From chris at thesysadmin.au Sun Jun 1 01:50:24 2025 From: chris at thesysadmin.au (Christopher Hawker) Date: Sat, 31 May 2025 15:50:24 +0000 Subject: [AusNOG] Call for Papers - APNIC 60 Message-ID: Hello everyone, The APNIC 60 Program Committee (PC) is seeking presentations for the APNIC 60 conference in Da Nang, Viet Nam. The three conference days will be held from 9 to 11 September 2025. We are looking for content that would suit technical sessions, tutorials, lightning talks, BoFs and panel discussions. APNIC 60 conference registration is free for selected speakers. Topics for conference sessions must be relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. * IP core network routing, switching * IPv6 deployment and transition technologies * Access and transport networks including Cable/DSL, LTE/5G/6G, wireless, metro ethernet, fibre, segment routing * Cyber security, network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) and BCPs * Software defined networking, network function virtualization and network automation * Content & service delivery (Multicast, Voice, Video, Telepresence, Gaming) and cloud computing * DNS / DNSSEC and RPKI * IXPs and Peering * Internet of Things (IoT) architectures, standards, services, security, addressability, and manageability * Smart Cities architecture, security, and addressing * Research on Internet operations and deployment * Quantum computing * AI in network operations Presentations are expected to last 20 minutes, and tutorials are expected to last 90 minutes. It's acceptable to submit a talk you've already given or have submitted to another conference. If you would like to submit a presentation, head over to https://submission.apnic.net/user/login.php?event=222. The final deadline for submissions is Monday 30 June 2025. More information can be found on https://conference.apnic.net/60/program/callforpresentations/index.html. If you have any questions or concerns, please do feel free to send an email to the Program Committee at apnic-pc at apnic.net. ----- Regards, Christopher Hawker On behalf of the APNIC 60 Program Committee -------------- next part -------------- An HTML attachment was scrubbed... URL: From spoofer-info at caida.org Mon Jun 9 03:00:30 2025 From: spoofer-info at caida.org (CAIDA Spoofer Project) Date: Sun, 8 Jun 2025 10:00:30 -0700 Subject: [AusNOG] Spoofer Report for AusNOG for May 2025 Message-ID: <1749402030.161093.4263.nullmailer@caida.org> In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within aus. Inferred improvements during May 2025: ASN Name Fixed-By 4804 MPX 2025-05-17 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2025: ASN Name First-Spoofed Last-Spoofed 152107 2024-02-25 2025-05-28 137409 GSLNETWORKS 2025-05-14 2025-05-14 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=aus&no_block=1 Please send any feedback or suggestions to spoofer-info at caida.org From chris at thesysadmin.au Tue Jun 10 19:17:45 2025 From: chris at thesysadmin.au (Christopher Hawker) Date: Tue, 10 Jun 2025 09:17:45 +0000 Subject: [AusNOG] .au Domain Fraudulent Activity Message-ID: Hello all, If anyone from auDA or Instra Corporation is here, could you please reach out to me off-list? I've got some information regarding a .au domain being used for fraudulent activity... Regards, Christopher Hawker -------------- next part -------------- An HTML attachment was scrubbed... URL: From gray.duncan at gmail.com Mon Jun 16 16:51:02 2025 From: gray.duncan at gmail.com (Duncan Gray) Date: Mon, 16 Jun 2025 16:51:02 +1000 Subject: [AusNOG] AussieBB to www.comcourts.gov.au Message-ID: Hi All, I'm seeing this: >From AARNET LG: traceroute to www.comcourts.gov.au (210.193.178.208), 30 hops max, 60 byte packets 1 irb-400.leaf5.dc.gdpt.qld.internal.aarnet.net.au (182.255.120.77) 0.477 ms 0.450 ms 0.417 ms 2 138.44.129.211 (138.44.129.211) 0.403 ms 138.44.129.209 (138.44.129.209) 0.378 ms 0.358 ms 3 138.44.129.210 (138.44.129.210) 2.433 ms 138.44.129.208 (138.44.129.208) 1.112 ms 138.44.129.210 (138.44.129.210) 2.467 ms 4 et-5-3-0.pe1.brwy.nsw.aarnet.net.au (113.197.15.16) 15.556 ms et-0-3-0.pe1.mcqp.nsw.aarnet.net.au (113.197.15.6) 11.708 ms et-5-3-0.pe1.brwy.nsw.aarnet.net.au (113.197.15.16) 15.577 ms 5 et-5-1-0.pe1.brwy.nsw.aarnet.net.au (113.197.15.5) 13.987 ms et-0-1-0.bdr1.msct.nsw.aarnet.net.au (113.197.15.109) 15.549 ms 15.532 ms 6 et-0-1-0.bdr1.msct.nsw.aarnet.net.au (113.197.15.109) 13.897 ms as17477.nsw.ix.asn.au (218.100.53.53) 16.246 ms et-0-1-0.bdr1.msct.nsw.aarnet.net.au (113.197.15.109) 13.853 ms 7 163.47.94.36 (163.47.94.36) 15.985 ms 15.965 ms as17477.nsw.ix.asn.au (218.100.53.53) 14.823 ms 8 163.47.94.36 (163.47.94.36) 14.314 ms 163.47.94.22 (163.47.94.22) 15.901 ms 163.47.94.36 (163.47.94.36) 14.348 ms 9 163.47.94.22 (163.47.94.22) 14.251 ms 163.47.94.157 (163.47.94.157) 16.702 ms 163.47.94.22 (163.47.94.22) 14.281 ms 10 163.47.94.157 (163.47.94.157) 14.503 ms 14.485 ms * 11 * * * 12 * * * 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * >From AussieBB: Tracing route to www.comcourts.gov.au [210.193.178.208] over a maximum of 30 hops: 1 13 ms 2 ms 1 ms 192.168.86.1 2 14 ms 9 ms 9 ms 100.67.0.1 3 10 ms 11 ms 8 ms gi2-0-3-2501.core1.portmel.aussiebb.net [180.150.0.253] 4 12 ms * * be50-3999.cfl3.461wil.vic.aussiebb.net [180.150.0.254] 5 25 ms 24 ms 23 ms 10.241.13.165 6 26 ms 30 ms 23 ms as17477.sydney.megaport.com [103.26.68.34] 7 25 ms 26 ms 22 ms 163.47.94.36 8 25 ms 24 ms 27 ms 163.47.94.22 9 27 ms 24 ms 24 ms 163.47.94.157 10 29 ms 27 ms 30 ms 169.254.2.177 11 28 ms 28 ms 28 ms 169.254.2.12 12 36 ms 27 ms 32 ms 10.162.255.39 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 * * * Request timed out. 22 * * * Request timed out. 23 * * * Request timed out. 24 * * * Request timed out. 25 * * * Request timed out. 26 * * * Request timed out. 27 * * * Request timed out. 28 * * * Request timed out. 29 * * * Request timed out. 30 * * * Request timed out. Trace complete. Something happening? Kind Regards, Duncan -------------- next part -------------- An HTML attachment was scrubbed... URL: From glenn.satchell at uniq.com.au Mon Jun 16 19:37:44 2025 From: glenn.satchell at uniq.com.au (glenn.satchell at uniq.com.au) Date: Mon, 16 Jun 2025 19:37:44 +1000 Subject: [AusNOG] AussieBB to www.comcourts.gov.au In-Reply-To: References: Message-ID: Hi Duncan, Looks like some firewall blocking the traceroute packets. Tracing TCP packets gets there though: sudo traceroute -T -p 443 www.comcourts.gov.au [1] traceroute to www.comcourts.gov.au (210.193.178.208), 30 hops max, 60 byte packets 1 deewhy-gw.uniq.com.au (10.20.99.254) 0.800 ms 1.073 ms 1.378 ms 2 10.20.22.210 (10.20.22.210) 7.845 ms 7.700 ms 7.962 ms 3 syd-gls-har-crt4-be-200.tpg.com.au (203.221.3.104) 8.565 ms 8.720 ms 9.493 ms 4 syd-apt-ros-crt4-be-30.tpgi.com.au (203.29.135.110) 9.810 ms 9.970 ms 10.527 ms 5 syd-apt-ros-wgw1-be-10.tpgi.com.au (203.29.134.7) 10.065 ms syd-apt-ros-wgw1-be-20.tpgi.com.au (203.29.134.71) 10.242 ms syd-apt-ros-wgw1-be-10.tpgi.com.au (203.29.134.7) 10.700 ms 6 be300.sglebbrdr11.aapt.net.au (203.219.107.198) 11.284 ms 9.816 ms 9.521 ms 7 * * * 8 * * * 9 * * * 10 be2.bdr01.syd11.nsw.vocus.network (114.31.192.107) 8.295 ms 7.416 ms 7.339 ms 11 175-45-108-82.core.vocus.network (175.45.108.82) 6.871 ms 7.032 ms 6.879 ms 12 163.47.94.34 (163.47.94.34) 7.018 ms 5.596 ms 5.582 ms 13 163.47.94.22 (163.47.94.22) 5.685 ms 5.706 ms 6.677 ms 14 163.47.94.157 (163.47.94.157) 6.854 ms 163.47.94.158 (163.47.94.158) 5.920 ms 163.47.94.157 (163.47.94.157) 6.233 ms 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 210.193.178.208 (210.193.178.208) 8.050 ms 6.808 ms 6.499 ms regards, Glenn On 2025-06-16 16:51, Duncan Gray wrote: > Hi All, > > I'm seeing this: > > From AARNET LG: > > traceroute to www.comcourts.gov.au [1] (210.193.178.208), 30 hops max, > 60 byte packets > 1 irb-400.leaf5.dc.gdpt.qld.internal.aarnet.net.au [2] > (182.255.120.77) 0.477 ms 0.450 ms 0.417 ms > 2 138.44.129.211 (138.44.129.211) 0.403 ms 138.44.129.209 > (138.44.129.209) 0.378 ms 0.358 ms > 3 138.44.129.210 (138.44.129.210) 2.433 ms 138.44.129.208 > (138.44.129.208) 1.112 ms 138.44.129.210 (138.44.129.210) 2.467 ms > 4 et-5-3-0.pe1.brwy.nsw.aarnet.net.au [3] (113.197.15.16) 15.556 ms > et-0-3-0.pe1.mcqp.nsw.aarnet.net.au [4] (113.197.15.6) 11.708 ms > et-5-3-0.pe1.brwy.nsw.aarnet.net.au [3] (113.197.15.16) 15.577 ms > 5 et-5-1-0.pe1.brwy.nsw.aarnet.net.au [5] (113.197.15.5) 13.987 ms > et-0-1-0.bdr1.msct.nsw.aarnet.net.au [6] (113.197.15.109) 15.549 ms > 15.532 ms > 6 et-0-1-0.bdr1.msct.nsw.aarnet.net.au [6] (113.197.15.109) 13.897 ms > as17477.nsw.ix.asn.au [7] (218.100.53.53) 16.246 ms > et-0-1-0.bdr1.msct.nsw.aarnet.net.au [6] (113.197.15.109) 13.853 ms > 7 163.47.94.36 (163.47.94.36) 15.985 ms 15.965 ms > as17477.nsw.ix.asn.au [7] (218.100.53.53) 14.823 ms > 8 163.47.94.36 (163.47.94.36) 14.314 ms 163.47.94.22 (163.47.94.22) > 15.901 ms 163.47.94.36 (163.47.94.36) 14.348 ms > 9 163.47.94.22 (163.47.94.22) 14.251 ms 163.47.94.157 (163.47.94.157) > 16.702 ms 163.47.94.22 (163.47.94.22) 14.281 ms > 10 163.47.94.157 (163.47.94.157) 14.503 ms 14.485 ms * > 11 * * * > 12 * * * > 13 * * * > 14 * * * > 15 * * * > 16 * * * > 17 * * * > 18 * * * > 19 * * * > 20 * * * > 21 * * * > 22 * * * > 23 * * * > 24 * * * > 25 * * * > 26 * * * > 27 * * * > 28 * * * > 29 * * * > 30 * * * > > From AussieBB: > > Tracing route to www.comcourts.gov.au [1] [210.193.178.208] > over a maximum of 30 hops: > > 1 13 ms 2 ms 1 ms 192.168.86.1 > 2 14 ms 9 ms 9 ms 100.67.0.1 > 3 10 ms 11 ms 8 ms gi2-0-3-2501.core1.portmel.aussiebb.net > [8] [180.150.0.253] > 4 12 ms * * be50-3999.cfl3.461wil.vic.aussiebb.net > [9] [180.150.0.254] > 5 25 ms 24 ms 23 ms 10.241.13.165 > 6 26 ms 30 ms 23 ms as17477.sydney.megaport.com [10] > [103.26.68.34] > 7 25 ms 26 ms 22 ms 163.47.94.36 > 8 25 ms 24 ms 27 ms 163.47.94.22 > 9 27 ms 24 ms 24 ms 163.47.94.157 > 10 29 ms 27 ms 30 ms 169.254.2.177 > 11 28 ms 28 ms 28 ms 169.254.2.12 > 12 36 ms 27 ms 32 ms 10.162.255.39 > 13 * * * Request timed out. > 14 * * * Request timed out. > 15 * * * Request timed out. > 16 * * * Request timed out. > 17 * * * Request timed out. > 18 * * * Request timed out. > 19 * * * Request timed out. > 20 * * * Request timed out. > 21 * * * Request timed out. > 22 * * * Request timed out. > 23 * * * Request timed out. > 24 * * * Request timed out. > 25 * * * Request timed out. > 26 * * * Request timed out. > 27 * * * Request timed out. > 28 * * * Request timed out. > 29 * * * Request timed out. > 30 * * * Request timed out. > > Trace complete. > > Something happening? > > Kind Regards, > > Duncan > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog Links: ------ [1] http://www.comcourts.gov.au [2] http://irb-400.leaf5.dc.gdpt.qld.internal.aarnet.net.au [3] http://et-5-3-0.pe1.brwy.nsw.aarnet.net.au [4] http://et-0-3-0.pe1.mcqp.nsw.aarnet.net.au [5] http://et-5-1-0.pe1.brwy.nsw.aarnet.net.au [6] http://et-0-1-0.bdr1.msct.nsw.aarnet.net.au [7] http://as17477.nsw.ix.asn.au [8] http://gi2-0-3-2501.core1.portmel.aussiebb.net [9] http://be50-3999.cfl3.461wil.vic.aussiebb.net [10] http://as17477.sydney.megaport.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From gray.duncan at gmail.com Mon Jun 16 19:39:27 2025 From: gray.duncan at gmail.com (Duncan Gray) Date: Mon, 16 Jun 2025 19:39:27 +1000 Subject: [AusNOG] AussieBB to www.comcourts.gov.au In-Reply-To: References: Message-ID: Thanks Glenn! On Mon, 16 Jun 2025 at 19:37, wrote: > Hi Duncan, > > Looks like some firewall blocking the traceroute packets. Tracing TCP > packets gets there though: > > sudo traceroute -T -p 443 www.comcourts.gov.au > traceroute to www.comcourts.gov.au (210.193.178.208), 30 hops max, 60 > byte packets > 1 deewhy-gw.uniq.com.au (10.20.99.254) 0.800 ms 1.073 ms 1.378 ms > 2 10.20.22.210 (10.20.22.210) 7.845 ms 7.700 ms 7.962 ms > 3 syd-gls-har-crt4-be-200.tpg.com.au (203.221.3.104) 8.565 ms 8.720 > ms 9.493 ms > 4 syd-apt-ros-crt4-be-30.tpgi.com.au (203.29.135.110) 9.810 ms 9.970 > ms 10.527 ms > 5 syd-apt-ros-wgw1-be-10.tpgi.com.au (203.29.134.7) 10.065 ms > syd-apt-ros-wgw1-be-20.tpgi.com.au (203.29.134.71) 10.242 ms > syd-apt-ros-wgw1-be-10.tpgi.com.au (203.29.134.7) 10.700 ms > 6 be300.sglebbrdr11.aapt.net.au (203.219.107.198) 11.284 ms 9.816 ms > 9.521 ms > 7 * * * > 8 * * * > 9 * * * > 10 be2.bdr01.syd11.nsw.vocus.network (114.31.192.107) 8.295 ms 7.416 ms > 7.339 ms > 11 175-45-108-82.core.vocus.network (175.45.108.82) 6.871 ms 7.032 ms > 6.879 ms > 12 163.47.94.34 (163.47.94.34) 7.018 ms 5.596 ms 5.582 ms > 13 163.47.94.22 (163.47.94.22) 5.685 ms 5.706 ms 6.677 ms > 14 163.47.94.157 (163.47.94.157) 6.854 ms 163.47.94.158 (163.47.94.158) > 5.920 ms 163.47.94.157 (163.47.94.157) 6.233 ms > 15 * * * > 16 * * * > 17 * * * > 18 * * * > 19 * * * > 20 210.193.178.208 (210.193.178.208) 8.050 ms 6.808 ms 6.499 ms > > regards, > > Glenn > > On 2025-06-16 16:51, Duncan Gray wrote: > > Hi All, > > I'm seeing this: > > From AARNET LG: > > traceroute to www.comcourts.gov.au (210.193.178.208), 30 hops max, 60 byte packets > 1 irb-400.leaf5.dc.gdpt.qld.internal.aarnet.net.au (182.255.120.77) 0.477 ms 0.450 ms 0.417 ms > 2 138.44.129.211 (138.44.129.211) 0.403 ms 138.44.129.209 (138.44.129.209) 0.378 ms 0.358 ms > 3 138.44.129.210 (138.44.129.210) 2.433 ms 138.44.129.208 (138.44.129.208) 1.112 ms 138.44.129.210 (138.44.129.210) 2.467 ms > 4 et-5-3-0.pe1.brwy.nsw.aarnet.net.au (113.197.15.16) 15.556 ms et-0-3-0.pe1.mcqp.nsw.aarnet.net.au (113.197.15.6) 11.708 ms et-5-3-0.pe1.brwy.nsw.aarnet.net.au (113.197.15.16) 15.577 ms > 5 et-5-1-0.pe1.brwy.nsw.aarnet.net.au (113.197.15.5) 13.987 ms et-0-1-0.bdr1.msct.nsw.aarnet.net.au (113.197.15.109) 15.549 ms 15.532 ms > 6 et-0-1-0.bdr1.msct.nsw.aarnet.net.au (113.197.15.109) 13.897 ms as17477.nsw.ix.asn.au (218.100.53.53) 16.246 ms et-0-1-0.bdr1.msct.nsw.aarnet.net.au (113.197.15.109) 13.853 ms > 7 163.47.94.36 (163.47.94.36) 15.985 ms 15.965 ms as17477.nsw.ix.asn.au (218.100.53.53) 14.823 ms > 8 163.47.94.36 (163.47.94.36) 14.314 ms 163.47.94.22 (163.47.94.22) 15.901 ms 163.47.94.36 (163.47.94.36) 14.348 ms > 9 163.47.94.22 (163.47.94.22) 14.251 ms 163.47.94.157 (163.47.94.157) 16.702 ms 163.47.94.22 (163.47.94.22) 14.281 ms > 10 163.47.94.157 (163.47.94.157) 14.503 ms 14.485 ms * > 11 * * * > 12 * * * > 13 * * * > 14 * * * > 15 * * * > 16 * * * > 17 * * * > 18 * * * > 19 * * * > 20 * * * > 21 * * * > 22 * * * > 23 * * * > 24 * * * > 25 * * * > 26 * * * > 27 * * * > 28 * * * > 29 * * * > 30 * * * > > > > From AussieBB: > > Tracing route to www.comcourts.gov.au [210.193.178.208] > over a maximum of 30 hops: > > 1 13 ms 2 ms 1 ms 192.168.86.1 > 2 14 ms 9 ms 9 ms 100.67.0.1 > 3 10 ms 11 ms 8 ms gi2-0-3-2501.core1.portmel.aussiebb.net [180.150.0.253] > 4 12 ms * * be50-3999.cfl3.461wil.vic.aussiebb.net [180.150.0.254] > 5 25 ms 24 ms 23 ms 10.241.13.165 > 6 26 ms 30 ms 23 ms as17477.sydney.megaport.com [103.26.68.34] > 7 25 ms 26 ms 22 ms 163.47.94.36 > 8 25 ms 24 ms 27 ms 163.47.94.22 > 9 27 ms 24 ms 24 ms 163.47.94.157 > 10 29 ms 27 ms 30 ms 169.254.2.177 > 11 28 ms 28 ms 28 ms 169.254.2.12 > 12 36 ms 27 ms 32 ms 10.162.255.39 > 13 * * * Request timed out. > 14 * * * Request timed out. > 15 * * * Request timed out. > 16 * * * Request timed out. > 17 * * * Request timed out. > 18 * * * Request timed out. > 19 * * * Request timed out. > 20 * * * Request timed out. > 21 * * * Request timed out. > 22 * * * Request timed out. > 23 * * * Request timed out. > 24 * * * Request timed out. > 25 * * * Request timed out. > 26 * * * Request timed out. > 27 * * * Request timed out. > 28 * * * Request timed out. > 29 * * * Request timed out. > 30 * * * Request timed out. > > Trace complete. > > > > Something happening? > > > > Kind Regards, > > > > Duncan > > > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: