[WXC/VFX] What is happening with World Exchange

Forums › One New Zealand (including Vodafone, WxC, Farmside) › [WXC/VFX] What is happening with World Exchange

1 | 2 | 3

Hammered
8344 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#552273 1-Dec-2011 14:28

Weird. VFX still down here. Getting voice message notifications displaying on the phone though.

Stu

Hammered
8344 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#552278 1-Dec-2011 14:38

And like magic it kicks back into life!

CYaBro

4586 posts

Uber Geek

ID Verified

Trusted

#552279 1-Dec-2011 14:45

We are having random issues with our two VFX lines as well.
Calls get diverted to my cell when our Linksys unit is unavailable and I have been getting calls randomly diverting to my cell even though I can still make calls out on the VFX lines.

Opinions are my own and not the views of my employer.

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#552283 1-Dec-2011 14:59

Actually an issue is being looked at , some VFX users are having connection issues and we are looking to resolve at present.

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

Cameronn

334 posts

Ultimate Geek

Trusted

WorldxChange

#552284 1-Dec-2011 15:00

We've escalated an issue with VFX registrations to the Operations team, they're currently looking at the problem.

It's all happening today, apologies for any inconvenience.

aw

286 posts

Ultimate Geek

#552303 1-Dec-2011 15:44

My home office internet connection has been up and down, but mostly down, for at least the past hour and a half or so (Xnet Clothed ADSL, Mt Albert). Could this be related?

I'm offsite, but can't remotely contact anything at home which is how I found out.

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#552305 1-Dec-2011 15:47

No shouldn't be, not aware of anything the issue at present is affecting some TCP VFX customers only

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

aw

286 posts

Ultimate Geek

#552317 1-Dec-2011 16:20

Hm, whatever it was, it came back up around 4:15-4:20. My e-mail is working again (server is at home)

Edit: Spoke too soon, it's down again.

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#552319 1-Dec-2011 16:21

sorry cant take responsibility for that , the VFX issue is fixed btw

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

aw

286 posts

Ultimate Geek

#552442 1-Dec-2011 22:50

Ah I found my (unrelated to VFX) problem. fail2ban failed to start on my Asterisk box due to an apparent crash leaving behind a stale pipe file, and I was being brute force attacked. Still an (thousands of UDP packets per second, now with no reply going back with fail2ban working again). Offending IP is 15.0.0.154.

These people *$^&*^$^ing annoy me.

edit: interesting. Apparently the offending IP address belongs to HP! Message dispatched to abuse (at) hp.com.

edit 2 at 11:29pm: Impresses that someone from HP has already got back to me and is asking for more info. Duly replied.

aw

286 posts

Ultimate Geek

#552455 2-Dec-2011 00:18

Ugh. The rep at HP that replied is now challenging me on how NAT works instead of stopping the attack. Saying that my packet scan should show the origin IP as my firewall, not as the actual origin IP address above. Pretty sure he's wrong there. Not that my internal IP address structure actually matters here.

He's in Austin, Texas, and now it's past 5pm there (midnight here) I'm getting no replies. That or I annoyed him.

Anyway, could this mean that HP has been hacked?

The attack is still continuing, despite fail2ban blocking the IP at 10:46pm.

Oldhat

180 posts

Master Geek

Lifetime subscriber

#552473 2-Dec-2011 01:10

aw: Ugh. The rep at HP that replied is now challenging me on how NAT works instead of stopping the attack. Saying that my packet scan should show the origin IP as my firewall, not as the actual origin IP address above. Pretty sure he's wrong there. Not that my internal IP address structure actually matters here.

He's in Austin, Texas, and now it's past 5pm there (midnight here) I'm getting no replies. That or I annoyed him.

Anyway, could this mean that HP has been hacked?

The attack is still continuing, despite fail2ban blocking the IP at 10:46pm.

As it is UDP packets it may not be originating from that IP as they don't require acknowledgements.

aw

286 posts

Ultimate Geek

#552483 2-Dec-2011 07:10

Still, the guy is confusing Destination NAT with Source NAT, and it's not helping. And he's done nothing else while I argue how NAT works with him so far. Despite me having blocked that IP, the attack continues and has cost me $16 in data so far.

It's almost like it's intended to be a DoS attack rather than an attempt at a break-in. The "Contact" SIP header coming in is sip:123@1.1.1.1, which is not valid - how would the attacker know if he's been successful if the source IP and the Contact IP are both spoofed?

Oh sorry for changing the topic (although the original topic name was rather generic!).

Maverick, by any chance can you block that IP? The attack is still ongoing!

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#552492 2-Dec-2011 08:29

That IP has been black holed but since it's UDP if it's still going on then it wont be be coming from that address...

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

aw

286 posts

Ultimate Geek

#552496 2-Dec-2011 08:35

Yes that's done it. Thank you!!!

1 | 2 | 3