IP Blocking: Multiple False Positives (37.221.163.254, 93.115.94.93, 93.115.94.94)

[PimDeWitte]

Dear Malwarebytes Staff,

 

I work for a company that operates a network of game servers, and a few of our Romanian game servers have been blocked by Malwarebytes. Please note that these services are not websites. For security reasons I'm not posting the full port range in this public topic, but I will happily provide them in a private message if necessary.

 

The IP addresses that are blocked are 37.221.163.254, 93.115.94.93, 93.115.94.94.

 

Our games have security certificates that have been issued to:

 

Soulsplit IT, Inc
Sunny Isles Beach, FL, USA

 

You may view our games on http://soulsplit.com/play/

 

I hope you are able to remove the block as soon as possible, because we do not serve any malicious content. We are currently losing out on a lot of players because of this block. 

 

 

If any further information is required, please reply to this or email me at p.dwitte@soulsplit.com

 

Thank you in advance,

 

Pim

[PimDeWitte]

For your convenience I have posted a virustotal analysis of the client below.

 

Windows Downloadable (.exe):

 

https://www.virustotal.com/en-gb/file/9871ae6c5c1099a763f28ef19c917472eb41e0a4dd5d8e69f813fef4772ca650/analysis/

 

Web-Applet & Mac Downloadable (.jar):

 

https://www.virustotal.com/en-gb/file/b28ec219d15aaa40f306074fdf3dc9032c2bd3256b846e43bf150c59ff8bd469/analysis/

 

Thank you!

[MysteryFCM]

The block will be removed on the next update.

 

I'd strongly advise switching to other providers however.

[PimDeWitte]

Hi Steven,

 

Thanks for the message. Is there any more information you could provide regarding why you recommend me to switch? What kind of information do you have about the host?

 

Thank you,

 

Pim

[PimDeWitte]

Hello Steven,

 

Thank you for removing the block in the upcoming update after reading my thread at https://forums.malwarebytes.org/index.php?showtopic=143772.%C2'>

 

In order to fix the issue short-term, my host has provided me with my own IP range that stands alone from the rest of the services. 

 

I can't just switch hosts, and they have been doing really good. We need a European network, and this is the only network that provides DDoS protection on the level that we need it. The gaming world is an extremely competitive one. 

 

The IP range that they have given us is 5.254.118.48/29

 

If you could whitelist that on the next update as well, that would be great. 

 

Thanks