Connectivity Issues

[Lightawal-area-52]

Lets make the question simple, is there a list of blizzard ip addresses that I can whitelist on my router?

I am having issues with connectivity being randomly being blocked. I am currently running a Ubiquiti Dream Machine Pro with the IDS/IPS system turne don. I am receiving alerts that possible attacks were prevented by the IP address 24.105.34.230 while playing wow. Looking this IP address up on google, I found that it belonged to blizzard. This infomred me that blizzard also has 24.105.0.0 - 24.105.63.255 registered.

I am still researching my logs to see ‘what’ suspicious activity was blocked by my IPS.

[Lightawal-area-52]

Further research from the logs. It appears my UDM is blocking a “ET MALWARE Netwire RAT Checkin” trojan. Since this is a false positive I would still like to know the original question so I can whitelist blizzard’s ip ranges.

source:

IDS Alarms indicating Trojan Checkin

I installed a new router about 2 months ago(Unifi UDM-Pro). Recently I’ve been getting alerts related to Trojan checkins from an IP that appears to be on a blizzard netblock. |Threat Management Alert 1: A Network Trojan was Detected. Signature ET TROJAN Netwire RAT Check-in. From: 24.105.35.225:3724, to: 192.168.0.130:55751, protocol: TCP|4:56 pm|11/11/2020|| ||Threat Management Alert 1: A Network Trojan was Detected. Signature ET TROJAN Netwire RAT Check-in. From: 24.105.37.58:3724, to: 192.…

[Elocin-mugthol]

@Lightawal-area-52

is there a list of blizzard ip addresses that I can whitelist on my router?

No. Divulging their entire IP range makes them more susceptible to DDoS. The IP you’re referencing is the authentication server.