nanog: [NANOG] Spoofer Report for NANOG for Feb 2025

<!DOCTYPE html> <html lang="en"> <head> <script async src="/site.js"></script> <link rel="alternate" type="application/rss+xml" title="RSS" href="https://seclists.org/rss/nanog.rss"> <meta property="og:image" content="https://seclists.org/images/nanog-img.png" /> <link rel="image_src" href="https://seclists.org/images/nanog-img.png" /> <meta name="Subject" content="[NANOG] Spoofer Report for NANOG for Feb 2025"/> <meta name="Author" content="CAIDA Spoofer Project via NANOG"/> <title>nanog: [NANOG] Spoofer Report for NANOG for Feb 2025</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="theme-color" content="#2A0D45"> <link rel="preload" as="image" href="/images/sitelogo.png" imagesizes="168px" imagesrcset="/images/sitelogo.png, /images/sitelogo-2x.png 2x"> <link rel="preload" as="image" href="/shared/images/nst-icons.svg"> <link rel="stylesheet" href="/shared/css/nst.css?v=2"> <script async src="/shared/js/nst.js?v=2"></script> <link rel="stylesheet" href="/shared/css/nst-foot.css?v=2" media="print" onload="this.media='all'"> <link rel="stylesheet" href="/site.css">  <link rel="preload" href="https://www.google-analytics.com/analytics.js" as="script"> <script> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-11009417-1', 'auto'); ga('send', 'pageview'); </script>  <META NAME="ROBOTS" CONTENT="NOARCHIVE"> <link rel="shortcut icon" href="/shared/images/tiny-eyeicon.png" type="image/png"> </head> <body><div id="nst-wrapper"> <div id="menu"> <div class="blur"> <header id="nst-head"> <a id="menu-open" href="#menu" aria-label="Open menu"> <img width="44" height="44" alt="" aria-hidden="true" src="/shared/images/nst-icons.svg#menu"> </a> <a id="menu-close" href="#" aria-label="Close menu"> <img width="44" height="44" alt="" aria-hidden="true" src="/shared/images/nst-icons.svg#close"> </a> <a id="nst-logo" href="/" aria-label="Home page"> <img alt="Home page logo" srcset="/images/sitelogo.png, /images/sitelogo-2x.png 2x" src="/images/sitelogo.png" onerror="this.onerror=null;this.srcset=this.src" height=90 width=168></a> <nav id="nst-gnav"> <a class="nlink" href="https://nmap.org/">Nmap.org</a> <a class="nlink" href="https://npcap.com/">Npcap.com</a> <a class="nlink" href="https://seclists.org/">Seclists.org</a> <a class="nlink" href="https://sectools.org">Sectools.org</a> <a class="nlink" href="https://insecure.org/">Insecure.org</a> </nav> <form class="nst-search" id="nst-head-search" action="/search/"> <input class="nst-search-q" name="q" type="search" placeholder="Site Search"> <button class="nst-search-button" title="Search"> <img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true" src="/shared/images/nst-icons.svg#search"> </button> </form> </header> </div> </div> <main id="nst-content">   <a href="/nanog/"><img src="/images/nanog-logo.png" width="80" class="l-logo right" alt="nanog logo"></a> <h2 class="m-list"><a href="/nanog/">nanog</a> mailing list archives</h2>   <div class="nav-bar"> <div class="nav-link"> <a href="73"><img src="/images/left-icon-16x16.png" width=16 height=16 alt="Previous"></a> <a href="date.html#74">By Date</a> <a href="75"><img src="/images/right-icon-16x16.png" width=16 height=16 alt="Next"></a> </div> <div class="nav-link"> <a href="71"><img src="/images/left-icon-16x16.png" width=16 height=16 alt="Previous"></a> <a href="index.html#74">By Thread</a> <a href="76"><img src="/images/right-icon-16x16.png" width=16 height=16 alt="Next"></a> </div> <form class="nst-search center" action="/search/nanog"> <input class="nst-search-q" name="q" type="search" placeholder="List Archive Search"> <button class="nst-search-button" title="Search"> <img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true" src="/shared/images/nst-icons.svg#search"> </button> </form> </div>    <h1 class="m-title">[NANOG] Spoofer Report for NANOG for Feb 2025</h1> <hr>   <em>From</em>: CAIDA Spoofer Project via NANOG <nanog () lists nanog org><br> <em>Date</em>: Sat, 8 Mar 2025 10:00:15 -0800<br>   <hr>   <pre style="margin: 0em;">In response to feedback from operational security communities, CAIDA's source address validation measurement project (<a rel="nofollow" href="https://spoofer.caida.org">https://spoofer.caida.org</a>) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Feb 2025: ASN Name Fixed-By 5769 VIDEOTRON 2025-02-13 19935 CRRS 2025-02-17 62896 MIDCO-NET-INV-MR 2025-02-25 53274 3DB-WIRELESS 2025-02-27 Further information for the inferred remediation is available at: <a rel="nofollow" href="https://spoofer.caida.org/remedy.php">https://spoofer.caida.org/remedy.php</a> Source Address Validation issues inferred during Feb 2025: ASN Name First-Spoofed Last-Spoofed 40676 AS40676 2016-08-29 2025-02-24 27364 ACS-INTERNET 2016-09-27 2025-02-26 63296 AWBROADBAND 2017-09-01 2025-02-22 22883 CONDENAST 2019-05-29 2025-02-12 21804 ACCESS-SK 2019-06-09 2025-02-25 4134 CHINANET-BACKBONE 2021-05-12 2025-02-25 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-02-24 3701 NERONET 2023-04-18 2025-02-23 400282 2023-04-27 2025-02-24 393577 SCCNET 2023-05-03 2025-02-25 202400 2023-05-08 2025-02-25 61461 Airtek Solutions C.A. 2023-05-13 2025-02-25 20119 ARROW 2023-10-19 2025-02-27 394684 WISPERNET 2024-01-17 2025-02-23 19935 CRRS 2024-05-29 2025-02-05 3801 MISNET 2024-09-09 2025-02-26 13807 GREAT-PLAINS-COMMUNICATIONS 2024-10-09 2025-02-17 27523 DMB-ASN 2024-11-15 2025-02-25 30083 AS-30083-GO-DADDY-COM-LLC 2024-12-09 2025-02-24 273143 2025-01-22 2025-02-23 215672 2025-02-15 2025-02-15 398446 2025-02-24 2025-02-24 Further information for these tests where we received spoofed packets is available at: <a rel="nofollow" href="https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1">https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block=1</a> Please send any feedback or suggestions to spoofer-info () caida org _______________________________________________ NANOG mailing list <a rel="nofollow" href="https://lists.nanog.org/archives/list/nanog">https://lists.nanog.org/archives/list/nanog</a> () lists nanog org/message/TYRUDADJ2RZN3VNUM6J7XR56T7VVJRTM/ </pre>    <hr>     <div class="nav-bar"> <div class="nav-link"> <a href="73"><img src="/images/left-icon-16x16.png" width=16 height=16 alt="Previous"></a> <a href="date.html#74">By Date</a> <a href="75"><img src="/images/right-icon-16x16.png" width=16 height=16 alt="Next"></a> </div> <div class="nav-link"> <a href="71"><img src="/images/left-icon-16x16.png" width=16 height=16 alt="Previous"></a> <a href="index.html#74">By Thread</a> <a href="76"><img src="/images/right-icon-16x16.png" width=16 height=16 alt="Next"></a> </div> </div> <h3 class="m-thread">Current thread:</h3> <ul class="thread"> <li><strong>[NANOG] Spoofer Report for NANOG for Feb 2025</strong> <em>CAIDA Spoofer Project via NANOG (Mar 08)</em> </ul>    </main> <footer id="nst-foot"> <form class="nst-search" id="nst-foot-search" action="/search/"> <input class="nst-search-q" name="q" type="search" placeholder="Site Search"> <button class="nst-search-button" title="Search"> <img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true" src="/shared/images/nst-icons.svg#search"> </button> </form> <div class="flexlists"> <div class="fl-unit"> <h2><a class="nlink" href="https://nmap.org/">Nmap Security Scanner</a></h2> <ul> <li><a class="nlink" href="https://nmap.org/book/man.html">Ref Guide</a> <li><a class="nlink" href="https://nmap.org/book/install.html">Install Guide</a> <li><a class="nlink" href="https://nmap.org/docs.html">Docs</a> <li><a class="nlink" href="https://nmap.org/download.html">Download</a> <li><a class="nlink" href="https://nmap.org/oem/">Nmap OEM</a> </ul> </div> <div class="fl-unit"> <h2><a class="nlink" href="https://npcap.com/">Npcap packet capture</a></h2> <ul> <li><a class="nlink" href="https://npcap.com/guide/">User's Guide</a> <li><a class="nlink" href="https://npcap.com/guide/npcap-devguide.html#npcap-api">API docs</a> <li><a class="nlink" href="https://npcap.com/#download">Download</a> <li><a class="nlink" href="https://npcap.com/oem/">Npcap OEM</a> </ul> </div> <div class="fl-unit"> <h2><a class="nlink" href="https://seclists.org/">Security Lists</a></h2> <ul> <li><a class="nlink" href="https://seclists.org/nmap-announce/">Nmap Announce</a> <li><a class="nlink" href="https://seclists.org/nmap-dev/">Nmap Dev</a> <li><a class="nlink" href="https://seclists.org/fulldisclosure/">Full Disclosure</a> <li><a class="nlink" href="https://seclists.org/oss-sec/">Open Source Security</a> <li><a class="nlink" href="https://seclists.org/dataloss/">BreachExchange</a> </ul> </div> <div class="fl-unit"> <h2><a class="nlink" href="https://sectools.org">Security Tools</a></h2> <ul> <li><a class="nlink" href="https://sectools.org/tag/vuln-scanners/">Vuln scanners</a> <li><a class="nlink" href="https://sectools.org/tag/pass-audit/">Password audit</a> <li><a class="nlink" href="https://sectools.org/tag/web-scanners/">Web scanners</a> <li><a class="nlink" href="https://sectools.org/tag/wireless/">Wireless</a> <li><a class="nlink" href="https://sectools.org/tag/sploits/">Exploitation</a> </ul> </div> <div class="fl-unit"> <h2><a class="nlink" href="https://insecure.org/">About</a></h2> <ul> <li><a class="nlink" href="https://insecure.org/fyodor/">About/Contact</a> <li><a class="nlink" href="https://insecure.org/privacy.html">Privacy</a> <li><a class="nlink" href="https://insecure.org/advertising.html">Advertising</a> <li><a class="nlink" href="https://nmap.org/npsl/">Nmap Public Source License</a> </ul> </div> <div class="fl-unit social-links"> <a class="nlink" href="https://twitter.com/nmap" title="Visit us on Twitter"> <img width="32" height="32" src="/shared/images/nst-icons.svg#twitter" alt="" aria-hidden="true"> </a> <a class="nlink" href="https://facebook.com/nmap" title="Visit us on Facebook"> <img width="32" height="32" src="/shared/images/nst-icons.svg#facebook" alt="" aria-hidden="true"> </a> <a class="nlink" href="https://github.com/nmap/" title="Visit us on Github"> <img width="32" height="32" src="/shared/images/nst-icons.svg#github" alt="" aria-hidden="true"> </a> <a class="nlink" href="https://reddit.com/r/nmap/" title="Discuss Nmap on Reddit"> <img width="32" height="32" src="/shared/images/nst-icons.svg#reddit" alt="" aria-hidden="true"> </a> </div> </div> </footer> </div> </body> </html>

CINXE.COM

nanog: [NANOG] Spoofer Report for NANOG for Feb 2025