[atnog] Spoofer Report for ATNOG for Apr 2026

[MNM NOC - Markus Lang]

Hi,

we traced the reported spoofing result for AS44765 to an old internal test system on a non-production office/lab segment where automated CAIDA spoofer tests had unintentionally remained enabled.

The affected segment is used for internal inter-site transport and testing and is not representative of our customer-facing access infrastructure.

The test system has been cleaned up and additional filtering has been implemented. Current validation tests are now reporting blocked/natblocked spoofing attempts instead of successful routable spoofing.



Thanks to everyone who reached out.



Regards
Markus



Kind regards,
 
--
MakeNewMedia Communications Peering Team
AS44765  |  IRR: RIPE::AS-MAKENEWMEDIA
Peering: peering at makenewmedia.com
NOC (24/7): noc at makenewmedia.com  |  +43 1 338 333 777
PeeringDB: https://www.peeringdb.com/net/2091
Website: https://www.makenewmedia.com

> Am 08.05.2026 um 12:03 schrieb CAIDA Spoofer Project via atnog <atnog at atnog.at>:
> 
> In response to feedback from operational security communities,
> CAIDA's source address validation measurement project
> (https://spoofer.caida.org) is automatically generating monthly
> reports of ASes originating prefixes in BGP for systems from which
> we received packets with a spoofed source address.
> We are publishing these reports to network and security operations
> lists in order to ensure this information reaches operational
> contacts in these ASes.
> 
> This report summarises tests conducted within aut.
> 
> Inferred improvements during Apr 2026:
> none inferred
> 
> Source Address Validation issues inferred during Apr 2026:
> ASN    Name                           First-Spoofed Last-Spoofed
> 44765  MAKENEWMEDIA                      2026-03-26   2026-04-30
> 
> Further information for these tests where we received spoofed
> packets is available at:
> https://spoofer.caida.org/recent_tests.php?country_include=aut&no_block=1
> 
> Please send any feedback or suggestions to spoofer-info at caida.org
> _______________________________________________
> atnog mailing list
> atnog at atnog.at
> https://atnog.at/mailman/listinfo/atnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://atnog.at/pipermail/atnog/attachments/20260509/24a58f33/attachment.htm>