[nsp-sec] Daily Reports Summary for week ending 2010-11-22

Kevin Oberman oberman at es.net
Mon Nov 22 10:27:35 EST 2010


Any reason for the huge jump in open resolvers yesterday? I am sure that
there were not that many new ones created and can't possibly explain a
just from about 100,000 to over 3 million, if I believe the plot on the
open resolvers page:
(https://www.cymru.com/nsp-sec/dailyreports/openresolvers.html) 

It looks far more dramatic than the numbers in this report:
report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
Openresolver 3,587,046  +390.8% 18647      0      112      730,865 10111

But, in either case, something seems to have sharply affected the
numbers beyond a few million folks deciding to turn on DNS and not
restricting access. over the course of a week. I have confirmed that the
systems that just showed up yesterday in my reports are legitimate, so
it is probably not a matter of false positives.
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman at es.net			Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751



More information about the nsp-security mailing list