Spoofing ASNs (Re: SNMP DDoS: the vulnerability you might not know you have)
ikiris at gmail.com
Thu Aug 8 18:07:56 UTC 2013
On a related note, how are you actually getting this data?
What you have said previously ( Number of unique IPs that spoofed a packet
to me. (eg: I sent a packet to 220.127.116.11 and 18.104.22.168 responded). ) doesn't
even make sense.
On Thu, Aug 8, 2013 at 12:51 PM, Jared Mauch <jared at puck.nether.net> wrote:
> Oops, I pulled the wrong data (off by one column) out before a trip and
> didn't realize it until now.
> This is not the spoofer list, but the list of ASNs with open resolvers.
> Let me reprocess it.
> Apologies, corrected data being generated.
> - Jared
> On Aug 8, 2013, at 1:29 PM, Jared Mauch <jared at puck.nether.net> wrote:
> > The following is a sorted list from worst to best of networks that allow
> spoofing: (cutoff here is 25k)
> > (full list -
> http://openresolverproject.org/full-spoofer-asn-list-201307.txt )
More information about the NANOG