Spoofer Report for NANOG for Nov 2019

Sun Dec 8 18:00:06 UTC 2019

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Nov 2019:
   ASN Name                                           Fixed-By
  8047 GCI                                            2019-11-20

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Nov 2019:
   ASN Name                           First-Spoofed Last-Spoofed
   209 CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2019-11-29
  6128 CABLE-NET-1                       2016-09-03   2019-11-28
  7459 GRANDECOM-AS1                     2016-09-26   2019-11-06
 20412 CLARITY-TELECOM                   2016-09-30   2019-11-29
  6181 FUSE-NET                          2016-10-10   2019-11-30
 25787 ROWE-NETWORKS                     2016-10-21   2019-11-11
   174 COGENT-174                        2016-10-21   2019-11-26
 32440 LONI                              2016-11-03   2019-11-29
 12083 WOW-INTERNET                      2016-11-09   2019-11-30
 18451 LESNET                            2017-02-22   2019-11-05
   701 UUNET                             2017-06-14   2019-11-23
 63296 AMARILLO-WIRELESS                 2017-09-01   2019-11-26
   546 PARSONS-PGS-1                     2017-11-20   2019-11-25
 11827 WSU                               2018-05-07   2019-11-29
393564 SPOKANE                           2018-06-05   2019-11-19
   225 VIRGINIA                          2018-06-18   2019-11-20
 33452 RW                                2018-09-19   2019-11-27
 20448 VPNTRANET-LLC                     2018-09-20   2019-11-11
 63275 RADIOWIRE                         2019-02-07   2019-11-05
  8047 GCI                               2019-04-11   2019-11-26
 10745 ARIN-ASH-CHA                      2019-04-29   2019-11-15
 20381 CABLELABS-LV                      2019-05-01   2019-11-01
 46300 HSC-WAP                           2019-10-30   2019-11-28
 53424 PUREPAGES                         2019-11-05   2019-11-05
  2886 EC-813-2886                       2019-11-05   2019-11-29
 26827 EPBTELECOM                        2019-11-07   2019-11-07
 54646 HARDYNET                          2019-11-10   2019-11-10
 11293 UCOP-ASN                          2019-11-23   2019-11-23
 53641 TOMALESBAYLAN                     2019-11-29   2019-11-29

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info at caida.org