Yes and no. Most of the spoofed attacks fall into two categories. A) the IPs are fake but from within the originating AS. Fake ip's but belonging to the right

Yes and no. Most of the spoofed attacks fall into two categories. A) the IPs are fake but from within the originating AS. Fake ip's but belonging to the right AS. Not much to do about it except for pressing the admins to deploy source validation on their cutomers which may be hard. B) IPs spoofed from whole IP space delivered over a Tier 1 provider. Tier 1 ISP's can't do IP validation for majority of the traffic. Instead we ask them for netflow data - from which of their customers the fake IP's originated. Sadly in most cases they lack netflow infrastructure. But both of these scenarios are about IP spoofed floods going directly to us. For amplifications there is nothing we can do. We don't know who originated the spoofed traffic aimed at reflector servers.