My internet provider keeps sending me abuse notifications forwarded from Sony that says something like:
Pursuant to Sony Network Entertainment International LLC (SNEI) corporate policy, the below IP address was blacklisted from using our services because SNEI detected activity that is abusive to our network services. In our determination, the abusive activity was not related to velocity or volume, but matched the specific patterns of known abuse of our publicly available services. This abuse may be the result of a computer on your network that has been compromised and is participating in a botnet abuse of our services.It is most likely the attack traffic is directed at one of the following endpoints:account. sonyentertainmentnetwork. comauth.np.ac.playstation. netauth.api. sonyentertainmentnetwork. comauth.api.np.ac.playstation. netThe destination port will be TCP 443
I've run every virus scan known to mankind and still I keep getting these regularly. I'd like to get notified when these endpoints are accessed from my computer but I can't figure out how to do that. I've used the info in this entry to block these locations in windows firewall and I've tested it from my browser and it does block them. But it doesn't seem to log it the fact that it blocked it (at least not in Event Viewer or in the firewall that I can see). Nor does it pop up a onscreen notification (my browser just says the site is blocked). I'd really like to be notified so I can identify which process is doing this and get rid of it.
Any ideas?