nanog mailing list archives

[NANOG] Spoofer Report for NANOG for Mar 2025


From: CAIDA Spoofer Project via NANOG <nanog () lists nanog org>
Date: Tue, 8 Apr 2025 10:00:15 -0700

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Mar 2025:
ASN    Name                                           Fixed-By
215672                                                2025-03-07
30083  AS-30083-GO-DADDY-COM-LLC                      2025-03-10
13807  GREAT-PLAINS-COMMUNICATIONS                    2025-03-10
3701   NERONET                                        2025-03-13

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Mar 2025:
ASN    Name                           First-Spoofed Last-Spoofed
3356   LEVEL3                            2016-03-06   2025-03-11
40065  CNSERVERS                         2016-05-01   2025-03-10
40676  AS40676                           2016-08-29   2025-03-31
27364  ACS-INTERNET                      2016-09-27   2025-03-25
174    COGENT-174                        2016-10-21   2025-03-04
63296  AWBROADBAND                       2017-09-01   2025-03-28
21804  ACCESS-SK                         2019-06-09   2025-03-31
4134   CHINANET-BACKBONE                 2021-05-12   2025-03-03
32035  CCDT                              2021-06-09   2025-03-31
12183  TALKIE-COMMUNICATIONS             2022-12-10   2025-03-31
400282                                   2023-04-27   2025-03-26
393577 SCCNET                            2023-05-03   2025-03-25
202400                                   2023-05-08   2025-03-18
61461  Airtek Solutions C.A.             2023-05-13   2025-03-31
268207 RVT Serviços de Telecomunicaà   2023-09-04   2025-03-28
20119  ARROW                             2023-10-19   2025-03-28
394684 WISPERNET                         2024-01-17   2025-03-27
19935  CRRS                              2024-05-29   2025-03-26
3801   MISNET                            2024-09-09   2025-03-25
273143                                   2025-01-22   2025-03-22
269946                                   2025-02-09   2025-03-09
215672                                   2025-02-15   2025-03-07
18474  AENEAS-CWUS                       2025-03-03   2025-03-03
30162  ETHOPLEX                          2025-03-08   2025-03-08
54334  ROYA                              2025-03-13   2025-03-13
16739  MIDCO-NET-INV                     2025-03-19   2025-03-30
12097  MASSCOM                           2025-03-25   2025-03-25
138915 KAOPU-HK                          2025-03-30   2025-03-30

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info () caida org
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/I2B6WSGNRJBNPZ2DCF4SY32FRTTTRFKS/

Current thread: