ea204/attachment-0001.sig>


More information about the nsp-security mailing list