Spoofer Report for NANOG for Dec 2020

Fri Jan 8 18:00:06 UTC 2021

In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within usa, can.

Inferred improvements during Dec 2020:
ASN    Name                                           Fixed-By
7859   PAIR-NETWORKS                                  2020-12-13
20473  AS-CHOOPA                                      2020-12-16
25787  ROWE-NETWORKS                                  2020-12-23

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Dec 2020:
ASN    Name                           First-Spoofed Last-Spoofed
54825  PACKET                            2016-04-15   2020-12-09
209    CENTURYLINK-US-LEGACY-QWEST       2016-08-16   2020-12-21
6128   CABLE-NET-1                       2016-09-03   2020-12-06
20412  CLARITY-TELECOM                   2016-09-30   2020-12-31
6181   FUSE-NET                          2016-10-10   2020-12-31
14971  PINETEL                           2016-10-21   2020-12-19
11427  TWC-11427-TEXAS                   2016-10-21   2020-12-23
32440  LONI                              2016-11-03   2020-12-21
12083  WOW-INTERNET                      2016-11-09   2020-12-30
30036  MEDIACOM-ENTERPRISE-BUSINESS      2016-11-16   2020-12-21
63296  AWBROADBAND                       2017-09-01   2020-12-29
12222  AKAMAI                            2018-02-14   2020-12-23
393564 SPOKANE                           2018-06-05   2020-12-15
33452  RW                                2018-09-19   2020-12-29
20448  VPNTRANET-LLC                     2018-09-20   2020-12-15
8047   GCI                               2019-04-11   2020-12-18
7859   PAIR-NETWORKS                     2020-04-03   2020-12-20
6391   URBAN-15                          2020-05-29   2020-12-23
11814  DISTRIBUTEL-AS11814               2020-11-22   2020-12-18
208188 PUGET-SOUND-NETWORKS              2020-12-04   2020-12-19

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1

Source Address Validation issues inferred during Dec 2020
using open resolver tests:
ASN    Name                           Last-Detected
16524  METTEL                            2020-12-05
19257  SUBRIGO                           2020-12-05
53274  3DB-WIRELESS                      2020-12-04
395262 CENTRE-OF-EXCELLENCE-IN-NEXT-G    2020-12-04
11260  EASTLINK-HSI                      2020-12-04
397081 AUWIRELESS-01                     2020-12-04
53338  ITCI                              2020-12-04
47023  NOR-NET-COMM                      2020-12-04
40651  MONSTERGOVSOL                     2020-12-04
32233  PERSONA                           2020-12-03
394232 TELKEL-MTL                        2020-12-03
46375  AS-SONICTELECOM                   2020-12-03
9009   M247                              2020-12-03
46328  FOUR-U                            2020-12-03
15081  ASN-CROS-1                        2020-12-02
16922  OUHSC-EDU                         2020-12-02
29953  MORNCOMM                          2020-12-02
396236 MIMOKC                            2020-12-02
53456  WESTRUX                           2020-12-01
11287  AS-MSEA                           2020-12-01
4565   MEGAPATH2-US                      2020-12-01
55175  CLOUDBURST                        2020-12-01
395261 AS-HCCL-7                         2020-12-01
25636  ONTL-2002                         2020-12-01
30600  AS-CMN                            2020-12-01

Further information for these tests is available at:
https://spoofer.caida.org/ornog.php?country_include=usa,can

Please send any feedback or suggestions to spoofer-info at caida.org