nanog mailing list archives

Re: Reaching out to Sony NOC, resolving DDoS Issues - Need POC


From: "Octolus Development" <admin () octolus net>
Date: Wed, 08 Jan 2020 22:35:27 +0100

No, that is not why. 

We deployed a brand new IP, and it was banned 24-48 hours after the DDoS Attack was hit. The other IP that was never 
attacked, never got banned. We've tracked down the issue and confirmed it is the DDoS Attack coming from Akamai and 
Imperva's IP's that are banning us from their network somehow.

Sony are currently "looking into it" but they do not seem to care much. I am a customer of Sony, I own PlayStation 
consoles and I am not able to access their service. They tell me to change my IP instead of solving the actual problem 
with this exploit.
On 08.01.2020 22:29:12, Töma Gavrichenkov <ximaera () gmail com> wrote:
Peace,

Hey, your website says you're the developer of OctoVPN which is a VPN solution.

*This* might be effectively the reason of blocking, not a DDoS. Gaming and streaming services typically discourage VPN 
traffic because a) VPNs help to circumvent regional restrictions, b) miscreants use VPNs to hide while breaking into 
systems, c) other reasons.

Imperva is a Web app firewall solution much more than it is a DDoS protection device after all.

--
Töma


On Wed, Jan 8, 2020, 11:56 PM Octolus Development <admin () octolus net [mailto:admin () octolus net]> wrote:

The error it displays on both Sony, and Imperva (and whatever websites who uses their protection). So this problem is 
not with Sony, but rather Imperva blocking IP's wildly.

The IP's are not blocks, it's a single IP and the block/blacklist lifts after 7 days.


Error that appears on those websites, including imperva themself:

This page can't be displayed. Contact support for additional information.
The incident ID is: N/A.

Current thread: