Spoofer Report for NANOG for Oct 2025
In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Oct 2025: ASN Name Fixed-By 54334 ROYA 2025-10-27 273143 2025-10-29 21804 ACCESS-SK 2025-10-30 12183 TALKIE-COMMUNICATIONS 2025-10-31 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Oct 2025: ASN Name First-Spoofed Last-Spoofed 27364 ACS-INTERNET 2016-09-27 2025-10-13 393397 LREC-LRT 2020-08-02 2025-10-24 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2025-10-28 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-10-07 400282 2023-04-27 2025-10-30 393577 SCCNET 2023-05-03 2025-10-28 61461 Airtek Solutions C.A. 2023-05-13 2025-10-23 394684 WISPERNET 2024-01-17 2025-10-31 53755 IOFLOOD 2024-02-23 2025-10-31 393530 TLU 2024-05-22 2025-10-26 19935 CRRS 2024-05-29 2025-10-14 27523 DMB-ASN 2024-11-15 2025-10-23 273143 2025-03-01 2025-10-29 273843 2025-04-02 2025-10-24 54334 ROYA 2025-07-30 2025-10-30 47583 AS-HOSTINGER 2025-09-27 2025-10-29 21743 ANL-36 2025-10-03 2025-10-06 273595 2025-10-06 2025-10-06 23316 BAI-IP-SERVICES 2025-10-16 2025-10-16 214639 2025-10-22 2025-10-29 204969 AS_CIRTEL 2025-10-22 2025-10-22 398493 2025-10-23 2025-10-23 17290 BLUE-MOUNTAIN 2025-10-29 2025-10-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1 Please send any feedback or suggestions to spoofer-info@caida.org
I am not checking my emails until Nov 14th, 2025. Thanks, Samaneh On Nov 8, 2025, at 7:00 PM, CAIDA Spoofer Project via NANOG <nanog@lists.nanog.org> wrote: In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://urldefense.com/v3/__https://spoofer.caida.org__;!!PtGJab4!_8yc5pbVQw... [spoofer[.]caida[.]org]) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Oct 2025: ASN Name Fixed-By 54334 ROYA 2025-10-27 273143 2025-10-29 21804 ACCESS-SK 2025-10-30 12183 TALKIE-COMMUNICATIONS 2025-10-31 Further information for the inferred remediation is available at: https://urldefense.com/v3/__https://spoofer.caida.org/remedy.php__;!!PtGJab4... [spoofer[.]caida[.]org] Source Address Validation issues inferred during Oct 2025: ASN Name First-Spoofed Last-Spoofed 27364 ACS-INTERNET 2016-09-27 2025-10-13 393397 LREC-LRT 2020-08-02 2025-10-24 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2025-10-28 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-10-07 400282 2023-04-27 2025-10-30 393577 SCCNET 2023-05-03 2025-10-28 61461 Airtek Solutions C.A. 2023-05-13 2025-10-23 394684 WISPERNET 2024-01-17 2025-10-31 53755 IOFLOOD 2024-02-23 2025-10-31 393530 TLU 2024-05-22 2025-10-26 19935 CRRS 2024-05-29 2025-10-14 27523 DMB-ASN 2024-11-15 2025-10-23 273143 2025-03-01 2025-10-29 273843 2025-04-02 2025-10-24 54334 ROYA 2025-07-30 2025-10-30 47583 AS-HOSTINGER 2025-09-27 2025-10-29 21743 ANL-36 2025-10-03 2025-10-06 273595 2025-10-06 2025-10-06 23316 BAI-IP-SERVICES 2025-10-16 2025-10-16 214639 2025-10-22 2025-10-29 204969 AS_CIRTEL 2025-10-22 2025-10-22 398493 2025-10-23 2025-10-23 17290 BLUE-MOUNTAIN 2025-10-29 2025-10-29 Further information for these tests where we received spoofed packets is available at: https://urldefense.com/v3/__https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1__;!!PtGJab4!_8yc5pbVQwMiNHUeAI_dyQjpI-sa7WNiAxh_MeGcOebQ6vHloD4C-l7yB7rpc-MxuOPMMM7DiQeWRHN6D6H8VPbCvqA$ [spoofer[.]caida[.]org] Please send any feedback or suggestions to spoofer-info@caida.org _______________________________________________ NANOG mailing list https://urldefense.com/v3/__https://lists.nanog.org/archives/list/nanog@list... [lists[.]nanog[.]org]
I am not checking my emails until Nov 14th, 2025. Thanks, Samaneh On Nov 10, 2025, at 1:06 PM, Samaneh Tajalizadehkhoob via NANOG <nanog@lists.nanog.org> wrote: I am not checking my emails until Nov 14th, 2025. Thanks, Samaneh On Nov 8, 2025, at 7:00 PM, CAIDA Spoofer Project via NANOG <nanog@lists.nanog.org> wrote: In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://urldefense.com/v3/__https://spoofer.caida.org__;!!PtGJab4!_8yc5pbVQw... [spoofer[.]caida[.]org]) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Oct 2025: ASN Name Fixed-By 54334 ROYA 2025-10-27 273143 2025-10-29 21804 ACCESS-SK 2025-10-30 12183 TALKIE-COMMUNICATIONS 2025-10-31 Further information for the inferred remediation is available at: https://urldefense.com/v3/__https://spoofer.caida.org/remedy.php__;!!PtGJab4... [spoofer[.]caida[.]org] Source Address Validation issues inferred during Oct 2025: ASN Name First-Spoofed Last-Spoofed 27364 ACS-INTERNET 2016-09-27 2025-10-13 393397 LREC-LRT 2020-08-02 2025-10-24 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2025-10-28 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-10-07 400282 2023-04-27 2025-10-30 393577 SCCNET 2023-05-03 2025-10-28 61461 Airtek Solutions C.A. 2023-05-13 2025-10-23 394684 WISPERNET 2024-01-17 2025-10-31 53755 IOFLOOD 2024-02-23 2025-10-31 393530 TLU 2024-05-22 2025-10-26 19935 CRRS 2024-05-29 2025-10-14 27523 DMB-ASN 2024-11-15 2025-10-23 273143 2025-03-01 2025-10-29 273843 2025-04-02 2025-10-24 54334 ROYA 2025-07-30 2025-10-30 47583 AS-HOSTINGER 2025-09-27 2025-10-29 21743 ANL-36 2025-10-03 2025-10-06 273595 2025-10-06 2025-10-06 23316 BAI-IP-SERVICES 2025-10-16 2025-10-16 214639 2025-10-22 2025-10-29 204969 AS_CIRTEL 2025-10-22 2025-10-22 398493 2025-10-23 2025-10-23 17290 BLUE-MOUNTAIN 2025-10-29 2025-10-29 Further information for these tests where we received spoofed packets is available at: https://urldefense.com/v3/__https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1__;!!PtGJab4!_8yc5pbVQwMiNHUeAI_dyQjpI-sa7WNiAxh_MeGcOebQ6vHloD4C-l7yB7rpc-MxuOPMMM7DiQeWRHN6D6H8VPbCvqA$ [spoofer[.]caida[.]org] Please send any feedback or suggestions to spoofer-info@caida.org _______________________________________________ NANOG mailing list https://urldefense.com/v3/__https://lists.nanog.org/archives/list/nanog@list... [lists[.]nanog[.]org] _______________________________________________ NANOG mailing list https://urldefense.com/v3/__https://lists.nanog.org/archives/list/nanog@list... [lists[.]nanog[.]org]
participants (2)
-
CAIDA Spoofer Project -
Samaneh Tajalizadehkhoob