nanog mailing list archives

Spoofer Report for NANOG for Nov 2024


From: CAIDA Spoofer Project <spoofer-info () caida org>
Date: Sun, 8 Dec 2024 10:00:16 -0800

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Nov 2024:
ASN    Name                                           Fixed-By
52210  AsreTeleCoM-SP                                 2024-11-03
55     UPENN                                          2024-11-13

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Nov 2024:
ASN    Name                           First-Spoofed Last-Spoofed
40676  AS40676                           2016-08-29   2024-11-25
20412  CLARITY-TELECOM                   2016-09-30   2024-11-12
6181   FUSE-NET                          2016-10-10   2024-11-26
11404  AS-VOBIZ                          2016-11-11   2024-11-27
2152   CSUNET-NW                         2017-11-08   2024-11-27
6360   UNIVHAWAII                        2019-02-25   2024-11-08
21804  ACCESS-SK                         2019-06-09   2024-11-26
22773  ASN-CXA-ALL-CCI-22773-RDC         2021-10-24   2024-11-30
4922   SHENTEL                           2021-12-28   2024-11-18
12183  TALKIE-COMMUNICATIONS             2022-12-10   2024-11-28
3701   NERONET                           2023-04-18   2024-11-30
400282                                   2023-04-27   2024-11-27
393577 SCCNET                            2023-05-03   2024-11-26
202400                                   2023-05-08   2024-11-25
61461  Airtek Solutions C.A.             2023-05-13   2024-11-18
20119  ARROW                             2023-10-19   2024-11-28
394684 WISPERNET                         2024-01-17   2024-11-30
27425  ASN-IDK-27425                     2024-02-21   2024-11-11
19935  CRRS                              2024-05-29   2024-11-30
17049  MBO-NET                           2024-07-13   2024-11-02
3801   MISNET                            2024-09-09   2024-11-26
20260  SAWTEL-UC                         2024-10-16   2024-11-28
4540   ASN01-SOGE                        2024-11-02   2024-11-02
27523  DMB-ASN                           2024-11-15   2024-11-15
14589  DIGITALWEST                       2024-11-21   2024-11-21

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info () caida org


Current thread: