Skynet Skynet blocking Call of Duty (Warzone 3)

[BeachGuy]

Not sure how it happened but as of yesterday couldn't log into Call of Duty - Warzone. Tried everything and finally narrowed it down to Skynet. Why is Skynet blocking COD and how do I whitelist it? Can the devs permanantly whitelist it please. I am also using Diversion with "standard" list.

 

[dave14305]

See the “Help!” section of this post:

Skynet - Skynet - Router Firewall & Security Enhancements

For support requests and questions please use the Github Issue Tracker where this script is actively maintained Skynet - Router Firewall & Security Enhancements Elevate your home network security with Skynet, a robust firewall and security tool meticulously crafted for ASUS routers running...

www.snbforums.com

Skynet doesn’t decide what to block. The lists it uses are maintained by third parties.

 

[BeachGuy]

Yes that worked, thanks. I whitelisted it in my firewall. How do I let the list owner know to whitelist this site?

DST=185.34.107.128 LEN=31 TOS=0x00 PREC=01
Associated Domain(s) - [stun.us.demonware.net stun.eu.demonware.net]

 

[Tech9]

How do I let the list owner know

Most likely already reported to the maintainer. SkyNet is using popular block lists.

 

[dave14305]

How do I let the list owner know to whitelist this site?

It appears to come from greensnow.

Verification of 185.34.107.128 - GreenSnow

Verification of 185.34.107.128 - GreenSnow Blocklist

greensnow.co

 

[BeachGuy]

It appears to come from greensnow.

Verification of 185.34.107.128 - GreenSnow

Verification of 185.34.107.128 - GreenSnow Blocklist

greensnow.co

Thanks. I filled out their form to delist

 

[govorlivko]

Hi! I was troubleshooting the same situation today. I guess my question is how safe is to whitelist the IP? How common is for the listing to be a false positive or the reports were due to geniune attacks from the IP (due to temp subnet hijacking or actual exploit on a Deamonware server)?

 

[dave14305]

How common is for the listing to be a false positive or the reports were due to geniune attacks from the IP (due to temp subnet hijacking or actual exploit on a Deamonware server)?

It looks like greensnow has now unblocked the IP, probably due to BeachGuy's report. Whether it should be whitelisted or not is debatable, if the original "attacks" detected were valid. In the age of shared hosting services, it may not be a problem with the gaming company, but someone else using their hosting provider.

 

[BeachGuy]

It looks like greensnow has now unblocked the IP, probably due to BeachGuy's report. Whether it should be whitelisted or not is debatable, if the original "attacks" detected were valid. In the age of shared hosting services, it may not be a problem with the gaming company, but someone else using their hosting provider.

They did unblock it but still report a lot of attacks. Not sure how all of this works, just know Call of Duty did not work with it blocked...

List of attacks for this IP: 185.34.107.128​

Hours2025-04-18 10:08:40
Attackport-flood
Serverhybrid4297.fr.ns.planethoster.net
Hours2025-04-18 10:08:38
Attackport-flood
Serverhari.fr.planethoster.net
Hours2025-04-18 10:08:25
Attackport-flood
Serverhybrid2240.fr.ns.planethoster.net
Hours2025-04-18 10:08:16
Attackport-flood
Serverhybrid2834.fr.ns.planethoster.net
Hours2025-04-18 10:08:10
Attackport-flood
Serverextrafeatures.fr.planethoster.net
Hours2024-08-15 22:29:40
Attackport-flood
Serverhari.fr.planethoster.net
Hours2024-08-15 22:29:06
Attackport-flood
Serverhybrid1077.fr.ns.planethoster.net
Hours2024-08-15 22:29:00
Attackport-flood
Serverhybrid1141.ca.ns.planethoster.net
Hours2021-05-09 07:35:28
AttackTCP_IN
Serverhybrid1849.fr.ns.planethoster.net
Hours2021-05-09 07:34:57
AttackTCP_IN

 

[govorlivko]

There are more abuse reports to be found here - https://www.abuseipdb.com/check/185.34.107.128. I do not believe it's hosted infra as the /24 subnet (part of a /22) is maintained by Demonware as assigned PA: https://apps.db.ripe.net/db-web-ui/...ag=true&searchtext=185.34.107.128&source=RIPE.

I will drop a mail to the ther MNT NOC email, let's see where that goes.

 

[Donga120]

I had this the other day. Was also Skynet as could not connect to online services.