Hacker News Reader

Viasat has likely been sending abuse reports to DigitalOcean, and one too many abuse reports was ignored, resulting in Viasat nullrouting DO's IPs over this continued malicious traffic.

View on HN

Yeah, that's basically what their NOC told me, although they didn't really have much of an explanation into why they were nullrouting /24 subnets when Digitalocean typically allocates single addresses.

Wouldn't malware simply spin up a new VM with a new IP to trivially get around single IP blocks? Wouldn't such blocks also put a lot of strain on the NOC to maintain.

Well since they seem to just block entire /24 subnets it does seem to have resulted in a large portion of Digitalocean's network being unusable from Viasat. I guess they think it's worth it to maintain those blacklists.

Its not hard for them to maintain blacklists, especially since they do not care about network quality.

If I were in your position, I would set up a proxy that appears as http traffic (so you fly under their radar).

Reply on news.ycombinator.com