- NZNOG - lists.nznog.org

Southland Regional Council reach-out
by Pete Mundy 24 Nov '20

24 Nov '20

Hi list Is there anyone here from the Southland Regional Council? (or with a contact there) I noticed they have a reasonable number of listings from their range 202.49.127.X in the data linked below - someone might want to reach out to them. Pete > Begin forwarded message: > > Subject: [AusNOG] 49-000 vulnerable fortinet vpns Posted online > Date: 24 November 2020 at 1:39:59 PM NZDT > To: "ausnog(a)ausnog.net" <ausnog(a)lists.ausnog.net> > > All, > > In case this passed you by... > > https://www.bleepingcomputer.com/news/security/hacker-posts-exploits-for-ov… <https://www.bleepingcomputer.com/news/security/hacker-posts-exploits-for-ov…> > > The list includes a number of Aussie businesses, so if you have the time/ability, and can find people on your networks, it may be a nice value add to reach out to them and let them know they may be about to have a bad day. > > A link to these with the ASN Info was posted to the JCSC slack, so you can grep away - there is a copy here. > > https://1drv.ms/t/s!AvEsGAQ-ZS2egalaPWlPaO08Dh4ATA?e=6TPtcL <https://1drv.ms/t/s!AvEsGAQ-ZS2egalaPWlPaO08Dh4ATA?e=6TPtcL>

2 1

103.68.122.0/24 is announced in Christchurch
by Don Gould 23 Nov '20

23 Nov '20

103.68.122.0/24 is announced in ChristchurchMediaworks you're annoying my wife. She can't watch the block on demand.D-- Don Gould5 Cargill PlaceRichmondChristchurch, New ZealandMobile/Telegram: + 64 21 114 0699www.bowenvale.co.nz

10 14

AS4770 and proxy
by Mauricio Freitas 20 Nov '20

20 Nov '20

I am seeing some traffic from a few IP addresses in the AS4770 space (ICONZ). This traffic come with a few different user-agents but all these browsers are used across different IP addresses - and reCAPTCHA is marking all of them as bots. All those IP respond to port 10002 requests as WonderProxy (wonderproxy.com) I am not sure those are business IPs or some residential IP being used as exit for this service without people knowing. Is there anyone from ICONZ here that would be interested? Cheers Mauricio Freitas https://about.me/freitasm

1 0

forward & reverse dns
by Richard Hector 10 Nov '20

10 Nov '20

Hi all, Is it reasonable to expect that a residential ISP, that provides a generated reverse resolution to a home IP address, will also provide a matching forward resolution that goes back to the same IP? Cheers, Richard

11 16

IANA AS Numbers Registry Update
by Selina Harrington 03 Nov '20

03 Nov '20

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to ARIN: 399261-400284 Assigned by ARIN 2020-11-02 400285-401308 Assigned by ARIN 2020-11-02 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

Monitor your network health with DASH
by Elly Tawhai 29 Oct '20

29 Oct '20

________________________________________________________________________ Monitor your network health with DASH ________________________________________________________________________ Hi NZNOG Community, APNIC is pleased to announce a new tool to help keep your network devices secure and healthy by monitoring suspicious traffic come from your network. The Dashboard for Autonomous System Health (DASH) is free for all APNIC Members and uses information from current honeynet data to see, for example, if malware exists in your networks, which in turn, may launch attacks on other networks. Is DASH right for me? --------------------- DASH will give you an idea of how your Autonomous System (AS) looks relative to other networks. By analysing the level of suspicious activity using DASH, you can check to see if the problem is serious and do something about it. DASH allows you to check how your AS looks compared to the broader economy or region, whether your network has a history of suspicious activity, and whether it’s getting better or worse. By monitoring this activity and correcting any compromised devices on your network, you’re also protecting other networks in the region, as well as your customers and infrastructure. Added benefits -------------- DASH also provides you with: - Reports for informed decision making (table of offending prefixes, high-level summary PDF report, and so forth) - Detailed information on specific prefixes and IP addresses that have been sending suspicious traffic - Additional insights about a set of prefixes if requested - Up-to-date security news Explore DASH now and see how you can secure your network and help improve the health of networks across the Asia Pacific. Try DASH now! ------------- https://dash.apnic.net/?utm_source=apnic_blog&utm_medium=text_ref&utm_campa… On behalf of: Sofia Silva Berenguer Product Manager, Information Services APNIC

1 0

Join the APNIC Policy Development Process Community Consultation
by Elly Tawhai 27 Oct '20

27 Oct '20

_______________________________________________________________________ Join the APNIC Policy Development Process Community Consultation _______________________________________________________________________ Hi NZNOG Community, Thank you for taking the time to join the Policy SIG Open Policy Meeting (OPM) at APNIC 50. With all policy discussions remaining online-only for the foreseeable future, we believe there is a need to provide additional opportunities for the community to discuss policy matters (in addition to the mailing list) ahead of APNIC 51. In particular, the Policy Development Process (PDP) review report contains important recommendations for community discussion. We invite you to join a virtual community consultation session on this topic: Date: Friday, 30 October 2020 Time: 11:00 (UTC+8) (Time converter https://tinyurl.com/y5xjej2d) Duration: 1 hour The consultation session is free and open to anyone who wishes to participate. If you are interested, please register by Thursday, 29 October 2020. https://www.apnic.net/community/participate/sigs/community-consultation/ Useful links ------------ - PDP and SIG Guidelines Review Report https://conference.apnic.net/50/assets/files/APCS790/PDP-and-SIG-Guidelines… - Policy Development Process (PDP) redline document https://ftp.apnic.net/apnic/drafts/pdp-v002-v003-diff.html Regards, Bertrand Cherrier and Ching-Heng Ku APNIC Policy SIG Chairs ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http ://www.apnic.net ________________________________________________________________________

1 0

Another virtual NOG meeting on Wednesday
by Mark Prior 26 Oct '20

26 Oct '20

This time it's the Mongolian NOG having a half day virtual NOG meeting via Zoom. Times are UTC+8:00. <https://nog.mn/en/schedule/> Mark.

1 0

Cold Calling on a public holiday
by Craig Whitmore 26 Oct '20

26 Oct '20

I've had 2 calls today from a USA number (At 7:40am and 12:30 pm ) trying to sell me BGP network monitoring software. I think they may be calling ISP NOC's from the NOC list (Not a recent copy) . Searching for the number they called from it seems they have been complaints of them doing it in the past. Sent from my iPhone

2 2

IANA AS Numbers Registry Update
by Selina Harrington 20 Oct '20

20 Oct '20

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC: 141626-142649 Assigned by APNIC 2020-10-20 142650-143673 Assigned by APNIC 2020-10-20 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0