[Lista ArNOG] Bloqueos de playstation

[Carlos M. Martinez]

Usan alguna forma de CGN ?

On 11 May 2017, at 13:58, Juan Pablo Orsi wrote:

> recibo diariamente 2 o 3 mails igual!!!!
>
> 2017-05-11 12:14 GMT-03:00 Diego Weinstein <diegow en netlabs.com.ar>:
>
>> Buen día!
>>
>>
>>
>> Tengo un caso que quizás alguien ya lo resolvió o podemos charlarlo 
>> ya que
>> seguramente les pasa a muchos.
>>
>>
>>
>> Están llegando a varios ISPs mensajes como este:
>>
>>
>>
>> Pursuant to Sony Interactive Entertainment LLC ("SIE") corporate 
>> policy,
>> the below IP addresses were blacklisted …
>>
>>
>>
>> 2017-02-28 14:38 ~ 2017-02-28 15:08 (UTC),  xx.xx.xx.xx, Account 
>> Takeover
>> Attempts
>>
>>
>>
>> It is most likely the attack traffic is directed at one of the 
>> following
>>
>> endpoints:
>>
>>
>>
>> account.sonyentertainmentnetwork.com
>>
>> auth.np.ac.playstation.net
>>
>> auth.api.sonyentertainmentnetwork.com
>>
>> auth.api.np.ac.playstation.net
>>
>>
>>
>> The destination port will be TCP 443.
>>
>>
>>
>> Al ser 443 no es posible  aplicar reglas de análisis layer 7.
>>
>>
>>
>> Alguien está pudiendo detectar este tipo de ataques?
>>
>>
>>
>> Slds,
>>
>>
>>
>> *Diego Weinstein*
>> *Research & Development*
>> *diegow en netlabs.com.ar <diegow en netlabs.com.ar>*
>> Tel: +54 (11) 5199-2266 int 11
>> Cel:+54 9  (11) 6299-9666
>> www.netlabs.com.ar
>>
>> [image: Descripción: C:\Users\diegow\Downloads\logo02.jpg]
>>
>>
>>
>>
>>
>> _______________________________________________
>> Lista mailing list
>> Lista en arnog.com.ar
>> http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista
>>
>>


> _______________________________________________
> Lista mailing list
> Lista en arnog.com.ar
> http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/lista/attachments/20170531/268c30f3/attachment.html>