Spoofer Report for NANOG for Jan 2024

Thu Feb 8 18:00:09 UTC 2024

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Jan 2024:
ASN    Name                                           Fixed-By
25787  ROWE-NETWORKS                                  2024-01-10
6461   ZAYO-6461                                      2024-01-11
202400                                                2024-01-13
40401                                                 2024-01-24

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Jan 2024:
ASN    Name                           First-Spoofed Last-Spoofed
209    CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2024-01-26
27364  ACS-INTERNET                      2016-09-27   2024-01-31
20412  CLARITY-TELECOM                   2016-09-30   2024-01-31
12083  WOW-INTERNET                      2016-11-09   2024-01-15
6360   UNIVHAWAII                        2019-02-25   2024-01-20
22883  CONDENAST                         2019-05-29   2024-01-05
22773  ASN-CXA-ALL-CCI-22773-RDC         2021-10-24   2024-01-23
46997                                    2021-12-22   2024-01-26
12183  TALKIE-COMMUNICATIONS             2022-12-10   2024-01-27
41378  KirinoNET                         2023-03-23   2024-01-26
3701   NERONET                           2023-04-18   2024-01-25
400282                                   2023-04-27   2024-01-30
393577 SCCNET                            2023-05-03   2024-01-12
202400                                   2023-05-08   2024-01-27
46690  SNET-FCC                          2023-05-20   2024-01-31
272137                                   2023-08-12   2024-01-19
13329  KFN-001                           2024-01-09   2024-01-09
394684 WISPERNET                         2024-01-17   2024-01-31
151188                                   2024-01-18   2024-01-27
213122                                   2024-01-19   2024-01-19
55     UPENN                             2024-01-30   2024-01-30

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info at caida.org