nanog mailing list archives

Spoofer Report for NANOG for Feb 2024


From: CAIDA Spoofer Project <spoofer-info () caida org>
Date: Fri, 8 Mar 2024 10:00:08 -0800

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Feb 2024:
ASN    Name                                           Fixed-By
3356   LEVEL3                                         2024-02-21
26141  CORN                                           2024-02-24

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Feb 2024:
ASN    Name                           First-Spoofed Last-Spoofed
19230  NANOG                             2016-06-13   2024-02-10
209    CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2024-02-23
27364  ACS-INTERNET                      2016-09-27   2024-02-29
20412  CLARITY-TELECOM                   2016-09-30   2024-02-21
11427  TWC-11427-TEXAS                   2016-10-21   2024-02-06
25660  CTC                               2017-01-11   2024-02-12
22773  ASN-CXA-ALL-CCI-22773-RDC         2021-10-24   2024-02-13
46997                                    2021-12-22   2024-02-23
12183  TALKIE-COMMUNICATIONS             2022-12-10   2024-02-29
41378  KirinoNET                         2023-03-23   2024-02-02
3701   NERONET                           2023-04-18   2024-02-29
400282                                   2023-04-27   2024-02-27
202400                                   2023-05-08   2024-02-24
272137                                   2023-09-19   2024-02-12
394684 WISPERNET                         2024-01-17   2024-02-28
213122                                   2024-01-19   2024-02-29
55     UPENN                             2024-01-30   2024-02-26
27425  ASN-IDK-27425                     2024-02-21   2024-02-24
54256  STONE-RLM-AZER                    2024-02-22   2024-02-24
53755  IOFLOOD                           2024-02-23   2024-02-23

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info () caida org


Current thread: