Keep Peer Guardian Up-to-Date

[Big Booger]

http://www.westnet.com.au/tryan/list.html

I just found 38 addresses that tried to scan my PC.. Make sure you are keeping peerguardian up-to-date if you are using it. It is ineffective if you are not adding new IP ranges to block.

The bulk of my scans were done by this IP address:
216.73.87.22

Which when I did a trace came back with this information:

OrgName: Double Click, Inc.
OrgID: DOUBLE-3
Address: 450 West 33rd Street 16th floor
City: New York
StateProv: NY
PostalCode: 10001
Country: US

NetRange: 216.73.80.0 - 216.73.95.255
CIDR: 216.73.80.0/20
NetName: DOUBLECLICK-NET
NetHandle: NET-216-73-80-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.DOUBLECLICK.NET
NameServer: NS2.DOUBLECLICK.NET
NameServer: NS3.DOUBLECLICK.NET
NameServer: NS4.DOUBLECLICK.NET
Comment:
RegDate: 2001-07-12
Updated: 2003-06-11

TechHandle: AN1068-ARIN
TechName: Ng, Alex
TechPhone: +1-212-683-0001
TechEmail: [email protected]

OrgTechHandle: AN1068-ARIN
OrgTechName: Ng, Alex
OrgTechPhone: +1-212-683-0001
OrgTechEmail: [email protected]

ARIN WHOIS database, last updated 2003-07-29 19:15
Enter ? for additional hints on sear

So I have now banned all Ips that begin with 216 from connecting to my PC. That should stop them for a while.

[Conan]

Double Click, isn't that a Web Advertiser?

[Big Booger]

and yet another:
Connection forcefully closed on: 146.82.174.10 - RIAA

hehehe

Conan,
They were listed in the lists of IPs to block so perhaps they are doing some shady work on the side.. who knows.

[Big Booger]

By the way,
Peer Guardian has been updated:

http://www.methlabs.org/methlabs.htm


or the direct download below:

http://www.methlabs.org/pg/PeerGuardian_1981_setup.zip



The newest version is 1.98-1

[Stripe]

That's okay Boogs, I had 10 forceful closes from the Dept. of Justice a few days ago

[Big Booger]

What would be good, is if Kazaa gave you the chance to choose to allow someone to download something from you. Like say they are trying to scan your files, it pops up, saying something like, x.x.x.x. Ip is trying to see your files or download from you, and it has a look up x.x.x.x IP to allow them to download from you..

That I think would definitely crack the nutts of the RIAA, BSA, USDOJ, MPAA, etc...
If you say no, then they are automatically blocked. And you can add IPs that you find safe to a safe ALLOW ALL list..

That WOULD definitely stop them.
LOL

[cash_site]

Does the new Kazaa Lite 2.41, with IP blocking installed, act just like peerguardian??

Or is it a better idea to have both, PG and RIAA IP Block, running at same time?

[Big Booger]

You have to remember, Peer Guardian works for more than just Kazaa. It works on several platforms from emule to kazaa. The new kazaa does exactly what Peer Guardian does, but to be safe I would use both, as Kazaa may not update the blocked Ip strings like peer guardian does. With that site above, it is updated every day. I don't know how often it is updated for the kazaa blocking feature.

If you are worried, I'd suggest you to try out filetopia. I've been using it now for 2 days and it works great. I have peer guardian running in the background, and haven't even had 1 scan. Filetopia is like IRC, ICQ, Kazaa, and emule wrapped into one solid nifty application.

It does have some bugs, but with such an overwhelming number of options and features that is to be expected. Give it a shot.

[Conan]

I don't use Peer Guardian but I have copied all the IP ranges to block into Sygate. What do yo think Boogs, is that good enough?

http://methlabs.org/pg_sygate.htm

[Big Booger]

as long as you continously update them, it shouldn't be a problem. Use that site above to update it. More IP strings are added daily. Hopefully that will keep the nasties out of your share.

[Big Booger]

Connection Rejected: 61.62.68.178 - Sony NetTw Limited (add. range) (07-31-2003 @ 21:41:30)

That Same IP address has been trying to connect to me for nearly 3 hours. 239 times it has tried to connect, and 239 times Peer Guardian has denied them..

I wonder if there is a program out there that will send a bounce back packet to IPs that try to connect to me. I want to cause them as much trouble as they are causing me.

Anyone have a program that does that?

[Thor]

Originally posted by Big Booger
Connection Rejected: 61.62.68.178 - Sony NetTw Limited (add. range) (07-31-2003 @ 21:41:30)

That Same IP address has been trying to connect to me for nearly 3 hours. 239 times it has tried to connect, and 239 times Peer Guardian has denied them..


Anyone have a program that does that?

Isn't there some kind of law against being hammered like that?

There are programs that send back packets but, alas, I don't have one handy.

[Big Booger]

What if we all sent back packets to those bots.. surely that would crash their systems.. I mean 1 million packets per second would do quite a bit of damage IMHO LOL

[lynchknot]

Hey BB, do you have any idea why PG was running up my CPU to 90+ locking the computer up?

*edit - nm i found out:

High Processor Usage
Some users have been complaining of high-processor usage by PG recently. A large part of this is down to the fact that PG checks new IPs against EVERY range in your blocklist. I've decided the best way to address this is to change the cross-referencing system so that it breaks all blocked IPs into subnets and only compares new IPs with those in relevant subnets (should cut processor time to below 1/200th)

*edit again - well this is the second time in a few minutes that my PC has locked up at 99 usage due to PG - that is unacceptable!

[Big Booger]

try using the sygate rules. I personally have never had this problem, unless it is checking 239 times.. like it did today. I'd rather have my PC lockup 2-3 times per hour as to be charged by the RIAA..



Lynch,
You could also try Filetopia. It seems to work well.. but it takes a while to get used to.. and you don't have to worry about the RIAA!