And have they rolled back the hacks???
Regards
Robert Cotter
Sales Engineer
rcotter(a)distributioncentral.co.nz<mailto:rcotter(a)distributioncentral.co.nz>
Distribution Central NZ
Unit 2, Level 1, 194 Victoria Street West, Auckland 1001, New Zealand.
Mb 64 21 675550, T 64 9 309 8277, F 64 9 309 8276
www.distributioncentral.co.nz<http://www.distributioncentral.co.nz/>
Distributor of : Accellion, Acronis, Aruba, Bluecoat, Boll Engineering, Crossbeam, F5, Force10, Fortinet, Infoblox, Netxen, Riverbed, TippingPoint, Xsigo .
Vendor product link => www.distributioncentral.co.nz/Section.asp?section=9
This email is for the intended recipient(s) only, Be advised that if you have received this email in error that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. The sender cannot guarantee that this email or any attachment to it is free of computer viruses or other conditions which may damage or interfere with data, hardware or software with which it might be used. If you have received this email in error, please notify Distribution Central on +61 2 9425 5000 or notify sender.
So, I wouldn't normally make a post like this, but I figure one or two
people might notice this at some point in the next day or so:
mj(a)coalface:~$ whois msn.co.nz | egrep ^ns_name
ns_name_01: fatih1.turkguvenligi.info
ns_name_02: fatih2.turkguvenligi.info
mj(a)coalface:~$ whois msn.co.nz | egrep ^domain_datelastmodified
domain_datelastmodified: 2009-04-21T09:44:21+12:00
From my resolver's cache:
;; ANSWER SECTION:
msn.co.nz. 3282 IN A 202.58.48.29
;; AUTHORITY SECTION:
msn.co.nz. 20363 IN NS ns4.msft.net.
msn.co.nz. 20363 IN NS ns5.msft.net.
msn.co.nz. 20363 IN NS ns1.msft.net.
msn.co.nz. 20363 IN NS ns2.msft.net.
msn.co.nz. 20363 IN NS ns3.msft.net.
;; ADDITIONAL SECTION:
ns1.msft.net. 1571 IN A 207.68.160.190
ns2.msft.net. 1593 IN A 65.54.240.126
ns3.msft.net. 18367 IN A 213.199.161.77
ns4.msft.net. 18367 IN A 207.46.66.126
ns5.msft.net. 1302 IN A 65.55.238.126
From the new NS:
;; ANSWER SECTION:
msn.co.nz. 14400 IN A 95.211.11.163
;; AUTHORITY SECTION:
msn.co.nz. 86400 IN NS fatih1.turkguvenligi.info.
msn.co.nz. 86400 IN NS fatih2.turkguvenligi.info.
;; ADDITIONAL SECTION:
fatih1.turkguvenligi.info. 14400 IN A 95.211.11.163
fatih2.turkguvenligi.info. 14400 IN A 95.211.11.163
It's not still April Fools, is it?
-Mike
Dear Colleague,
This is to notify you that one or more objects in which you are
designated for notification have been modified in the NZRR routing
registry database.
These objects are used to configure the various NZIX route servers
(http://nzix.net/) so you can expect the relevant servers to be reloaded
in the near future. The reloading of the servers is staggered over a
period of time so that if you are peering with both servers at an
exchange, you can maintain at least one BGP session at all times and
consequently a full set of routes.
Diagnostic output:
------------------------------------------------------------
---
PREVIOUS OBJECT:
route-set: AS9560:RS-ROUTES:AS9790
descr: advertised to AS9560 by CALLPLUS - AS9790
members: 119.224.0.0/17^17-29,
124.197.0.0/18^18-29,
202.180.64.0/18^18-29,
203.184.0.0/18^18-29,
119.224.128.0/20^20-29,
203.100.208.0/20^20-29,
203.160.112.0/20^20-29,
202.49.34.0/23^23-29,
203.215.142.0/23^23-29,
202.36.232.0/24^24-29,
202.37.22.0/24^24-29,
202.50.109.0/24^24-29,
203.97.152.0/24^24-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: noc(a)callplus.co.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20080304
source: NZRR
REPLACED BY:
route-set: AS9560:RS-ROUTES:AS9790
descr: advertised to AS9560 by Callplus - AS9790
members: 119.224.0.0/17^17-29,
124.197.0.0/18^18-29,
202.180.64.0/18^18-29,
203.184.0.0/18^18-29,
119.224.128.0/20^20-29,
203.100.208.0/20^20-29,
203.160.112.0/20^20-29,
202.49.34.0/23^23-29,
202.37.22.0/24^24-29,
202.37.75.0/24^24-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: networksnoc(a)callplus.co.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20090421
source: NZRR
------------------------------------------------------------
is there any nand experts on here? I just was just wondering why none of the
moblie phone providers have but local numbers on a cell like we do in the
states. I was just wondering not very familiar with NAND stuff here in NZ.
James Jones
Managing Director
Freedom Networks
+64 6 3678300
+1 413 771 1402
james(a)freedomnet.co.nz
Morning,
Anyone else seeing issues with vector fibre in the cbd today?
It seems to coincide with a failure at the Vector switchboard as
well... So information seems scarce.
Skip Parker
Rhema Broadcasting Group
On 4/2/09, matthew(a)auscert.org.au <matthew(a)auscert.org.au> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> G'day all,
>
> We are seeing a decent trojan spam out using Facebook as the hook. The
> emails all differ slightly but possess the same characteristics. Eg:
>
> From: "Facebook presentment" <support60(a)facebook.com>
> Subject: Facebook announcement: Great looking girl having fun (Last rated
> by Bradford Collins)
>
> Messages from Your Friends on Facebook, April 01, 2009
>
> You have 1 friend requests - Personal Message:
> Watch the video titled "Drunk Charlize is dancing striptease on my
> Birthday Party, March 28, 2009! We're absolutely shocked!".
>
> Proceed to view full message:
>
> hxxp://facebook.shared.id-etsmrnhy5e.subject.876panel.
> com/home.htm?/identification/authentication=0616n9m12
>
> Added 16 minutes ago. Message ID: FB-06nnzbrxizjrzvr
> 2009 Facebook community, Message Center.
>
> Multiple domains are being used all following a naming scheme of
>
> [3-5 digit number]panel.com
>
> Eg:
>
> 2349panel. com
> 43553panel. com
> 654panel. com
> 876panel. com
> 987panel. com
>
> Is anyone else seeing a decent run of this?
>
> Just trying to work out how widespread it is as we are preparing to do an
> alert on it.
>
> Apologies if you see this across a few lists - looking for any feedback
> on numbers on this (and it is all appreciated).
>
> Best regards,
>
> - -- Matthew McGlashan --
> Coordination Centre Team Leader | Hotline: +61 7 3365 4417
> Australian Computer Emergency Response Team | Direct: +61 7 3365 7924
> (AusCERT) | Fax: +61 7 3365 7031
> The University of Queensland | WWW: www.auscert.org.au
> Qld 4072 Australia | Email: auscert(a)auscert.org.au
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (FreeBSD)
> Comment: http://www.auscert.org.au/render.html?it=1967
> Comment: http://www.auscert.org.au/render.html?it=1967
>
> iD8DBQFJ1BXZNVH5XJJInbgRAvMqAJ0cqNWqI3riSyf5Tq9lGzxO9C6xegCcCpl0
> KzfS5kwPQpBMNU4TfhQuqDo=
> =zKz3
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> NZNOG mailing list
> NZNOG(a)list.waikato.ac.nz
> http://list.waikato.ac.nz/mailman/listinfo/nznog
>
--
Sent from my mobile device
Skip Parker
m. 021 793 824
e. skip(a)ignition.net.nz
Dear Colleague,
This is to notify you that one or more objects in which you are
designated for notification have been modified in the NZRR routing
registry database.
These objects are used to configure the various NZIX route servers
(http://nzix.net/) so you can expect the relevant servers to be reloaded
in the near future. The reloading of the servers is staggered over a
period of time so that if you are peering with both servers at an
exchange, you can maintain at least one BGP session at all times and
consequently a full set of routes.
Diagnostic output:
------------------------------------------------------------
---
PREVIOUS OBJECT:
route-set: AS9560:RS-ROUTES:AS9503
descr: advertised to AS9560 by FX Networks - AS9503
members: 131.203.0.0/16^16-29,
161.29.0.0/16^16-29,
161.65.0.0/16^16-29,
166.65.0.0/16^16-29,
119.15.0.0/19^19-29,
202.14.32.0/19^19-29,
202.53.176.0/20^20-29,
202.86.96.0/20^20-29,
202.160.48.0/20^20-29,
202.191.32.0/20^20-29,
210.48.160.0/20^20-29,
120.89.80.0/21^21-29,
192.173.16.0/21^21-29,
202.46.176.0/21^21-29,
202.49.0.0/21^21-29,
202.78.240.0/21^21-29,
202.160.112.0/21^21-29,
203.190.208.0/21^21-29,
113.197.64.0/22^22-29,
202.37.48.0/22^22-29,
202.89.4.0/22^22-29,
203.84.134.0/23^23-29,
124.248.128.0/24^24-29,
124.248.132.0/24^24-29,
124.248.136.0/24^24-29,
124.248.140.0/24^24-29,
192.88.85.0/24^24-29,
192.88.99.0/24^24-29,
192.122.171.0/24^24-29,
192.133.31.0/24^24-29,
192.195.219.0/24^24-29,
202.8.13.0/24^24-29,
202.12.0.0/24^24-29,
202.12.91.0/24^24-29,
202.20.97.0/24^24-29,
202.27.83.0/24^24-29,
202.36.33.0/24^24-29,
202.36.75.0/24^24-29,
202.36.119.0/24^24-29,
202.36.154.0/24^24-29,
202.36.162.0/24^24-29,
202.36.218.0/24^24-29,
202.37.93.0/24^24-29,
202.37.168.0/24^24-29,
202.37.205.0/24^24-29,
202.46.188.0/24^24-29,
202.46.190.0/24^24-29,
202.49.106.0/24^24-29,
202.50.247.0/24^24-29,
202.55.99.0/24^24-29,
202.55.105.0/24^24-29,
202.55.107.0/24^24-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: noc(a)fx.net.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20090327
source: NZRR
REPLACED BY:
route-set: AS9560:RS-ROUTES:AS9503
descr: advertised to AS9560 by FX Networks - AS9503
members: 131.203.0.0/16^16-29,
161.29.0.0/16^16-29,
161.65.0.0/16^16-29,
166.65.0.0/16^16-29,
119.15.0.0/19^19-29,
202.14.32.0/19^19-29,
202.46.160.0/20^20-29,
202.53.176.0/20^20-29,
202.86.96.0/20^20-29,
202.160.48.0/20^20-29,
202.191.32.0/20^20-29,
210.48.160.0/20^20-29,
120.89.80.0/21^21-29,
192.173.16.0/21^21-29,
202.46.176.0/21^21-29,
202.49.0.0/21^21-29,
202.78.240.0/21^21-29,
202.126.80.0/21^21-29,
202.160.112.0/21^21-29,
203.190.208.0/21^21-29,
113.197.64.0/22^22-29,
202.37.48.0/22^22-29,
202.89.4.0/22^22-29,
203.84.134.0/23^23-29,
124.248.128.0/24^24-29,
124.248.132.0/24^24-29,
124.248.136.0/24^24-29,
124.248.140.0/24^24-29,
192.88.85.0/24^24-29,
192.88.99.0/24^24-29,
192.122.171.0/24^24-29,
192.133.31.0/24^24-29,
192.195.219.0/24^24-29,
202.8.13.0/24^24-29,
202.12.0.0/24^24-29,
202.12.91.0/24^24-29,
202.20.97.0/24^24-29,
202.27.83.0/24^24-29,
202.36.33.0/24^24-29,
202.36.75.0/24^24-29,
202.36.119.0/24^24-29,
202.36.154.0/24^24-29,
202.36.162.0/24^24-29,
202.36.218.0/24^24-29,
202.37.93.0/24^24-29,
202.37.168.0/24^24-29,
202.37.205.0/24^24-29,
202.46.188.0/24^24-29,
202.46.190.0/24^24-29,
202.49.106.0/24^24-29,
202.49.144.0/24^24-29,
202.50.247.0/24^24-29,
202.55.99.0/24^24-29,
202.55.105.0/24^24-29,
202.55.107.0/24^24-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: peering(a)fx.net.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20090415
source: NZRR
------------------------------------------------------------
Dear Colleague,
This is to notify you that one or more objects in which you are
designated for notification have been modified in the NZRR routing
registry database.
These objects are used to configure the various NZIX route servers
(http://nzix.net/) so you can expect the relevant servers to be reloaded
in the near future. The reloading of the servers is staggered over a
period of time so that if you are peering with both servers at an
exchange, you can maintain at least one BGP session at all times and
consequently a full set of routes.
Diagnostic output:
------------------------------------------------------------
---
PREVIOUS OBJECT:
route-set: AS9439:RS-ROUTES:AS9503
descr: advertised to AS9439 by FX Networks - AS9503
members: 131.203.0.0/16^16-29,
161.29.0.0/16^16-29,
161.65.0.0/16^16-29,
166.65.0.0/16^16-29,
119.15.0.0/19^19-29,
202.14.32.0/19^19-29,
202.53.176.0/20^20-29,
202.86.96.0/20^20-29,
202.160.48.0/20^20-29,
202.191.32.0/20^20-29,
210.48.160.0/20^20-29,
120.89.80.0/21^21-29,
192.173.16.0/21^21-29,
202.46.176.0/21^21-29,
202.49.0.0/21^21-29,
202.78.240.0/21^21-29,
202.160.112.0/21^21-29,
203.190.208.0/21^21-29,
113.197.64.0/22^22-29,
202.37.48.0/22^22-29,
202.89.4.0/22^22-29,
203.84.134.0/23^23-29,
124.248.128.0/24^24-29,
124.248.132.0/24^24-29,
124.248.136.0/24^24-29,
124.248.140.0/24^24-29,
192.88.85.0/24^24-29,
192.88.99.0/24^24-29,
192.122.171.0/24^24-29,
192.133.31.0/24^24-29,
192.195.219.0/24^24-29,
202.8.13.0/24^24-29,
202.12.0.0/24^24-29,
202.12.91.0/24^24-29,
202.20.97.0/24^24-29,
202.27.83.0/24^24-29,
202.36.33.0/24^24-29,
202.36.75.0/24^24-29,
202.36.119.0/24^24-29,
202.36.154.0/24^24-29,
202.36.162.0/24^24-29,
202.36.218.0/24^24-29,
202.37.93.0/24^24-29,
202.37.168.0/24^24-29,
202.37.205.0/24^24-29,
202.46.188.0/24^24-29,
202.46.190.0/24^24-29,
202.49.106.0/24^24-29,
202.50.247.0/24^24-29,
202.55.99.0/24^24-29,
202.55.105.0/24^24-29,
202.55.107.0/24^24-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: noc(a)fx.net.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20090327
source: NZRR
REPLACED BY:
route-set: AS9439:RS-ROUTES:AS9503
descr: advertised to AS9439 by FX Networks - AS9503
members: 131.203.0.0/16^16-29,
161.29.0.0/16^16-29,
161.65.0.0/16^16-29,
166.65.0.0/16^16-29,
119.15.0.0/19^19-29,
202.14.32.0/19^19-29,
202.46.160.0/20^20-29,
202.53.176.0/20^20-29,
202.86.96.0/20^20-29,
202.160.48.0/20^20-29,
202.191.32.0/20^20-29,
210.48.160.0/20^20-29,
120.89.80.0/21^21-29,
192.173.16.0/21^21-29,
202.46.176.0/21^21-29,
202.49.0.0/21^21-29,
202.78.240.0/21^21-29,
202.126.80.0/21^21-29,
202.160.112.0/21^21-29,
203.190.208.0/21^21-29,
113.197.64.0/22^22-29,
202.37.48.0/22^22-29,
202.89.4.0/22^22-29,
203.84.134.0/23^23-29,
124.248.128.0/24^24-29,
124.248.132.0/24^24-29,
124.248.136.0/24^24-29,
124.248.140.0/24^24-29,
192.88.85.0/24^24-29,
192.88.99.0/24^24-29,
192.122.171.0/24^24-29,
192.133.31.0/24^24-29,
192.195.219.0/24^24-29,
202.8.13.0/24^24-29,
202.12.0.0/24^24-29,
202.12.91.0/24^24-29,
202.20.97.0/24^24-29,
202.27.83.0/24^24-29,
202.36.33.0/24^24-29,
202.36.75.0/24^24-29,
202.36.119.0/24^24-29,
202.36.154.0/24^24-29,
202.36.162.0/24^24-29,
202.36.218.0/24^24-29,
202.37.93.0/24^24-29,
202.37.168.0/24^24-29,
202.37.205.0/24^24-29,
202.46.188.0/24^24-29,
202.46.190.0/24^24-29,
202.49.106.0/24^24-29,
202.49.144.0/24^24-29,
202.50.247.0/24^24-29,
202.55.99.0/24^24-29,
202.55.105.0/24^24-29,
202.55.107.0/24^24-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: peering(a)fx.net.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20090415
source: NZRR
------------------------------------------------------------
Dear Colleague,
This is to notify you that one or more objects in which you are
designated for notification have been modified in the NZRR routing
registry database.
These objects are used to configure the various NZIX route servers
(http://nzix.net/) so you can expect the relevant servers to be reloaded
in the near future. The reloading of the servers is staggered over a
period of time so that if you are peering with both servers at an
exchange, you can maintain at least one BGP session at all times and
consequently a full set of routes.
Diagnostic output:
------------------------------------------------------------
---
PREVIOUS OBJECT:
route-set: AS9560:RS-ROUTES:AS38477
descr: advertised to AS9560 by Unleash - AS38477
members: 116.90.128.0/21^21-29,
202.6.116.0/23^23-29,
192.88.99.0/24^24-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: jasper(a)unleash.co.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20080901
source: NZRR
REPLACED BY:
route-set: AS9560:RS-ROUTES:AS38477
descr: advertised to AS9560 by Unleash - AS38477
members: 116.90.128.0/20^20-29,
113.130.120.0/22^22-29,
202.6.116.0/23^23-29
admin-c: RPA1-NZRR
tech-c: RPA1-NZRR
notify: rpsl-admin(a)nzix.net
notify: nznog(a)list.waikato.ac.nz
notify: noc(a)unleash.co.nz
mnt-by: MAINT-NZRR-NZ
changed: rpsl-admin(a)nzix.net 20090408
source: NZRR
------------------------------------------------------------
