{"id":14124,"date":"2020-10-09T18:27:48","date_gmt":"2020-10-09T18:27:48","guid":{"rendered":"https:\/\/prensa.lacnic.net\/news?p=14124"},"modified":"2020-10-13T14:57:06","modified_gmt":"2020-10-13T14:57:06","slug":"lacnic-presents-a-study-to-identify-open-dns-resolvers-with-ipv4-in-the-region","status":"publish","type":"post","link":"https:\/\/blog.lacnic.net\/en\/lacnic-presents-a-study-to-identify-open-dns-resolvers-with-ipv4-in-the-region\/","title":{"rendered":"LACNIC Presents a Study to Identify Open DNS Resolvers with IPv4 in the Region"},"content":{"rendered":"\n

During the LACNIC 34 – LACNOG 2020 event, LACNIC’s Computer Security Incident Response Team (CSIRT) presented \u201cOpen DNS Resolvers with IPv4<\/a>,\u201d an initiative that seeks to identify servers that are vulnerable to cyberattacks across the region.<\/p>\n\n\n\n

The project is implemented together with CSIRT CEDIA, the CSIRT operated by the Ecuadorian Corporation for Research and Academia (CEDIA), for the purpose of understanding the region’s current status, identifying open servers with IPv4, and proactively alerting and providing recommendations on how an organization can correct their configuration of the service, explained Guillermo Pereyra, LACNIC CSIRT Security Analyst.<\/p>\n\n\n\n

Open servers can have serious consequences, both for those with the open service as well as for Internet security in general.<\/p>\n\n\n\n

\u201cThis type of (open) servers are used as vectors for amplification DDoS attacks, as an attacker can send these servers a recursive DNS query that will return a large amount of data, much larger than the original DNS request packet. This makes the DNS server a very powerful traffic amplifier, as these amplified queries can be directed to a specific IP address, which would receive a large volume of traffic that would render their services unavailable,\u201d Pereyra explained.<\/p>\n\n\n\n

A server with an incorrect or outdated configuration compromises the security of its network as well as the security of other servers connected to the Internet. It is a vulnerable system that extends its vulnerability to the entire system, and this can be exploited by malicious attackers<\/p>\n\n\n\n

\u201cThe proper administration of the resources connected to the Internet requires considering the systems\u2019 security from the moment of their design,\u201d Pereyra stressed during her presentation.<\/p>\n\n\n\n