nanog mailing list archives

Spoofer Report for NANOG for Apr 2025


From: CAIDA Spoofer Project via NANOG <nanog () lists nanog org>
Date: Thu, 8 May 2025 15:58:03 -0700

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Apr 2025:
ASN    Name                                           Fixed-By
7922   COMCAST-7922                                   2025-04-02
32489  AMANAHA-NEW                                    2025-04-02
33490  COMCAST-33490                                  2025-04-09
212219                                                2025-04-19
10708  SELECTNET                                      2025-04-22
6360   UNIVHAWAII                                     2025-04-28

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Apr 2025:
ASN    Name                           First-Spoofed Last-Spoofed
5650   FRONTIER-FRTR                     2016-02-22   2025-04-05
7029   WINDSTREAM                        2016-06-21   2025-04-15
40676  AS40676                           2016-08-29   2025-04-30
27364  ACS-INTERNET                      2016-09-27   2025-04-23
63296  AWBROADBAND                       2017-09-01   2025-04-26
21804  ACCESS-SK                         2019-06-09   2025-04-28
32035  CCDT                              2021-06-09   2025-04-28
12183  TALKIE-COMMUNICATIONS             2022-12-10   2025-04-30
395418 ARIN-CHA                          2023-04-14   2025-04-29
400282                                   2023-04-27   2025-04-30
393577 SCCNET                            2023-05-03   2025-04-24
61461  Airtek Solutions C.A.             2023-05-13   2025-04-07
20119  ARROW                             2023-10-19   2025-04-25
394684 WISPERNET                         2024-01-17   2025-04-24
3801   MISNET                            2024-09-09   2025-04-25
138915 KAOPU-HK                          2025-03-30   2025-04-20
273843                                   2025-04-02   2025-04-29

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info () caida org
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/K6J4ZBQO35SFHAY2GBF5R5X5QMI6L7QI/


Current thread: