[AusNOG] IINET ip range hijacked?

[Carl Krumins]

Hi Guys

 

Just had a few clients web sites hacked and removed from this IP address
about 10:20pm aest which appears to be IINET but when doing a whois (see
below) brings up “Beijing Primezone Technologies Inc.”  ½ way through the
whois.. 

 

Is this china hijacking IINET’s ip space?

 

inetnum:      203.130.32.0 - 203.208.39.255

netname:      PRIMETELECOM

descr:        Beijing Primezone Technologies Inc.

 

that doesn’t look right..?

 

 

[root at blue carl]# whois 203.206.183.220

[Querying whois.apnic.net]

[whois.apnic.net]

% [whois.apnic.net node-2]

% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

 

inetnum:      203.206.0.0 - 203.206.255.255

netname:      IINET-AU

descr:        iiNet Limited

descr:        Locked Bag 16

descr:        Cloisters Square, WA, 6850

country:      AU

admin-c:      NO20-AP

tech-c:       NO20-AP

remarks:      For abuse/UCE issues, please mail abuse at iinet.net.au.

status:       ALLOCATED PORTABLE

mnt-by:       APNIC-HM

mnt-lower:    MAINT-AU-IINET

changed:      hostmaster at apnic.net 20010816

changed:      hm-changed at apnic.net 20031017

changed:      hm-changed at apnic.net 20031208

changed:      hm-changed at apnic.net 20040726

source:       APNIC

 

person:       Network Operations

nic-hdl:      NO20-AP

e-mail:       apnic-admin at staff.iinet.net.au

address:      iiNet Limited

address:      Level 6, Durack Centre

address:      263 Adelaide Terrace

address:      Perth WA 6000

phone:        +61 8 9214 2222

fax-no:       +61 8 9214 2211

country:      AU

changed:      ianh at staff.iinet.net.au 20061117

mnt-by:       MAINT-AU-IINET

source:       APNIC

 

inetnum:      203.130.32.0 - 203.208.39.255

netname:      PRIMETELECOM

descr:        Beijing Primezone Technologies Inc.

descr:        44 Fu Cheng Road,Beijing,P.R.China

country:      CN

admin-c:      KS1-CN

tech-c:       CZ1-CN

mnt-by:       MAINT-CNNIC-AP

mnt-lower:    MAINT-CNNIC-AP

changed:      ipas at cnnic.cn 20070911

status:       ALLOCATED PORTABLE

source:       CNNIC

 

person:       Kemin Shi

nic-hdl:      KS1-CN

e-mail:       ajtel at vip.sina.com

address:      44 Fu Cheng Road,Beijing,P.R.China

phone:        +86-10-88128844-811

fax-no:       +86-10-88138844

country:      CN

changed:      ipas at cnnic.cn 20051026

mnt-by:       MAINT-NEW

source:       CNNIC

 

person:       Cong Zhang

nic-hdl:      CZ1-CN

e-mail:       shikm at euncn.com

address:      44 Fu-Cheng Road,Beijing,P.R.China

phone:        +86-10-88128844

fax-no:       +86-10-88138844

country:      CN

changed:      ipas at cnnic.cn 20060508

mnt-by:       MAINT-NEW

source:       CNNIC

 

Carl Krumins
The K.A.S NET Group
www.kas.net.au <http://www.kas.net.au/> 
 <mailto:carl at kas.net.au> carl at kas.net.au
Phone: 1300 883 400
Phone: 0409 317 436

This e-mail remains the property of The K.A.S NET Group and is subject to
the jurisdiction of Sect 70 of the Crimes Act 1914. 
This email is intended only for the addressee and is confidential.  If you
receive this message and are not the addressee, then it may be unlawful for
you to read, copy, distribute, disclose or otherwise use the information in
this email. Material in this transmission is confidential and the subject of
professional privilege. No confidentiality, nor any privilege is waived,
lost or destroyed, by reason that this e-mail has been mistakenly
transmitted.  If you are not the addressee please notify us immediately by
telephone or e-mail at the number and address above and delete all record of
this e-mail.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20070916/adb8c201/attachment.html>