nanog mailing list archives

Spoofer Report for NANOG for May 2025


From: CAIDA Spoofer Project via NANOG <nanog () lists nanog org>
Date: Sun, 8 Jun 2025 10:00:16 -0700

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during May 2025:
ASN    Name                                           Fixed-By
20381  CABLELABS-LV                                   2025-05-02
40676  AS40676                                        2025-05-14

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during May 2025:
ASN    Name                           First-Spoofed Last-Spoofed
577    BACOM                             2016-03-09   2025-05-04
40676  AS40676                           2016-08-29   2025-05-27
27364  ACS-INTERNET                      2016-09-27   2025-05-30
11427  TWC-11427-TEXAS                   2016-10-21   2025-05-05
63296  AWBROADBAND                       2017-09-01   2025-05-28
21804  ACCESS-SK                         2019-06-09   2025-05-27
32035  CCDT                              2021-06-09   2025-05-05
12183  TALKIE-COMMUNICATIONS             2022-12-10   2025-05-28
400282                                   2023-04-27   2025-05-28
393577 SCCNET                            2023-05-03   2025-05-29
61461  Airtek Solutions C.A.             2023-05-13   2025-05-28
20119  ARROW                             2023-10-19   2025-05-30
394684 WISPERNET                         2024-01-17   2025-05-29
393530 TLU                               2024-05-22   2025-05-31
19935  CRRS                              2024-05-29   2025-05-20
398182 BLN                               2024-06-17   2025-05-05
3801   MISNET                            2024-09-09   2025-05-14
54334  ROYA                              2025-03-13   2025-05-28
16739  MIDCO-NET-INV                     2025-03-19   2025-05-20
273843                                   2025-04-02   2025-05-27

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info () caida org
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/4TFIZNZ7Q4NYLRMGDZE4VIVTPNURENPP/


Current thread: