Spoofer Report for NANOG for Sep 2020
In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Sep 2020: ASN Name Fixed-By 39939 RISE-CO-AS39939 2020-09-01 9009 M247 2020-09-02 13857 ONLINEMAC 2020-09-19 10886 MAX-GIGAPOP 2020-09-22 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2020: ASN Name First-Spoofed Last-Spoofed 6939 HURRICANE 2016-02-22 2020-09-08 54825 PACKET 2016-04-15 2020-09-18 46562 TOTAL-SERVER-SOLUTIONS 2016-04-26 2020-09-03 36351 SOFTLAYER 2016-05-10 2020-09-08 13213 UK2NET 2016-07-27 2020-09-02 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2020-09-25 6128 CABLE-NET-1 2016-09-03 2020-09-30 20412 CLARITY-TELECOM 2016-09-30 2020-09-28 6181 FUSE-NET 2016-10-10 2020-09-28 18451 LESNET 2016-10-18 2020-09-09 14971 PINETEL 2016-10-21 2020-09-25 11427 TWC-11427-TEXAS 2016-10-21 2020-09-30 174 COGENT-174 2016-10-21 2020-09-08 32440 LONI 2016-11-03 2020-09-27 12083 WOW-INTERNET 2016-11-09 2020-09-27 22439 PERFECT-INTERNATIONAL 2016-11-22 2020-09-08 20473 AS-CHOOPA 2017-01-08 2020-09-29 9009 M247 2017-01-10 2020-09-12 63296 AWBROADBAND 2017-09-01 2020-09-29 27589 MOJOHOST 2017-09-20 2020-09-03 546 PARSONS-PGS-1 2017-11-20 2020-09-23 20448 VPNTRANET-LLC 2018-09-20 2020-09-05 20278 NEXEON 2019-03-05 2020-09-08 8047 GCI 2019-04-11 2020-09-24 62904 EONIX-COMMUNICATIONS-ASBLOCK-6 2019-07-14 2020-09-08 46375 AS-SONICTELECOM 2019-10-21 2020-09-11 11650 PLDI 2020-05-25 2020-09-11 46816 DSNETWORKS-001 2020-08-24 2020-09-08 32489 AMANAHA-NEW 2020-08-24 2020-09-02 7040 NETMINDERS 2020-08-31 2020-09-03 206804 EstNOC 2020-09-02 2020-09-03 32181 ASN-GIGENET 2020-09-02 2020-09-03 11042 NTHL 2020-09-02 2020-09-02 53340 FIBERHUB 2020-09-02 2020-09-02 32780 HOSTINGSERVICES-INC 2020-09-02 2020-09-02 19318 IS-AS-1 2020-09-03 2020-09-03 398325 2020-09-05 2020-09-26 395111 KVCNET-2009 2020-09-08 2020-09-08 25780 HUGESERVER-NETWORKS 2020-09-08 2020-09-08 207134 PHOENIXNAP-SRB 2020-09-08 2020-09-08 62217 VooServers 2020-09-08 2020-09-08 206628 2020-09-10 2020-09-10 23393 NUCDN 2020-09-30 2020-09-30 30602 2020-09-30 2020-09-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1 Source Address Validation issues inferred during Sep 2020 using open resolver tests: ASN Name Last-Detected 11260 EASTLINK-HSI 2020-09-24 12214 RAPIDDSL--WIRELESS 2020-09-24 131284 ETISALATAFG 2020-09-23 40033 RED-SPECTRUM 2020-09-23 53850 GORILLASERVERS 2020-09-22 395262 CENTRE-OF-EXCELLENCE-IN-NEXT-G 2020-09-22 26166 WATCHCOMM-WEST-OH 2020-09-19 14403 JJI-DEFAULT-00 2020-09-16 16524 METTEL 2020-09-15 32444 SAFELINK-MV 2020-09-11 53338 ITCI 2020-09-10 15081 ASN-CROS-1 2020-09-07 19257 SUBRIGO 2020-09-07 40447 SKYHAWK-GROUP 2020-09-05 53274 3DB-WIRELESS 2020-09-04 397081 AUWIRELESS-01 2020-09-04 40676 AS40676 2020-09-04 16922 OUHSC-EDU 2020-09-04 4565 MEGAPATH2-US 2020-09-04 47023 NOR-NET-COMM 2020-09-04 40651 MONSTERGOVSOL 2020-09-04 32233 PERSONA 2020-09-03 394232 TELKEL-MTL 2020-09-03 46375 AS-SONICTELECOM 2020-09-03 46328 FOUR-U 2020-09-03 6539 GT-BELL 2020-09-03 29953 MORNCOMM 2020-09-02 396236 MIMOKC 2020-09-02 53456 WESTRUX 2020-09-01 27017 NWFBR 2020-09-01 11287 AS-MSEA 2020-09-01 55175 CLOUDBURST 2020-09-01 395261 AS-HCCL-7 2020-09-01 9009 M247 2020-09-01 25636 ONTL-2002 2020-09-01 577 BACOM 2020-09-01 30600 AS-CMN 2020-09-01 Further information for these tests is available at: https://spoofer.caida.org/ornog.php?country_include=usa,can Please send any feedback or suggestions to spoofer-info@caida.org
participants (1)
-
CAIDA Spoofer Project