[menog] Spoofer Report for MENOG for May 2024

CAIDA Spoofer Project spoofer-info at caida.org
Sat Jun 8 17:01:38 UTC 2024


In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within are, bhr, egy, irn, irq, jor, kwt, lbn, omn, pse, qat, sau, syr, tur, yem.

Inferred improvements during May 2024:
ASN    Name                                           Fixed-By
48814  svyaz-as                                       2024-05-27
203321                                                2024-05-27
207983 CODIT-GW                                       2024-05-27
206991 IXIR                                           2024-05-28
206163 TBTNET                                         2024-05-29

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during May 2024:
ASN    Name                           First-Spoofed Last-Spoofed
25019  SAUDINETSTC                       2016-07-06   2024-05-12
8452   TE                                2016-09-23   2024-05-21
5384   EMIRATES-INTERNET                 2017-02-17   2024-05-31
24863  LINKdotNET                        2017-03-27   2024-05-08
51559  NETINTERNET                       2017-05-30   2024-05-27
34984  TELLCOM                           2018-11-20   2024-05-27
8966   Etisalat                          2019-08-08   2024-05-31
196921 BWireless-Kuwait                  2023-03-12   2024-05-01
204203 Takallou                          2024-01-10   2024-05-26
213274                                   2024-05-27   2024-05-27
44620  COSMOIX                           2024-05-27   2024-05-27
56582  NETFACTOR-ASN                     2024-05-27   2024-05-27
206163 TBTNET                            2024-05-27   2024-05-27
61135  COMNET-ASN                        2024-05-27   2024-05-27
3188   alastyr                           2024-05-28   2024-05-28
29262  IDEALHOSTING                      2024-05-28   2024-05-28
203399 Extranet                          2024-05-28   2024-05-28

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=are,bhr,egy,irn,irq,jor,kwt,lbn,omn,pse,qat,sau,syr,tur,yem&no_block=1

Please send any feedback or suggestions to spoofer-info at caida.org


More information about the Menog mailing list