nanog mailing list archives

Spoofer Report for NANOG for Aug 2023


From: CAIDA Spoofer Project <spoofer-info () caida org>
Date: Fri, 8 Sep 2023 10:00:07 -0700

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Aug 2023:
ASN    Name                                           Fixed-By
53274  3DB-WIRELESS                                   2023-08-15
10745  ARIN-ASH-CHA                                   2023-08-18
400517                                                2023-08-18

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Aug 2023:
ASN    Name                           First-Spoofed Last-Spoofed
3356   LEVEL3                            2016-03-06   2023-08-17
209    CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2023-08-25
20412  CLARITY-TELECOM                   2016-09-30   2023-08-31
25787  ROWE-NETWORKS                     2016-10-21   2023-08-31
11427  TWC-11427-TEXAS                   2016-10-21   2023-08-29
10796  TWC-10796-MIDWEST                 2016-10-24   2023-08-30
271    BCNET                             2016-10-24   2023-08-26
25660  CTC                               2017-01-11   2023-08-21
852    ASN852                            2017-04-16   2023-08-01
22883  CONDENAST                         2019-05-29   2023-08-22
199524 GCORE                             2020-09-02   2023-08-23
26231  SFIA-ASN                          2021-10-27   2023-08-07
46997                                    2021-12-22   2023-08-31
394414 E2WS                              2022-05-08   2023-08-30
400517                                   2022-10-03   2023-08-25
12183  TALKIE-COMMUNICATIONS             2022-12-10   2023-08-30
41378  KirinoNET                         2023-03-23   2023-08-25
3701   NERONET                           2023-04-18   2023-08-30
400282                                   2023-04-27   2023-08-25
13693  NTS-ONLINE                        2023-05-05   2023-08-26
46690  SNET-FCC                          2023-05-20   2023-08-27
36687  WILINE                            2023-08-02   2023-08-21
209114 LUIZ-AMARAL                       2023-08-08   2023-08-08

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info () caida org


Current thread: