[SANOG] Spoofer Report for SANOG for Sep 2025

CAIDA Spoofer Project spoofer-info at caida.org
Wed Oct 8 17:01:13 UTC 2025


In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.

This report summarises tests conducted within afg, bgd, btn, lka, mdv, npl, pak.

Inferred improvements during Sep 2025:
ASN    Name                                           Fixed-By
137580 EWNET                                          2025-09-14

Further information for the inferred remediation is available at:
https://spoofer.caida.org/remedy.php

Source Address Validation issues inferred during Sep 2025:
ASN    Name                           First-Spoofed Last-Spoofed
4007   SUBISU-CABLENET                   2016-12-18   2025-09-03
136007 SHEBA                             2024-10-07   2025-09-24
137580 EWNET                             2025-06-20   2025-09-07
55915  CLASSIC-NP                        2025-06-30   2025-09-24

Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=afg,bgd,btn,lka,mdv,npl,pak&no_block=1

Please send any feedback or suggestions to spoofer-info at caida.org


More information about the sanog mailing list