- INNOG - mailman.apnic.net

by Swapneel Patnekar

Hello! There has been a huge uptick of the Mozi botnet[1] from Indian networks(major chunk from a single network) in the past one week. Based on prior information about Mozi and what I have seen at first glance, it appears to have primarily targeted CPE's with default login/weak credentials, but there could be more. Some of the affected CPE's along with mitigation outlined by Netlab 360 [2] [1]: https://www.darkreading.com/iot/new-malware-family-assembles-iot-botnet--... [2]: https://blog.netlab.360.com/mozi-another-botnet-using-dht/ -- Best, Swapneel https://brainattic.in/blog

5 days, 22 hours

1
1
0 0

September 2020: Digital Policy Updates curated by CCAOI

by Amrita Choudhury

Hi For those who may be interested, sharing the CCAOI September 2020 Newsletter having curated news on Digital Policy developments of the month from the Indian perspective. The newsletter can be viewed from this link <https://www.ccaoi.in/UI/links/fwnewsletter/CCAOI%20Newsletter%20Sept%202020 .pdf> . Regards, Amrita Choudhury CCAOI

1 week, 2 days

1
0
0 0

Spoofer Report for INNOG for Sep 2020

by CAIDA Spoofer Project

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within ind. Inferred improvements during Sep 2020: none inferred Source Address Validation issues inferred during Sep 2020: ASN Name First-Spoofed Last-Spoofed 24309 CABLELITE 2016-11-01 2020-09-28 55836 RELIANCEJIO-IN 2017-03-03 2020-09-30 132976 KINGSBROADBAND 2018-09-17 2020-09-05 24186 RAILTEL 2018-12-08 2020-09-26 17488 HATHWAY-NET-AP 2019-12-19 2020-09-28 134026 ULTRANET 2020-08-27 2020-09-06 133296 WEBWERKS 2020-09-02 2020-09-02 133232 SAMPARKESTATES 2020-09-15 2020-09-15 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=ind&no_block=1 Source Address Validation issues inferred during Sep 2020 using open resolver tests: ASN Name Last-Detected 138787 SPEEDKNG 2020-09-25 133647 ELXIREDATA 2020-09-25 134177 RBPL-IN 2020-09-24 24560 AIRTELBROADBAND 2020-09-24 136720 AIRTECHZONE 2020-09-24 136710 SRUSHTIB 2020-09-24 132562 ZEROWORRIES 2020-09-24 138756 RAMYAA 2020-09-19 139195 SEANSMEDIAPVTLTD 2020-09-19 137678 PDNPL 2020-09-19 9829 BSNL-NIB 2020-09-18 134331 SLSPL 2020-09-17 45694 VOL 2020-09-15 139529 FASTTELE 2020-09-14 137117 AIRWAVES 2020-09-14 134016 VELOCITY 2020-09-12 17754 EXCELL 2020-09-12 132941 IRIISNET 2020-09-12 132166 RIDA 2020-09-12 132116 ANINETWORK-IN 2020-09-11 136377 Linkwave 2020-09-11 140174 2020-09-11 134319 ELYZIUM 2020-09-11 137681 ALIENDNS 2020-09-10 140171 2020-09-07 138287 UZAINA11 2020-09-07 139504 MINETCOM 2020-09-07 135762 CLEARBM 2020-09-07 137633 GIGALINE 2020-09-07 134013 MASSSOHN 2020-09-07 45117 INPL-IN-AP 2020-09-05 134294 RPWORLDTELECOM 2020-09-05 55824 NKN-CORE-NW 2020-09-04 135700 NRDATASERVICE 2020-09-04 58405 UNITEDTELECOMS-IN 2020-09-03 133275 Gigantic 2020-09-03 Further information for these tests is available at: https://spoofer.caida.org/ornog.php?country_include=ind Please send any feedback or suggestions to spoofer-info(a)caida.org

2 weeks

1
0
0 0

Vodafone ILL Packet Drop issue

by Mitesh Patel

Hello Everyone Anyone facing issues with Vodafone network today ? -- Mitesh Patel Dishawaves Infonet Pvt. Ltd. Cell - 94266 55866 |HelpDesk - 99042 56666 302, Matrix, Near Divyabhaskar Press, Corporate Road, Prahalad nagar, Ahmedabad - 380015 Please consider the environment before printing this e-mail.

2 weeks

3
3
0 0

Invitation Mail - Webinar on MANRS Introduction || October 8, 2020

by Md. Zobair Khan

Dear Sir or Madam, Hope you are keeping safe. It is my pleasure to invite you to the upcoming Webinar on *MANRS Introduction *on October 8, 2020 (Thursday). The details of the webinar as below: *Speakers:** Md. Zobair Khan (MANRS Fellow) & Mr. Anirban Datta (MANRS Ambassador)* *Date** : October 8, 2020* *Time** : 12.00 PM (UTC+6)* *Duration** : 1 hour* *Registration Link:* https://isoc.zoom.us/webinar/register/WN_G4z-1OBSTQqqDwiEA86yXw *Key Discussion points of the session**:* - Routing Security - MANRS Approach - RPKI It will be an honor hosting you at the virtual event hence requesting your gracious presence. Do let me know in case you have any query. I will be happy to address them. Look forward to your presence. BR Md. Zobair Khan MANRS Fellow

2 weeks, 5 days

1
0
0 0

Fwd: [pacnog] Lawful Intercept with OpenLI

by Srinivas (Sunny) Chendi

FYI -Sunny -------- Forwarded Message -------- Subject: [pacnog] Lawful Intercept with OpenLI Date: Tue, 29 Sep 2020 10:49:28 +1300 From: Shane Alcock <shane.alcock(a)waikato.ac.nz> To: pacnog(a)pacnog.org Hi all, My name is Shane Alcock and I am a research programmer with the WAND Network Research Group at the University of Waikato in New Zealand. Over the past three years, we have been working with network operators in New Zealand to develop an open-source software implementation of the ETSI standards for Lawful Interception, giving operators a viable low-cost alternative for meeting their government-mandated lawful interception obligations. This project, OpenLI, has been very successful and there are now a number of operators in New Zealand who are using our system in production. You can read more about the OpenLI project at https://blog.apnic.net/2020/03/31/open-source-solution-enables-operators-... <https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fblog.ap...> Recently, we were awarded funding from ISIF Asia to perform any work necessary to ensure that OpenLI is a suitable option for operators in other countries within the Asia Pacific region. This work will require us to collaborate with operators, with the aim of delivering successful OpenLI deployments that satisfy the Law Enforcement Agencies (LEAs) in the countries where those operators are running their networks. The funding will allow us to dedicate developer resources to assist with those deployments: either by writing code to add new features, training operators in the use of OpenLI or providing support and troubleshooting assistance. If there are any operators on this list who are interested in OpenLI and would like our assistance to attempt an OpenLI deployment on your network, please contact me off-list for more information. Thanks, Shane

3 weeks, 3 days

1
0
0 0

RPKI ROA updates, workshop and more!

by Anurag Bhatia

Hello everyone, As I mentioned previously - We have been tracking RPKI ROA deployment across Asia with a focus on India. In around two months Indian signed prefixes have jumped from 12% to 25%. Today was a major milestone with 25% because now we are 1% above the global average. :) [image: Screenshot 2020-09-17 at 5.25.32 AM.png] Latest graph: https://graphs.muc.anuragbhatia.com/d/DPIj_47Mk/rpki?viewPanel=10&orgId=1... [image: Screenshot 2020-09-17 at 5.27.03 AM.png] https://graphs.muc.anuragbhatia.com/d/DPIj_47Mk/rpki?orgId=1&from=1594551... On absolute number 10590 out of 43173 Indian prefixes have a valid covering ROA. 10,590 is highest in Asia (2nd highest is Taiwan at around 7000) as an absolute number but it is just 25% of the table and hence we need to put more effort in getting the Indian table signed with a valid ROA. Workshop to promote RPKI As time and discussions proceeded many of like-minded folks came together to further help with the push for ROA. Some of us volunteers are working closely with IRINN, APNIC and ISPAI to help and have planned for a monthly 90 min workshop with ISPs covering RPKI in detail. Please consider joining the workshop to learn about RPKI, understand ROAs as well as understand how to put RPKI validator in your network. The first workshop is scheduled for 25th Sept 2020 and you can fill the form available here to attend that online - https://forms.gle/iMtd7oFCwJnwt6xp9 Thanks. -- Anurag Bhatia anuragbhatia.com

4 weeks

1
1
0 0

Re: TCL network issue

by Parthesh Kumar

Yes still getting packet drop issue. Regards, Parthesh Kumar Sr. Manager - Technical | Fusionnet Web Services Pvt. Ltd. Level-2, ATS Tower, Plot No. 16, Sector 135, Noida – 201301, U.P, India. M: +91 8588877976 T: +91 120 5146006 W: www.fusionnet.in<http://www.fusionnet.in/> From: Kiran Kumar Boddeda <me(a)bbkk.in> Sent: 18 September 2020 17:23 To: Parthesh Kumar <parthesh.kumar(a)fusionnet.in> Subject: Re: [INNOG] TCL network issue Packet drops are being observed on few IP Still digging , do you have any such things ? ---- On Fri, 18 Sep 2020 17:16:33 +0530 parthesh.kumar(a)fusionnet.in<mailto:parthesh.kumar@fusionnet.in> wrote ---- Hello, Anyone facing issues with TCL network today ? Regards, Parthesh Kumar _______________________________________________ INNOG mailing list -- innog(a)innog.net<mailto:innog@innog.net> To unsubscribe send an email to innog-leave(a)innog.net<mailto:innog-leave@innog.net>

1 month

2
1
0 0

Re: TCL network issue

by Parthesh Kumar

As per TCL, Service is affected due to ongoing network outage. In which IP you are getting issues ? Regards, Parthesh Kumar From: Kiran Kumar Boddeda <me(a)bbkk.in> Sent: 18 September 2020 17:25 To: Parthesh Kumar <parthesh.kumar(a)fusionnet.in> Subject: Re: [INNOG] Re: TCL network issue Towards bombay region ? ---- On Fri, 18 Sep 2020 17:24:02 +0530 parthesh.kumar(a)fusionnet.in<mailto:parthesh.kumar@fusionnet.in> wrote ---- Yes still getting packet drop issue. Regards, Parthesh Kumar Sr. Manager - Technical | Fusionnet Web Services Pvt. Ltd. Level-2, ATS Tower, Plot No. 16, Sector 135, Noida – 201301, U.P, India. M: +91 8588877976 T: +91 120 5146006 W: www.fusionnet.in<http://www.fusionnet.in/> From: Kiran Kumar Boddeda <me(a)bbkk.in<mailto:me@bbkk.in>> Sent: 18 September 2020 17:23 To: Parthesh Kumar <parthesh.kumar(a)fusionnet.in<mailto:parthesh.kumar@fusionnet.in>> Subject: Re: [INNOG] TCL network issue Packet drops are being observed on few IP Still digging , do you have any such things ? ---- On Fri, 18 Sep 2020 17:16:33 +0530 parthesh.kumar(a)fusionnet.in<mailto:parthesh.kumar@fusionnet.in> wrote ---- Hello, Anyone facing issues with TCL network today ? Regards, Parthesh Kumar _______________________________________________ INNOG mailing list -- innog(a)innog.net<mailto:innog@innog.net> To unsubscribe send an email to innog-leave(a)innog.net<mailto:innog-leave@innog.net> _______________________________________________ INNOG mailing list -- innog(a)innog.net<mailto:innog@innog.net> To unsubscribe send an email to innog-leave(a)innog.net<mailto:innog-leave@innog.net>

1 month

1
0
0 0

TCL network issue

by Parthesh Kumar

Hello, Anyone facing issues with TCL network today ? Regards, Parthesh Kumar

1 month

1
0
0 0

2020

2019

INNOG ----- 2020 ----- October 2020 September 2020 August 2020 July 2020 June 2020 May 2020 April 2020 March 2020 February 2020 January 2020 ----- 2019 ----- December 2019 November 2019 October 2019 September 2019 August 2019 July 2019

INNOG