Spoofer Report for NANOG for Sep 2020

Thu Oct 8 17:00:06 UTC 2020

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Sep 2020:
ASN    Name                                           Fixed-By
39939  RISE-CO-AS39939                                2020-09-01
9009   M247                                           2020-09-02
13857  ONLINEMAC                                      2020-09-19
10886  MAX-GIGAPOP                                    2020-09-22

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Sep 2020:
ASN    Name                           First-Spoofed Last-Spoofed
6939   HURRICANE                         2016-02-22   2020-09-08
54825  PACKET                            2016-04-15   2020-09-18
46562  TOTAL-SERVER-SOLUTIONS            2016-04-26   2020-09-03
36351  SOFTLAYER                         2016-05-10   2020-09-08
13213  UK2NET                            2016-07-27   2020-09-02
209    CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2020-09-25
6128   CABLE-NET-1                       2016-09-03   2020-09-30
20412  CLARITY-TELECOM                   2016-09-30   2020-09-28
6181   FUSE-NET                          2016-10-10   2020-09-28
18451  LESNET                            2016-10-18   2020-09-09
14971  PINETEL                           2016-10-21   2020-09-25
11427  TWC-11427-TEXAS                   2016-10-21   2020-09-30
174    COGENT-174                        2016-10-21   2020-09-08
32440  LONI                              2016-11-03   2020-09-27
12083  WOW-INTERNET                      2016-11-09   2020-09-27
22439  PERFECT-INTERNATIONAL             2016-11-22   2020-09-08
20473  AS-CHOOPA                         2017-01-08   2020-09-29
9009   M247                              2017-01-10   2020-09-12
63296  AWBROADBAND                       2017-09-01   2020-09-29
27589  MOJOHOST                          2017-09-20   2020-09-03
546    PARSONS-PGS-1                     2017-11-20   2020-09-23
20448  VPNTRANET-LLC                     2018-09-20   2020-09-05
20278  NEXEON                            2019-03-05   2020-09-08
8047   GCI                               2019-04-11   2020-09-24
62904  EONIX-COMMUNICATIONS-ASBLOCK-6    2019-07-14   2020-09-08
46375  AS-SONICTELECOM                   2019-10-21   2020-09-11
11650  PLDI                              2020-05-25   2020-09-11
46816  DSNETWORKS-001                    2020-08-24   2020-09-08
32489  AMANAHA-NEW                       2020-08-24   2020-09-02
7040   NETMINDERS                        2020-08-31   2020-09-03
206804 EstNOC                            2020-09-02   2020-09-03
32181  ASN-GIGENET                       2020-09-02   2020-09-03
11042  NTHL                              2020-09-02   2020-09-02
53340  FIBERHUB                          2020-09-02   2020-09-02
32780  HOSTINGSERVICES-INC               2020-09-02   2020-09-02
19318  IS-AS-1                           2020-09-03   2020-09-03
398325                                   2020-09-05   2020-09-26
395111 KVCNET-2009                       2020-09-08   2020-09-08
25780  HUGESERVER-NETWORKS               2020-09-08   2020-09-08
207134 PHOENIXNAP-SRB                    2020-09-08   2020-09-08
62217  VooServers                        2020-09-08   2020-09-08
206628                                   2020-09-10   2020-09-10
23393  NUCDN                             2020-09-30   2020-09-30
30602                                    2020-09-30   2020-09-30

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Source Address Validation issues inferred during Sep 2020
using open resolver tests:
ASN    Name                           Last-Detected
11260  EASTLINK-HSI                      2020-09-24
12214  RAPIDDSL--WIRELESS                2020-09-24
131284 ETISALATAFG                       2020-09-23
40033  RED-SPECTRUM                      2020-09-23
53850  GORILLASERVERS                    2020-09-22
395262 CENTRE-OF-EXCELLENCE-IN-NEXT-G    2020-09-22
26166  WATCHCOMM-WEST-OH                 2020-09-19
14403  JJI-DEFAULT-00                    2020-09-16
16524  METTEL                            2020-09-15
32444  SAFELINK-MV                       2020-09-11
53338  ITCI                              2020-09-10
15081  ASN-CROS-1                        2020-09-07
19257  SUBRIGO                           2020-09-07
40447  SKYHAWK-GROUP                     2020-09-05
53274  3DB-WIRELESS                      2020-09-04
397081 AUWIRELESS-01                     2020-09-04
40676  AS40676                           2020-09-04
16922  OUHSC-EDU                         2020-09-04
4565   MEGAPATH2-US                      2020-09-04
47023  NOR-NET-COMM                      2020-09-04
40651  MONSTERGOVSOL                     2020-09-04
32233  PERSONA                           2020-09-03
394232 TELKEL-MTL                        2020-09-03
46375  AS-SONICTELECOM                   2020-09-03
46328  FOUR-U                            2020-09-03
6539   GT-BELL                           2020-09-03
29953  MORNCOMM                          2020-09-02
396236 MIMOKC                            2020-09-02
53456  WESTRUX                           2020-09-01
27017  NWFBR                             2020-09-01
11287  AS-MSEA                           2020-09-01
55175  CLOUDBURST                        2020-09-01
395261 AS-HCCL-7                         2020-09-01
9009   M247                              2020-09-01
25636  ONTL-2002                         2020-09-01
577    BACOM                             2020-09-01
30600  AS-CMN                            2020-09-01

Further information for these tests is available at:
https://spoofer.caida.org/ornog.php?country_include=usa,can

Please send any feedback or suggestions to spoofer-info at caida.org