Hi list

Is there anyone here from the Southland Regional Council? (or with a contact there)

I noticed they have a reasonable number of listings from their range 202.49.127.X in the data linked below - someone might want to reach out to them.

Pete

Begin forwarded message:

Subject: [AusNOG] 49-000 vulnerable fortinet vpns Posted online
Date: 24 November 2020 at 1:39:59 PM NZDT
To: "ausnog@ausnog.net" <ausnog@lists.ausnog.net>

All,

In case this passed you by...

https://www.bleepingcomputer.com/news/security/hacker-posts-exploits-for-over-49-000-vulnerable-fortinet-vpns/amp/

The list includes a number of Aussie businesses, so if you have the time/ability, and can find people on your networks, it may be a nice value add to reach out to them and let them know they may be about to have a bad day.

A link to these with the ASN Info was posted to the JCSC slack, so you can grep away - there is a copy here.