Spoofing Information for AS 13335 (CLOUDFLARENET)
Spoofing status per IP block for last year of data
(Results for all dates also available.)| Spoof status key | ||||
|---|---|---|---|---|
| received | Spoofed packet was received. | ✔ | Pattern of tests from this IP block indicates a switch from allowing spoofing to blocking it. | |
| rewritten | Spoofed packet was received, but the source address was changed en route. | |||
| blocked | Spoofed packet was not received, but unspoofed packet was. | |||
| unknown | Neither spoofed nor unspoofed packet was received. | |||
| IP block | Latest test | Spoof Private | Spoof Routable | ||
|---|---|---|---|---|---|
| 104.28.155.x/24 | 2026-07-11 17:35:47 GMT | blocked | blocked | ||
| 104.28.156.x/24 | 2026-07-04 12:08:04 GMT | blocked | blocked | ||
| 104.28.157.x/24 | 2026-05-25 10:50:31 GMT | blocked | blocked | ||
| 104.28.158.x/24 | 2026-05-23 00:57:54 GMT | rewritten | rewritten | ||
| 104.28.159.x/24 | 2026-06-20 05:53:05 GMT | blocked | blocked | ||
| 104.28.162.x/24 | 2026-08-11 11:04:15 GMT | rewritten | rewritten | ||
| 104.28.163.x/24 | 2026-06-16 05:06:13 GMT | blocked | blocked | ||
| 104.28.194.x/24 | 2026-11-06 08:47:05 GMT | rewritten | rewritten | ||
| 104.28.198.x/24 | 2025-11-24 23:46:16 GMT | blocked | blocked | ||
| 104.28.199.x/24 | 2026-10-12 11:03:28 GMT | blocked | blocked | ||
| 104.28.202.x/24 | 2026-05-02 15:29:18 GMT | blocked | blocked | ||
| 104.28.203.x/24 | 2026-01-30 08:53:16 GMT | rewritten | rewritten | ||
| 104.28.209.x/24 | 2026-11-07 09:13:56 GMT | blocked | blocked | ||
| 104.28.211.x/24 | 2026-08-01 07:55:02 GMT | blocked | blocked | ||
| 104.28.220.x/24 | 2025-11-25 08:36:47 GMT | blocked | blocked | ||
| 104.28.225.x/24 | 2026-11-10 14:31:47 GMT | rewritten | rewritten | ||
| 104.28.226.x/24 | 2026-11-11 00:09:00 GMT | rewritten | ✔ | rewritten | |
| 104.28.230.x/24 | 2026-01-17 19:21:09 GMT | blocked | blocked | ||
| 104.28.231.x/24 | 2026-10-15 09:30:12 GMT | blocked | blocked | ||
| 104.28.234.x/24 | 2026-05-02 04:21:33 GMT | blocked | blocked | ||
| 104.28.235.x/24 | 2026-01-26 17:27:21 GMT | rewritten | rewritten | ||
| 104.28.241.x/24 | 2026-10-28 03:53:45 GMT | blocked | blocked | ||
| 104.28.243.x/24 | 2026-08-01 08:02:48 GMT | blocked | blocked | ||
| 104.28.249.x/24 | 2026-09-20 23:52:14 GMT | rewritten | rewritten | ||
| 104.28.252.x/24 | 2025-11-28 06:10:58 GMT | blocked | blocked | ||
| 2a09:bac1:11xx::/40 | 2026-05-02 04:42:35 GMT | rewritten | rewritten | ||
| 2a09:bac1:36xx::/40 | 2026-10-12 11:03:28 GMT | blocked | blocked | ||
| 2a09:bac1:3bxx::/40 | 2026-08-01 08:02:48 GMT | blocked | blocked | ||
| 2a09:bac1:3fxx::/40 | 2026-01-28 14:38:59 GMT | blocked | blocked | ||
| 2a09:bac5:8xx::/40 | 2026-05-02 15:29:18 GMT | rewritten | rewritten | ||
| 2a09:bac5:2axx::/40 | 2026-07-14 13:27:07 GMT | blocked | blocked | ||
| 2a09:bac5:3bxx::/40 | 2025-11-28 06:10:58 GMT | blocked | blocked | ||
| 2a09:bac5:3cxx::/40 | 2026-10-15 09:30:12 GMT | blocked | blocked | ||
| 2a09:bac5:3exx::/40 | 2026-05-25 10:50:31 GMT | blocked | blocked | ||
| 2a09:bac5:3fxx::/40 | 2026-10-12 15:12:29 GMT | blocked | blocked | ||
| 2a09:bac5:47xx::/40 | 2026-01-18 09:37:34 GMT | blocked | blocked | ||
| 2a09:bac5:48xx::/40 | 2026-01-30 08:53:16 GMT | blocked | blocked | ||
| 2a09:bac5:51xx::/40 | 2026-07-08 11:11:44 GMT | blocked | blocked | ||
| 2a09:bac5:58xx::/40 | 2026-05-22 12:28:00 GMT | blocked | blocked | ||
Customers of AS 13335 we have spoofer tests from
This is the list of directly connected customers of AS 13335 from which we have received a spoofer test, ordered by the customer's ability to send spoofed packets and the number of prefixes of an inferred ingress ACL derived from prefix announcements for the customer recorded in the latest month of public BGP data. BCP-84 describes ingress ACLs as "the most bulletproof solution when done properly" and the "best fit ... when the configuration is not too dynamic, ... if the number of used prefixes is low." Further detail about the size and dynamism of an inferred ACL is available by following the History link for each AS.
| ASN | Country | Number of Prefixes in Customer Cone | Number of ASes in Customer Cone | Recent tests | Spoof Routable | 8368 (DSTNY-BACKBONE) | bel (Belgium) | 148 | 19 | AS 8368 tests | received | 270681 | bra (Brazil) | 2 | 0 | AS 270681 tests | blocked | 136964 (WISNL-AS-AP) | nzl (New Zealand) | 3 | 0 | AS 136964 tests | blocked | 199585 (TELNET) | pol (Poland) | 4 | 0 | AS 199585 tests | blocked | 198020 (DATACRUNCH) | fin (Finland) | 7 | 0 | AS 198020 tests | blocked | 62468 (HKCLOUDX) | tha (Thailand) | 57 | 2 | AS 62468 tests | blocked | 14593 (SPACEX-STARLINK) | usa (United States) | 1332 | 50 | AS 14593 tests | blocked | 31898 (ORACLE-BMC-31898) | deu (Germany) | 2139 | 18 | AS 31898 tests | blocked | 135377 (UCLOUD-HK-AS-AP) | hkg (Hong Kong) | 5816 | 57 | AS 135377 tests | blocked | 9121 (TTNet) | tur (Turkey) | 18298 | 979 | AS 9121 tests | blocked | 18403 (FPT-VN) | vnm (Vietnam) | 39504 | 5212 | AS 18403 tests | blocked | 20473 (AS-VULTR) | deu (Germany) | 98701 | 7850 | AS 20473 tests | blocked |
|---|
Address Space Announcement History
The customer cone for 13335 is too large for a prefix list to be useful.