Logo

Session Report

Summary:
Test run at: 2022-09-02 11:06:48 GMT
Client operating system: LINUX
Client IP (v4): 185.193.126.197
Client AS (v4): 39287 (abstract)
IPv4 Probes: 60
Client IP (v6): 2a0a:3840:1337:126::b9c1:7ec5:1337
Client AS (v6): 39287 (abstract)
IPv6 Probes: 52

Outbound spoofing summary (from the client to our server)
Source address type IPv4IPv6
Private - RFC1918 or ULA blockedblocked
Routable receivedreceived
Largest spoofable neighbor prefix length /9/64
Inbound spoofing summary (from our server to the client)
Source address type IPv4IPv6
Private - RFC1918 or ULA blockedblocked
Internal to the same IPv4 /31 or IPv6 /120 as the client receivedreceived
Spoof status key
receivedSpoofed packet was received.Pattern of tests from this IP block indicates a switch from allowing spoofing to blocking it.
rewrittenSpoofed packet was received, but the source address was changed en route.
blockedSpoofed packet was not received, but unspoofed packet was.
unknownNeither spoofed nor unspoofed packet was received.

IPv4 Adjacent Netblock Testing:

Your host (185.193.126.197) can spoof 8388607 neighboring addresses (within your /9 prefix)


Spoofed source addressPrefix
Length
ASN of spoofed
source address
Received
185.193.126.196/3139287yes
185.193.126.199/3039287yes
185.193.126.193/2939287yes
185.193.126.205/2839287yes
185.193.126.213/2739287yes
185.193.126.229/2639287yes
185.193.126.133/2539287yes
185.193.126.69/2439287yes
185.193.127.197/2339287yes
185.193.124.197/2254990yes
185.193.122.197/2142903yes
185.193.118.197/20202228yes
185.193.110.197/19UNROUTEDno
185.193.94.197/1852157yes
185.193.62.197/17202635yes
185.193.254.197/1650316yes
185.192.126.197/15200514yes
185.195.126.197/14204239yes
185.197.126.197/1357834yes
185.201.126.197/1212996yes
185.209.126.197/1124940yes
185.225.126.197/10174yes
185.129.126.197/950247yes
185.65.126.197/8UNROUTEDno

Meaning of status in Received column:

noPackets spoofed from adjacent netblock were not received, probably due to blocking
yesPackets spoofed from adjacent netblock were received
yesPackets spoofed from adjacent netblock were received (but that netblock is within the source AS)

IPv4 Outbound Filtering Depth:

The tracefilter test found your host able to spoof routable, non-adjacent source addresses through the first 10 IP hop(s).
IPv6 probes:
Spoofed source addressDestinationReceived
2001:48d0:101:501::1592001:48d0:101:501::242yes
2001:4978:1fb:6400::d22001:48d0:101:501::242no
2001:49aa:111:aa00::112001:48d0:101:501::242no
fd11:1111:1111::11112001:48d0:101:501::242no
2001:48d0:101:501::1592001:48d0:101:501::247yes
2001:4978:1fb:6400::d22001:48d0:101:501::247no
2001:49aa:111:aa00::112001:48d0:101:501::247no
fd11:1111:1111::11112001:48d0:101:501::247no
2001:48d0:101:501::1592001:610:510:115:192:42:115:98yes
2001:4978:1fb:6400::d22001:610:510:115:192:42:115:98no
2001:49aa:111:aa00::112001:610:510:115:192:42:115:98no
fd11:1111:1111::11112001:610:510:115:192:42:115:98no
2001:48d0:101:501::1592001:630:212:225:225:90ff:fe0c:45a6yes
2001:4978:1fb:6400::d22001:630:212:225:225:90ff:fe0c:45a6no
2001:49aa:111:aa00::112001:630:212:225:225:90ff:fe0c:45a6no
fd11:1111:1111::11112001:630:212:225:225:90ff:fe0c:45a6no
2001:48d0:101:501::1592001:770:1c:7:225:90ff:fe0c:acb4yes
2001:4978:1fb:6400::d22001:770:1c:7:225:90ff:fe0c:acb4no
2001:49aa:111:aa00::112001:770:1c:7:225:90ff:fe0c:acb4no
fd11:1111:1111::11112001:770:1c:7:225:90ff:fe0c:acb4no
IPv6 Adjacent Netblock Testing:
Spoofed source addressPrefix
Length
ASN of spoofed
source address
Received
2a0a:3840:1337:126::b9c1:7ec5:13b7/12039287yes
2a0a:3840:1337:126::b9c1:7ec5:9337/11239287yes
2a0a:3840:1337:126::b9c1:7e45:1337/10439287yes
2a0a:3840:1337:126::b9c1:fec5:1337/9639287yes
2a0a:3840:1337:126::b941:7ec5:1337/8839287yes
2a0a:3840:1337:126::39c1:7ec5:1337/8039287yes
2a0a:3840:1337:126:80:b9c1:7ec5:1337/7239287yes
2a0a:3840:1337:126:8000:b9c1:7ec5:1337/6439287yes
2a0a:3840:1337:1a6::b9c1:7ec5:1337/5639287no
2a0a:3840:1337:8126::b9c1:7ec5:1337/4839287no
2a0a:3840:13b7:126::b9c1:7ec5:1337/4039287no
2a0a:3840:9337:126::b9c1:7ec5:1337/3239287no
2a0a:38c0:1337:126::b9c1:7ec5:1337/24UNROUTEDno
2a0a:b840:1337:126::b9c1:7ec5:1337/16UNROUTEDno

Meaning of status in Received column:

noPackets spoofed from adjacent netblock were not received, probably due to blocking
yesPackets spoofed from adjacent netblock were received (but that netblock is within the source AS)
Summary:
The results from all tests are aggregated to produce a summary "State of IP Spoofing" report.
Feedback:
We welcome questions and feedback to the Spoofer Information Mailing List and invite users to join the Spoofer Users Mailing List for discussion and announcements.
Last Modified