nanog mailing list archives

Spoofer Report for NANOG for Feb 2026


From: CAIDA Spoofer Project via NANOG <nanog () lists nanog org>
Date: Sun, 8 Mar 2026 10:00:18 +0000

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Feb 2026:
ASN    Name                                           Fixed-By
13781  ENERGYNET                                      2026-02-23
33711  IP-TELECOM                                     2026-02-27

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Feb 2026:
ASN    Name                           First-Spoofed Last-Spoofed
3356   LEVEL3                            2016-03-06   2026-02-28
27364  ACS-INTERNET                      2016-09-27   2026-02-03
22883  CONDENAST                         2019-05-29   2026-02-24
21804  ACCESS-SK                         2019-06-09   2026-02-24
52643  N&G Tecnologia LTDA               2019-09-24   2026-02-23
393397 LREC-LRT                          2020-08-02   2026-02-08
36352  AS-COLOCROSSING                   2020-10-08   2026-02-27
55016  IMPER-AS-1                        2021-05-18   2026-02-22
22773  ASN-CXA-ALL-CCI-22773-RDC         2021-10-24   2026-02-25
12183  TALKIE-COMMUNICATIONS             2022-12-10   2026-02-28
400282                                   2023-04-27   2026-02-28
393577 SCCNET                            2023-05-03   2026-02-27
394684 AS-GOLD                           2024-01-17   2026-02-28
27425  ASN-IDK-27425                     2024-02-21   2026-02-23
53755  IOFLOOD                           2024-02-23   2026-02-28
393530 TLU                               2024-05-22   2026-02-25
19935  CRRS                              2024-05-29   2026-02-20
265561 LANTOINTERNET SA DE CV            2024-09-06   2026-02-27
273143                                   2025-01-22   2026-02-25
54334  ROYA                              2025-03-13   2026-02-27
273843                                   2025-04-02   2026-02-26
6134   XNNET                             2026-02-12   2026-02-12
212238 CDNEXT                            2026-02-18   2026-02-25
47046                                    2026-02-26   2026-02-26

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info () caida org
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/NA7X5ZJ7TCELUDFGNGDFSJF3VA7AH4FE/


Current thread: