Mailing List Archive

Spoofer Report for NANOG for Jan 2024
In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Jan 2024:
ASN Name Fixed-By
25787 ROWE-NETWORKS 2024-01-10
6461 ZAYO-6461 2024-01-11
202400 2024-01-13
40401 2024-01-24

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Jan 2024:
ASN Name First-Spoofed Last-Spoofed
209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2024-01-26
27364 ACS-INTERNET 2016-09-27 2024-01-31
20412 CLARITY-TELECOM 2016-09-30 2024-01-31
12083 WOW-INTERNET 2016-11-09 2024-01-15
6360 UNIVHAWAII 2019-02-25 2024-01-20
22883 CONDENAST 2019-05-29 2024-01-05
22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2024-01-23
46997 2021-12-22 2024-01-26
12183 TALKIE-COMMUNICATIONS 2022-12-10 2024-01-27
41378 KirinoNET 2023-03-23 2024-01-26
3701 NERONET 2023-04-18 2024-01-25
400282 2023-04-27 2024-01-30
393577 SCCNET 2023-05-03 2024-01-12
202400 2023-05-08 2024-01-27
46690 SNET-FCC 2023-05-20 2024-01-31
272137 2023-08-12 2024-01-19
13329 KFN-001 2024-01-09 2024-01-09
394684 WISPERNET 2024-01-17 2024-01-31
151188 2024-01-18 2024-01-27
213122 2024-01-19 2024-01-19
55 UPENN 2024-01-30 2024-01-30

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info@caida.org