<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">"<span class="Apple-style-span" style="font-size: small; ">A message posted on the Inquisitor website by the hacker, known as Anonymous"</span><div><span class="Apple-style-span" style="font-size: small;"><br></span></div><div><span class="Apple-style-span" style="font-size: small;">And this right here is why the attack is a pointless exercise. If the media can't get the facts straight (Through a lack of understanding) what hope does your average MaPa, let alone Senator Conroy.</span></div><div><span class="Apple-style-span" style="font-size: small;"><br></span></div><div><span class="Apple-style-span" style="font-size: small;"><br></span></div><div><span class="Apple-style-span" style="font-size: small;"><br></span><div><div>On 09/09/2009, at 10:42 PM, Kevin Collins wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div>
<!-- Converted from text/plain format --><p><font size="2">its all over the news -<br>
<br>
THE Prime Minister's website has been hacked into in protest over proposed reforms of internet censorship.<br>
<br>
The website, <a href="http://www.pm.gov.au">www.pm.gov.au</a>, was brought down at about 7.20pm (AEST) along with that of the Australian Communications and Media Authority, but both were back online about an hour later.<br>
<br>
A message posted on the Inquisitor website by the hacker, known as Anonymous, stated that the action was in response to a Federal Government proposal to introduce mandatory internet filtering.<br>
<br>
The posting complains that the proposal to introduce internet filtering would block legal content, and take censorship to levels like that seen in China.<br>
<br>
"Not only will your rights be at stake, our Internet speeds will slow down by 70 per cent, be mandatory for all Aussies and will not protect us from evil AT ALL", the post said.<br>
Related Coverage<br>
<br>
* Prime Minister's website <a href="http://hackedNEWS.com.au">hackedNEWS.com.au</a>, 9 Sep 2009<br>
* Web filter 'won't stop child porn'NEWS.com.au, 30 Mar 2009<br>
* Internet black-lists, filter neededAdelaide Now, 27 Mar 2009<br>
* Blacklists needed to combat child porn: ConroyAustralian IT, 27 Mar 2009<br>
* Education, not filtering, the answer: iiNetAustralian IT, 10 Feb 2009<br>
<br>
<br>
The posting, titled "Anonymous vs the Australian Government", also gives a blow-by-blow account of the hacker's progress.<br>
<br>
"In two minutes from when I type this, Anonymous is declaring war on the Australian Government over its decision to implement Draconian internet censorship," the post said.<br>
<br>
"Tick tick tick.<br>
<br>
"Update: 7pm: and so it begins.<br>
<br>
"7:05pm (AEST), Ministers page is slow to load, but still up.<br>
<br>
"7:11pm weve confirmed on site (via a source) that the sites due to be attacked have been taken down from the coordination page, possibly before the raid.<br>
<br>
"7:18pm <a href="http://pm.gov.au">pm.gov.au</a> DOWN!<br>
<br>
"7:21pm Kevin Rudd's page is down completely. Strike one to Anonymous."<br>
<br>
A spokesman for Communications Minister Stephen Conroy said he had received reports of the hack but could not confirm whether the attack had been successful.<br>
<br>
However, he said the people responsible were misguided, adding that the proposed filter would only be used to block illegal content.<br>
<br>
"The campaign that they're mounting is erroneous and misinformed," he said.<br>
<br>
"What the Government is proposing is to filter refused classification content which includes imagery of child sexual abuse, rape and bestiality."<br>
<br>
The Government has been conducting an internet filter trial which is expected to be completed soon.<br>
<br>
A report will then be presented to Senator Conroy from which an internet filter policy will be developed.<br>
<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a> on behalf of <a href="http://Kooby.net">Kooby.net</a><br>
Sent: Wed 09/09/2009 18:12<br>
Cc: <a href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a><br>
Subject: Re: [AusNOG] Possible DDoS attack against .au governmental sites-~65minutes from now.<br>
<br>
Hello,<br>
<br>
To save you from visiting the terrible website that apparently contains the<br>
target addresses you can view this list taken from the site:<br>
<br>
"DNS servers: <a href="http://dns3.sge.net">dns3.sge.net</a>, <a href="http://dns2.sge.net">dns2.sge.net</a>, <a href="http://dns.sge.net">dns.sge.net</a>"<br>
<br>
"There are many different sites hosted by the same hosting company that is<br>
providing internetz for our target:<br>
152.91.62.160<br>
152.91.62.139<br>
152.91.62.145<br>
152.91.62.146<br>
152.91.62.148<br>
152.91.62.161<br>
152.91.62.162<br>
152.92.1.66<br>
152.92.1.68<br>
152.92.1.71<br>
Some DNS Enumeration / Ports Found<br>
205.239.168.16 <a href="http://admin.australia.gov.au">admin.australia.gov.au</a><br>
205.239.169.21 <a href="http://dev.australia.gov.au">dev.australia.gov.au</a><br>
203.13.0.99 <a href="http://login.australia.gov.au">login.australia.gov.au</a> / 80 HTTP, 443 HTTPS<br>
205.239.169.33 <a href="http://mail2.australia.gov.au">mail2.australia.gov.au</a><br>
205.239.168.11 <a href="http://maps.australia.gov.au">maps.australia.gov.au</a> / 80 HTTP<br>
202.125.14.244 <a href="http://search.australia.gov.au">search.australia.gov.au</a><br>
205.239.168.15 <a href="http://services.australia.gov.au">services.australia.gov.au</a><br>
205.239.168.13 <a href="http://staging.australia.gov.au">staging.australia.gov.au</a><br>
205.239.169.13 <a href="http://test.australia.gov.au">test.australia.gov.au</a><br>
152.91.62.145 <a href="http://www.australia.gov.au">www.australia.gov.au</a> / 80 HTTP<br>
<a href="http://media.australia.gov.au">media.australia.gov.au</a> alias <a href="http://govsearch-failover.funnelback.com">govsearch-failover.funnelback.com</a><br>
<a href="http://govsearch-failover.funnelback.com">govsearch-failover.funnelback.com</a> address 122.99.95.165"<br>
<br>
Cheers,<br>
<br>
Kooby.<br>
<br>
----- Original Message -----<br>
From: "Bevan Slattery" <<a href="mailto:Bevan.Slattery@staff.pipenetworks.com">Bevan.Slattery@staff.pipenetworks.com</a>><br>
To: "Roland Dobbins" <<a href="mailto:rdobbins@arbor.net">rdobbins@arbor.net</a>><br>
Cc: <<a href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a>><br>
Sent: Wednesday, September 09, 2009 5:57 PM<br>
Subject: Re: [AusNOG] Possible DDoS attack against .au governmental<br>
sites -~65minutes from now.<br>
<br>
<br>
> Thanks for the heads up.<br>
><br>
> Time to sit back and wait for the mrtg graphs tell the story :)<br>
><br>
> [b]<br>
><br>
>> -----Original Message-----<br>
>> From: <a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a><br>
>> [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] On Behalf Of Roland Dobbins<br>
>> Sent: Wednesday, September 09, 2009 5:56 PM<br>
>> To: <a href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a><br>
>> Subject: [AusNOG] Possible DDoS attack against .au<br>
>> governmental sites - ~65minutes from now.<br>
>><br>
>><br>
>> There were some rumblings last week that a DDoS attack<br>
>> against .au governmental sites might take place today in<br>
>> order to protest the<br>
>> Internet filtering plans being posited by the present .au<br>
>> government.<br>
>> I didn't take it very seriously at the time, because no one<br>
>> seemed to have any specifics.<br>
>><br>
>> This has now changed; it's apparently Anonymous who're<br>
>> supposedly going to do this in about 70 minutes, and they've<br>
>> a considerable track record of mischief, sort of a '4chan<br>
>> Lite'. I've no idea whether the attacks will actually take<br>
>> place, but heightened vigilance is a good idea, especially as<br>
>> outbound DDoS from botted hosts can be just as disruptive to<br>
>> the networks in question as inbound DDoS.<br>
>><br>
>> SANS posted something on it here:<br>
>><br>
>> <<a href="http://isc.sans.org/diary.html?storyid=7108">http://isc.sans.org/diary.html?storyid=7108</a>><br>
>><br>
>> There's an extremely NSFW wiki page being used to coordinate the<br>
>> putative attacks, along with an IRC server/channel. I'm not<br>
>> going to<br>
>> link to them here, but some digging with various search<br>
>> engines can find them with relative ease.<br>
>><br>
>> Again, I've no idea whether or not this will actually happen,<br>
>> just a heads-up.<br>
>><br>
>> --------------------------------------------------------------<br>
>> ---------<br>
>> Roland Dobbins <<a href="mailto:rdobbins@arbor.net">rdobbins@arbor.net</a>> // <<a href="http://www.arbornetworks.com/">http://www.arbornetworks.com</a>><br>
>><br>
>> Sorry, sometimes I mistake your existential crises for<br>
>> technical insights.<br>
>><br>
>> -- xkcd #625<br>
>><br>
>> _______________________________________________<br>
>> AusNOG mailing list<br>
>> <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
>> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
>><br>
> _______________________________________________<br>
> AusNOG mailing list<br>
> <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br>
<br>
</font>
</p>
</div>
_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>http://lists.ausnog.net/mailman/listinfo/ausnog<br></blockquote></div><br></div></body></html>