Spoofer Report for NANOG for Oct 2019

Fri Nov 8 18:00:06 UTC 2019

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Oct 2019:
   ASN Name                                           Fixed-By
 18451 LESNET                                         2019-10-10
 16787 CHARTER-16787-DC                               2019-10-14
 19230 NANOG                                          2019-10-28
  8047 GCI                                            2019-10-29
  2037 CSUFRESNO                                      2019-10-30
  3356 LEVEL3                                         2019-10-30
  7018 ATT-INTERNET4                                  2019-10-31

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Oct 2019:
   ASN Name                           First-Spoofed Last-Spoofed
 40065 CNSERVERS                         2016-05-01   2019-10-09
   209 CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2019-10-30
  6128 CABLE-NET-1                       2016-09-03   2019-10-29
 27364 ACS-INTERNET                      2016-09-27   2019-10-03
 20412 CLARITY-TELECOM                   2016-09-30   2019-10-25
  6181 FUSE-NET                          2016-10-10   2019-10-28
 25787 ROWE-NETWORKS                     2016-10-21   2019-10-27
 11427 TWC-11427-TEXAS                   2016-10-21   2019-10-27
   174 COGENT-174                        2016-10-21   2019-10-28
 11537 ABILENE                           2016-10-24   2019-10-24
 32440 LONI                              2016-11-03   2019-10-28
 12083 WOW-INTERNET                      2016-11-09   2019-10-29
 22561 CENTURYLINK-LEGACY-LIGHTCORE      2016-11-27   2019-10-08
   701 UUNET                             2017-06-14   2019-10-06
 63296 AMARILLO-WIRELESS                 2017-09-01   2019-10-28
   546 PARSONS-PGS-1                     2017-11-20   2019-10-24
 12222 AKAMAI                            2018-02-14   2019-10-18
  4201 ORST                              2018-04-19   2019-10-09
 11827 WSU                               2018-05-07   2019-10-25
   225 VIRGINIA                          2018-06-18   2019-10-31
 33452 RW                                2018-09-19   2019-10-30
 20448 VPNTRANET-LLC                     2018-09-20   2019-10-28
 14031 SCXY                              2018-10-18   2019-10-25
 63275 RADIOWIRE                         2019-02-07   2019-10-14
 15290 ALLST-15290                       2019-04-09   2019-10-02
  8047 GCI                               2019-04-11   2019-10-29
 10745 ARIN-ASH-CHA                      2019-04-29   2019-10-28
 54600 PEGTECHINC                        2019-08-28   2019-10-11
262248 Metro MPLS                        2019-10-09   2019-10-09
 46375 AS-SONICTELECOM                   2019-10-21   2019-10-21
 30136 AD12                              2019-10-24   2019-10-24
396073 MAJESTIC-HOSTING-01               2019-10-30   2019-10-30
 46300 HSC-WAP                           2019-10-30   2019-10-30

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Please send any feedback or suggestions to spoofer-info at caida.org