Spoofer Report for NANOG for May 2019

Sat Jun 8 17:00:05 UTC 2019

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during May 2019:
   ASN Name                                           Fixed-By
  7922 COMCAST-7922                                   2019-05-07
  6939 HURRICANE                                      2019-05-14
 22773 ASN-CXA-ALL-CCI-22773-RDC                      2019-05-20
 10965 MRNET                                          2019-05-30

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during May 2019:
   ASN Name                           First-Spoofed Last-Spoofed
  6939 HURRICANE                         2016-02-22   2019-05-29
 54825 PACKET                            2016-04-15   2019-05-03
  7029 WINDSTREAM                        2016-06-21   2019-05-19
   209 CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2019-05-28
  6128 CABLE-NET-1                       2016-09-03   2019-05-24
 20412 CLARITY-TELECOM                   2016-09-30   2019-05-27
  6181 FUSE-NET                          2016-10-10   2019-05-31
 25787 ROWE-NETWORKS                     2016-10-21   2019-05-25
   174 COGENT-174                        2016-10-21   2019-05-30
 30341 SCTA-ASN                          2016-10-31   2019-05-21
 32440 LONI                              2016-11-03   2019-05-30
 12083 WOW-INTERNET                      2016-11-09   2019-05-31
 13427 SOFTCOM-INTERNET-COMMUNICATION    2016-11-14   2019-05-15
 21832 KELLINCOM-1                       2017-02-03   2019-05-29
 18451 LESNET                            2017-02-22   2019-05-14
   701 UUNET                             2017-06-14   2019-05-27
 63296 AMARILLO-WIRELESS                 2017-09-01   2019-05-30
 33523 ROWANUNIVERSITY                   2017-10-29   2019-05-09
   546 PARSONS-PGS-1                     2017-11-20   2019-05-18
 12222 AKAMAI                            2018-02-14   2019-05-10
  4201 ORST                              2018-04-19   2019-05-29
 19016 WCG                               2018-05-19   2019-05-17
   225 VIRGINIA                          2018-06-18   2019-05-15
 40911 L2NC                              2018-08-31   2019-05-12
 33452 RW                                2018-09-19   2019-05-30
 20448 VPNTRANET-LLC                     2018-09-20   2019-05-28
 63275 RADIOWIRE                         2019-02-07   2019-05-30
 10965 MRNET                             2019-02-11   2019-05-30
 19531 NODESDIRECT                       2019-03-14   2019-05-16
  8047 GCI                               2019-04-11   2019-05-30
 10745 ARIN-ASH-CHA                      2019-04-29   2019-05-31
 20381 CABLELABS                         2019-05-01   2019-05-01
393457 HUC-3                             2019-05-02   2019-05-02
  6058 NORTHWESTEL-INC                   2019-05-06   2019-05-25
  6536 CITYNET                           2019-05-15   2019-05-15
 46573 AS-GLobalf                        2019-05-16   2019-05-18
138576                                   2019-05-21   2019-05-28
395148 PACLW                             2019-05-27   2019-05-27
 22883 CONDENAST                         2019-05-29   2019-05-29

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info at caida.org