IPs To Add To Your Lists

[Me Here]

After doing some research we have come up with some useful additions to your blocked IP lists for your firewall or Peerguardian...


On Systems -                                 38.113.214.0 - 38.113.214.255
Beyond The Network America -        63.216.0.0 - 63.223.255.255
Fuzion Colo -                                  72.35.224.0 - 72.35.239.255
Globix Corporation -                       204.193.128.0 - 204.193.159.255
Globix Corporation -                       209.10.143.0 - 209.10.143.255
Globix Corporation -                       209.11.134.0 - 209.11.134.255
Globix Corporation -                       209.195.58.0 - 209.195.58.255
Globix SpA. Country Italy -             212.71.224.0 - 212.71.255.255
X Works aka: Globix Corporation -  213.219.9.192 - 213.219.9.255

As you can see the Globix Corporation is listed heavily on this list, with some research done for us, we are seeing this is one of the major players in the flooding of WinMX.

Covad:                   67.101.77.191-67.101.77.191
Covad:                   66.166.198.203-66.166.198.203
Covad:                   68.165.91.118-68.165.91.118
Dsl.net:                  64.248.57.132-64.248.57.132
Sympatico:             70.51.124.42-70.51.124.42
btcentralplus:          81.151.195.148-81.151.195.148                      
btcentralplus:          81.156.180.20-81.156.180.20
btcentralplus:          81.158.253.172-81.158.253.172
btcentralplus:          86.134.204.87-86.134.204.87

So lets all get these added  to your firewalls and get them blocked from our network

Happy Blocking ....


Thank P2P for pointing this out to us..  

[p2p rules]

Can i add them to Sygate PFW even thought my IP address always changes when i connect online?

[Me Here]

Yes P2P you can easily add these to your sygate firewall. having a dynamic or staic IP shouldnt effect you setting these in your advanced rultes to block them...

I will get some thing whipped up to show how its done for anyone that needs to know on Sygate..

[p2p]

Thank Me Here, I'll add 'em to the advanced rules within Sygate.If i can figure it out.
I came across this at CMX.

This may be the begining of the end for some of us p2p users;

http://www.msnbc.msn.com/id/8375955/

This aint' good news at all.  

[Me Here]

If you have a look at this link we have the actual court decision link in .pdf, if you want to have a look at it... we like many p2p users have our legal eagles having a look at this to see what it means for us personally on WinMX.  From the looks of things not much, just that a jury will decide, and personally .. I bet some of them are p2p users..

https://forum.winmxworld.com/index.php?topic=194

I do have one other thing to say about this..

When one door closes another always opens..

I have been hearing that p2p and WinMX are dead for months from certain forums.. as usual I havent heard no fat lady singing.. will let you know..

[p2p rules]

thank you Me Here for the info. I save the grokster case PDF document to my PC to read later.

i tried to add those IP addresess ranges in the advanced rules in Sygate PFW,but i did it wrong i think ,cos it blocked this site when i tried to post a reply to this thread.
I added them like this for a example:Performance Systems International Inc - 38.0.0.0 - 38.255.255.255 ..I set it to block all from those IP addresses ranges.i had to remove them all cos it wouldn't yet me connect to WMW or to my homepage.  

[Me Here]

Okay folks the original post above has been edited to more specific ranges of ip. so be sure to update your lists your using with your firewall, peerguradian or Bender's Bye Bye Bad IP..

[GhostShip]

Cheers Me Here, nice to know your keeping your eye on these criminals  

[p2p rules]

Yeah i agree Cheers me here!!

Ok so should I only add those IP addresses only to the SG PFW Advanced Rules when I'm using WinMX & when I want to visit this site or my homepage just allow those ranges to allow traffic,instead of blocking them?

[Me Here]

Hey P2P,
If you use the numbers as they are shown now you should be just fine blocking them completely in any firewall, or Bender's Bye Bye Bad Ip, Peerguardian already has most of them also...

If anyone would like to add any here let me know and I will look them over ..

thanks

[p2p]

TY Me, but i don't think i'm setting it up right cos it's still blocking traffic.

[p2p]

I think i figured out what i did wrong..I had it set at block all host, instead of the IP ranges.

[GhostShip]

Just to let you know folks this new one should be added to your list,  

Airowireless.com
ISP Globix Corporation  
Country United States  
NetRange: 209.195.58.0 - 209.195.58.255

This is good news as it costs them money to change servers  

[ozental]

I'm a novice at this but can you explain what these sites are being 'accussed' of? The reason I ask is that 207.226.22.176 ("Beyond The Network America") has been hitting my site hard with loads of visitor accounts.

[GhostShip]

They are not actually sites Ozental just IP addresses that have been logged many times conducting attacks against the WPN Network.

The addresses listed on the list are those used by the companies they are paid by the recording industries to flood p2p networks with fake files listsings and files themselvs in some cases.

There is no doubt about any of the addresses being blocked, they are guaranteed flooders, you may notice that  in your case it seems that the address you have given is not on our blocklist and is therefore innocent of this activity.

http://arul.telenet-systems.com/track.html

[Me Here]

I would be suspicious maybe depending on what youre site is, content wise.

Beyond The Network America, Inc. is an ISP that gears itself to the business customer ie: normal folks as well as companies that employ the flooding onto the WPN.  

I did a bit of research into the IP number you have listed about and found this:

Peerguradian lists
Beyond The Network America, Inc  207.226.0.0 - 207.226.255.255
Beyond The Network America, Inc  207.226.0.0 - 207.226.16.21
Beyond The Network America, Inc  207.226.16.26 - 207.226.255.255

This would indicate that BlueTack is pretty serious about blocking this range

This same information is listed on both the government lists and the p2p lists

This company is known by us all for thier Industry friendly tatics and thier ads companies and dodgy Internet Services they allow to use their IP ranges.

So I guess you will have to just keep an eye on these folks, most of the normal users will list a hostname of a ISP and the lookup will provide you with Beyond The Network America, Inc as the parent company.  But not all...

That said I just want to be clear that many of the companies doing the flooding on p2p networks buy small blocks from regular ISPs and use them inorder to bypass programs like Peerguardian or Protowall, they arent stupid they watch whats going on here also.. too bad they cant beat the sytem we use to get their IPs... :twisted:
If they are on this network we see them!

[Bearded Blunder]

OK With the WinMX specific bloclkist filtered out & using PG2 to moniitor I've seen IP's from the following Level1 blocklist ranges blocked:

additional GSA IP:68.189.144.0-68.189.155.255
Advent International Corporation:202.82.155.0-202.82.155.255
Beyond The Network America, Inc:207.226.16.26-207.226.18.245
BRISTOL VIRGINIA UTILITIES BOARD:69.27.64.0-69.27.79.255
Chinanet network in Wuhan city Hubei province:219.139.192.0-219.140.255.255
COMUNEDIPORTOVIRO:82.186.101.240-82.186.101.255
Dreamwave Shizuoka Co., Ltd:202.94.176.0-202.94.223.255
Eagel Software:216.96.21.0-216.96.21.255
FUJITSU AOMORI SYSTEMS ENGINEERING LIMITED:202.216.96.0-202.216.127.255
FUJITSU LIMITED:202.219.0.0-202.219.255.255
FUJITSU LIMITED:222.158.0.0-222.159.255.255
FUJITSU LIMITED:58.0.0.0-58.1.255.255
FUJITSU LIMITED:61.121.0.0-61.121.127.255
FUJITSU LIMITED:125.0.0.0-125.1.255.255
FUJITSU LIMITED:58.0.0.0-58.1.255.255
FUJITSU LIMITED:61.121.0.0-61.121.127.255
FUJITSU LIMITED:125.0.0.0-125.1.255.255
FUJITSU LIMITED:222.158.0.0-222.159.255.255
FUJITSU LIMITED:202.219.0.0-202.219.255.255
FUJITSU NAGANO SYSTEMS ENGINEERING LIMITED:202.222.128.0-202.222.159.255
Fujitsu Tohoku Systems Engineering Limited:202.226.192.0-202.226.223.255
FUJITSU TOTTORI SYSTEMS ENGINEERING LIMITED:202.216.64.0-202.216.79.255
 INFN Roma3,V. Vasca Navale 84:193.205.159.0-193.205.159.255
INFN(National Institute of Nuclear Physics):192.84.132.0-192.84.132.255
INTERBUSINESS:213.82.0.0-213.82.255.255
J-COM Kansai Co., Ltd:61.46.0.0-61.46.101.255
kagawa T.V Broadcast Network Co.,Ltd:61.123.218.0-61.123.221.255
KANAZAWA CABLE TELEVISION NET CO.,LTD:202.122.48.0-202.122.63.255
Kansas Independent Telecommunications:63.245.128.0-63.245.191.255
kanuma cable television Corporation:202.127.176.0-202.127.191.255
Kokufu Broadcasting Agriculture Association:202.67.28.0-202.67.31.255
Mangan, Langhenry, Gillen, Lundquist, Law Firm:64.36.20.48-64.36.20.63
Matsusaka Cable-TV Station inc:61.115.240.0-61.115.255.255
Matsusaka Cable-TV Station inc:61.122.218.0-61.122.223.255
Ministero dell:212.14.128.0-212.14.156.217
Ministry of Education Computer Center:134.208.0.0-134.208.255.255
miyazaki cabletelevision network Co.,LTD:202.122.176.0-202.122.191.255
MyTV Networks Co.,Ltd:61.203.224.0-61.203.248.255
NCS Technologies:216.94.26.0-216.94.27.255
Nihon Unisys, Information Systems, Ltd:202.73.64.0-202.73.95.255
Nishimikawa New-TV Broadcasting CORPORATION:61.195.240.0-61.195.255.255
Novus Entertainment Inc:216.187.78.0-216.187.78.255
Oita Cable Television Broadcasting Inc:202.124.48.0-202.124.63.255
Oita Cable Television Broadcasting Inc:202.220.160.0-202.220.191.255
Oita Cable Television Broadcasting Inc:61.195.232.0-61.195.239.255
Oomura Cable Television Co.,Inc:202.126.240.0-202.126.243.255
Panasonic Network Services Inc:61.211.96.0-61.211.127.255
Panasonic Network Services Inc:220.156.0.0-220.156.95.255
Panasonic Network Services Inc:202.224.128.0-202.224.191.255
Panasonic Network Services Inc:202.141.192.0-202.141.207.255
Panasonic Network Services Inc:202.224.128.0-202.224.191.255
POWERWAY GROUP LTD - HEWLETT CTR:61.238.248.16-61.239.248.19
POWERWAY GROUP LTD - HEWLETT CTR:61.238.248.16-61.239.248.19
Private Customer - SBC Internet Services:69.109.112.0-69.109.137.255
Private Customer - SBC Internet Services:69.225.180.0-69.225.181.255
Private Customer - SBC Internet Services:69.106.224.0-69.107.63.255
Private Customer - SBC Internet Services:69.224.0.0-69.224.15.255
Private Customer - SBC Internet Services:69.224.32.0-69.224.43.255
Royal Danish Consulate General:210.177.225.96-210.177.225.111
Savvis:64.92.128.0-64.92.175.255
So-net Service(Sony Communication Network Corporation):210.139.128.0-210.139.255.255
Sony Communication Network:202.238.64.0-202.238.127.255
Sony Communication Network Corporation:59.146.0.0-59.146.255.255
Sony Communication Network Corporation:218.110.0.0-218.110.255.255
Sony Communication Network Corporation:58.87.128.0-58.87.255.255
Sony Communication Network Corporation:61.120.160.0-61.120.191.255
Sony Communication Network Corporation:58.87.128.0-58.87.255.255
Sony Communication Network Corporation:59.146.0.0-59.146.255.255
SONY Corporation:210.172.0.0-210.172.31.255
Tannan Cable Television Corporation:202.127.80.0-202.127.95.255
The Interactive Agency:216.99.36.96-216.99.36.127
Time Warner Communications Tampa:24.92.0.0-24.92.31.255
Time Warner Telecom:207.235.0.0-207.235.127.255
TOKAI CO.Ltd:220.148.0.0-220.148.255.255
TOKAI CO.Ltd:220.148.0.0-220.148.255.255
Toxic Design Studio:193.216.116.64-193.216.116.127
Uni2 IP Data Network:80.102.0.0-80.103.255.255
Web-Shizuoka (Fujitsu Info Software Technologies L:202.136.192.0-202.136.207.255
Web-Shizuoka (Fujitsu Info Software Technologies Limited.):210.146.96.0-210.146.118.255
Web-Shizuoka (Fujitsu Info Software Technologies Limited.):210.171.240.0-210.171.252.255
Web-Shizuoka (Fujitsu Info Software Technologies Limited.):210.146.120.0-210.146.124.255

In particular high numbers of blocks involving:

FUJITSU LIMITED:
TOKAI CO.Ltd:
Sony Communication Network Corporation:
J-COM Kansai Co., Ltd:

The other ranges i've seen activity on, but less so

Sorry I didn't keep stats  

No range is included in this list that I havn't actually LOGGED hits from, so where there are multiple entries for a given company, it's because they have been active in each IP range.

[GhostShip]

Hi Bearded Blunder, I am glad your watching out for these RIAA sponsored parasites but I must point out that the PG2 list your gathering is traffic that is being blocked already by PG2 for one reason or another.

The on site blocklist that you can update your PG2 from is updated daily and sifted through for dead wood regularly to keep it focused on the actual active flooders, we are happily keeping on the ball with them.

There is a mini organisation that works to make and check the lists that is made up of members of other sites too, and a research dept that watches for newer styles of attack and ways to block them, there is currently one method of attack we are seeing that is having no effect on users so no publicity was required, but please be reassured we are watching them and will be ready for any new dirty tricks as always.

[Bearded Blunder]

This is why I'm using their constantly updated list to do my monitoring, I truthfully wouldn't bother apart from I have a PC to protect that PG2 refuses to run reliably on, so I monitor where it will & add firewall rules where it won't.

It takes FAR less time to sift through PG2's log for new blocked connections than entering the list entire into sygate...

What I'm logging is WinMX related traffic specifically here, I don't use any other p2p apps, if PG2 would run on both machines I'd have less work to do.

[GhostShip]

You have many hits on PG2 Even if you do not run any P2p2 apps, I get a headache just looking at it, the only real danger is the TCP traffic.