Wednesday, January 11, 2017

SiteLock TrueShield is Incapsula WAF

SiteLock recently pushed an article titled:


SiteLock TrueShield Updates here: https://blog.sitelock.com/2016/12/sitelock-trueshield-updates/

In it, they tell us to update our network to accomodate SiteLock's new ranges:

107.154.129.0/24
107.154.192.0/24
107.154.193.0/24
107.154.194.0/24
107.154.195.0/24
107.154.196.0/24
Decided to check the WHOIS of these ranges, look what we found:

 OrgName:        Incapsula Inc
OrgId:          INCAP-5
Address:        3400 Bridge Parkway, Suite 200
City:           Redwood Shores
StateProv:      CA
PostalCode:     94065
Country:        US
RegDate:        2010-09-14
Updated:        2016-03-15
Ref:            https://whois.arin.net/rest/org/INCAP-5


OrgNOCHandle: INCAP2-ARIN
OrgNOCName:   Incapsula Operations
OrgNOCPhone:  +1-866-250-7659
OrgNOCEmail:  ip@incapsula.com
OrgNOCRef:    https://whois.arin.net/rest/poc/INCAP2-ARIN

OrgTechHandle: BRONS9-ARIN
OrgTechName:   Bronstein, Tomer
OrgTechPhone:  +1-866-250-7659
OrgTechEmail:  tomer@incapsula.com
OrgTechRef:    https://whois.arin.net/rest/poc/BRONS9-ARIN

OrgTechHandle: INCAP2-ARIN
OrgTechName:   Incapsula Operations
OrgTechPhone:  +1-866-250-7659
OrgTechEmail:  ip@incapsula.com
OrgTechRef:    https://whois.arin.net/rest/poc/INCAP2-ARIN

OrgAbuseHandle: INCAP1-ARIN
OrgAbuseName:   Incapsula AbuseDesk
OrgAbusePhone:  +1-866-250-7659
OrgAbuseEmail:  abuse@incapsula.com
OrgAbuseRef:    https://whois.arin.net/rest/poc/INCAP1-ARIN
This reaffirms what I previously wrote about the GoDaddy partnership with Incapsula, I mean SiteLock.

To be sure, I checked their "complete" range as provided in their article:

199.83.128.0/21
198.143.32.0/19
149.126.72.0/21
103.28.248.0/22
45.64.64.0/22
185.11.124.0/22 
192.230.64.0/18
107.154.0.0/16
They are all Incapsula ranges.. :(... 

It seems that SiteLock doesn't do anything for themselves. They are an empty marketing and sales shell pushing technology that other firms have built. With that in mind, you're probably better off going to Incapsula directly. Might get better service. : / unless you like to be taken: https://sitelock.pissedconsumer.com/sitelock-uses-scare-tactics-to-sell-their-services-20170109988389.html

What a shame.