Press Release

Cara Mengatasi IP VPS di Blacklist oleh PlayStation Network

Apr 6, 2017   //   by Fawzia Aswin Nugraha   //   Blog, Centos, Debian, Hosting, Ubuntu, VPS, Windows  //  No Comments

Cara Mengatasi IP VPS di Blacklist ini perlu diterapkan bagi anda pengguna VPS yang pernah menerima notifikasi IP address(es) were blacklisted from the PlayStation Network. Hal ini mungkin kelihatannya hanya notifikasi biasa, tapi termasuk salah satu jenis penyerangan sehingga hal ini bisa menyebabkan VPS anda tersuspend jika dibiarkan. Hal ini sering terjadi pada VPS SGDO atau DigitalOcean.

Jual VPS Mulai 50rb Perbulan

Cara Mengatasi IP VPS di Blacklist oleh PlayStation NetworkMungkin beberapa pengguna yang belum paham masalah tersebut agak sedikit kaget bercampur bingung, karena anda tidak pernah merasa melakukan aktifitas yang merugikan seperti yang dilaporkan. Ya memang bukan anda yang melakukannya, tetapi secara tidak sadar VPS anda telah digunakan orang lain untuk melakukan aktifitas tersebut. Orang lain menggunakan VPS anda untuk menyerang server milik playstation network, hal ini sering disebut DDOS.

Cara Mengatasi IP VPS di Blacklist oleh PlayStation Network

  1. Analisa Laporan yang dikirim ke email anda
    Silahkan cek email baca dan pahami alasan mengapa vps anda di blacklist, jika anda kurang mengerti bahasa inggris silahkan di translate.
    Biasanya akan menerima informasi seperti berikut ini:

    Hi there,

    We have received the following message regarding one of your Droplets. Please review the information and reply back to us at your earliest convenience.

    Regards,
    Brad
    Trust & Safety Specialist
    DigitalOcean

    ~~~~~~~~~~ Beginning of message ~~~~~~~~~~

    To whom it may concern,

    Pursuant to Sony Interactive Entertainment LLC (“SIE”) corporate policy, the below IP addresses were blacklisted from using our services because SIE detected activity that is abusive to our network services. In our determination, the abusive activity was not related to velocity or volume (many users behind the same IP address, i.e. NAT), but matched the specific patterns of known abuse of our publicly available services. This abuse may be the result of a computer on your network that has been compromised and is participating in a botnet abuse of our services.

    The following table of IP addresses, dates and times should help you correlate the origin of the abusive activity.  The time stamps are approximate from our logs.  The actual timing of the events depend on the signature matched.  It is very likely to have occurred both before, during and following the times listed.

    Approximate Time Range (UTC),      IP Address, Reason
    2017-04-02 18:59 ~ 2017-04-02 19:29 (UTC), 128.199.xxx.xxx, Account Takeover Attempts

    It is most likely the attack traffic is directed at one of the following endpoints:

    account.sonyentertainmentnetwork.com
    auth.np.ac.playstation.net
    auth.api.sonyentertainmentnetwork.com
    auth.api.np.ac.playstation.net

    These endpoints on our network are resolved by Geo DNS, so the IP addresses they resolve to will depend on the originating IP address.

    The destination port will be TCP 443.

    Please take the necessary measures to correct the malicious activity from the above-listed IP addresses as soon as possible to avoid any further disruptions. If we were to remove any of these IP addresses from the blacklist and subsequent abusive activity is detected, the IP address will be promptly blacklisted again.

    We thank you for your prompt attention to this matter. If you require assistance or additional information please contact snei-noc-abuse@am.sony.com and include the IP address in question.

    Thank you=

  2. Reinstall Server
    Server yang telah di hack biasanya kemanan nya sudah tidak sepurna, jika tidak dihapus dan install ulang akan berdampak buruk kedepannya.
  3. Analisa Kembali Laporan & atasi Masalahnya
    Berdasarkan laporan diatas server anda disuspend karena mengakses link berikut secara kasar:
    account.sonyentertainmentnetwork.com
    auth.np.ac.playstation.net
    auth.api.sonyentertainmentnetwork.com
    auth.api.np.ac.playstation.net
    Untuk itu untuk mengatasinya anda tinggal setting VPS supaya tidak bisa mengakses url diatas apalagi merusak. Bisa Memblokir link tersebut dengan iptables agar outgoing traffic tidak dapat terhubung keserver diatas.
    Silahkan Ketikan kode berikut melalui terminal/putty server vps anda:
    iptables -A OUTPUT -d account.sonyentertainmentnetwork.com -j DROP
    iptables -A OUTPUT -d auth.np.ac.playstation.net -j DROP
    iptables -A OUTPUT -d auth.api.sonyentertainmentnetwork.com -j DROP
    iptables -A OUTPUT -d auth.api.np.ac.playstation.net -j DROP
    Setelah menerapkan iptables diatas saya tidak lagi mendapatkan pemberitahuan blacklist serupa.

Demikian tutorial Cara Mengatasi IP VPS di Blacklist oleh PlayStation Network. Jika anda membutuhkan VPS Server Indonesia Singapore dan Amerika silahkan klik disini.

Komentar

comments

Comments are closed.