Comment by simonw
17 hours ago
If it was the Australian Medicare Statistics Reporting Service on June 18th it may have been part of this incident: https://collusion.wiki/ - the bulk of that coordinated activity was between 16th and 21st of June, and we know they were hitting UK government data sites.
I had a dig around in the data that they published on that site and found references to www.aihw.gov.au and viz.aihw.gov.au and vizprod.aihw.gov.au
https://collusion.wiki/explorer/label/ResearchHelperY
I think you're right. A bunch of aihw.gov.au references from this ResearchHelperY
Reporting says it wrote stuff to the server too, wondering what that is about.
The writes where to get past cloudflare.
ABC have picked up this story now at [1], but ABC are treating it as two separate events, possibly directly connected though:
1. Probing of AIHW's website to try and obtain PBS statistics, as collusion.wiki findings show. The collusion.wiki findings don't indicate anything other than intentionally public data was obtained. Bots appear to be trying to get around Cloudflare geo-blocking implemented on AIHW's public website. I can't think of a reason why geo-blocking may be deemed necessary on that website though?
2. Probing of an outdated Medicare statistics reporting website. (I guess at [2] this could be the recently shut down https://www.abc.net.au/news/2025-03-19/australia-defends-pbs...