Torrenting getting worse in the uk., Things are starting to look grim. Options

[deadlysensi]

Cheers m8. If you get up to three mails of this, just delete them. It'll be all the carry on.

[Guest_ubisuck_*]

NP, thanx again dude. Really appreciated.

[yeoldrocker]

Next Q
Having made the text file for PG
If I feel another peer on uTorrent is abnormally stuck on 0% for an hour - ie belongs to the mentioned group, do I just add the single IP number to the text file and save ?

[Guest_ubisuck_*]

updated llist, this one comes from TPB staff, I received it through a good friend

----------------
ziptorrent:64.62.145.130-64.62.145.165
ziptorrent:65.19.131.0-65.19.131.85
ziptorrent:66.160.133.0-66.160.133.199
ziptorrent:87.117.250.0-87.117.250.150
ziptorrent:216.218.0.100-216.218.184.199
ziptorrent:216.218.190.0-216.218.199.255
ziptorrent:38.99.252.0-38.99.252.255
ziptorrent:38.99.253.1-38.99.253.200
ziptorrent:38.100.24.0-38.100.24.255
ziptorrent:38.100.25.0-38.100.25.255
ziptorrent:38.100.26.0-38.100.26.255
ziptorrent:38.100.134.0-38.100.135.255
ziptorrent:63.216.0.0-63.223.255.255
ziptorrent:64.62.145.0-64.62.145.255
ziptorrent:64.62.214.0-64.62.214.255
ziptorrent:64.93.64.0-64.93.64.255
ziptorrent:65.19.131.0-65.19.131.85
ziptorrent:65.19.143.0-65.19.143.255
ziptorrent:65.120.42.0-65.120.42.255
ziptorrent:66.117.5.0-66.117.5.255
ziptorrent:66.160.133.0-66.160.133.199
ziptorrent:66.160.158.0-66.160.158.255
ziptorrent:66.180.192.0-66.180.207.255
ziptorrent:66.186.192.0-66.186.223.255
ziptorrent:66.198.35.0-66.198.35.255
ziptorrent:81.230.187.01-81.230.187.99
ziptorrent:87.117.250.0-87.117.250.255
ziptorrent:100.0.0.0-115.255.255.255
ziptorrent:129.47.9.0-129.47.9.255
ziptorrent:154.37.0.0-154.37.255.255
ziptorrent:206.80.0.01-206.80.99.99
ziptorrent:207.45.196.0-207.45.196.255
ziptorrent:208.10.23.0-208.10.23.255
ziptorrent:208.10.29.0-208.10.29.255
ziptorrent:209.66.117.0-209.66.117.255
ziptorrent:209.133.121.0-209.151.247.255
ziptorrent:209.133.122.0-209.133.122.255
ziptorrent:209.151.247.0-209.151.247.255
ziptorrent:216.218.0.100-216.218.184.199
ziptorrent:216.218.190.0-216.218.199.255
ziptorrent:224.0.0.0-239.255.255.255
ziptorrent:240.0.0.0-255.255.255.255
75.160.0.0 - 75.175.255.255
------------------------------------------

open notepad, copy-paste these in it, save under whatever name you want and add this list in PG2

Reason for edit: added a range: July 17th 2007

[deadlysensi]

I'm convinced there is anti_p2p work going on with these. Did a bit of investigating and I'm posting more info as a result of this.

I did a whois check on those ip ranges to check-out the network info of them. Interesting reading. Especialy the network in california. It gave me an idea.
First I checked with a torrent I am uploading myself. I let it run for a bit to connect without the above list, then turned it on. Peer guardian blocked a couple of the people connected with me.
I deliberatly got a suspect looking torrent of the simpsons movie and put it under the same test. This time, I lost a lot of peers when I turned on the list for peerguardian but I was connected to a lot.
A similar thing happend with a known, legit torrent.

What I can say is that not all these blocks are happening with peers who are spoofing and faking info. Some of the blocks are happening to people who report as normal. I wouldn't asume that these are residential users. Not on the networks some of these ranges come from.

I think tpb's range list is more valuable than people realise.

edit cheers for the info dopeman. I've heard of media defender before. Been blocking them for a long time. There an anti-p2p group and media copyright defence solutions group.

[deadlysensi]

No problem.

[deadlysensi]

Some additional info on media defender, taken from there website.

MediaDefender uses a range of non-invasive technological countermeasures employed on P2P networks to frustrate users’ attempts to steal/trade copyrighted content. We have a proven track record of adapting to challenges and successfully protecting our customers as new technologies and networks arise.

Decoying and Spoofing are the most commonly known techniques that we employ. We send blank files and data noise that look exactly like a real response to an initiated search requests for a particular title. Pirated files will no doubt be on the networks, but with our protection applied it would be easier to find a needle in a hay stack than a real file amongst our countermeasures.

In addition to anti-piracy solutions, MediaDefender also offers a Leak Alert service. Our industry leading Leak Team scours Newsgroups, Usenet, and BitTorrent sites to see what cracked/pirated content has most recently leaked. Upon discovery, MediaDefender will download the leak and either send it or provide a secure ftp login for customers to sample the pirated material.

Note they openly admit to spoofing etc. Cheek is they claim to work using non invasive methods. Yeah right. Thats why they recently had there nuckles rapped for setting up an entrapment website for the mpaa ( who denied involvement when it hit the fan ).

[420dopeman]

If torrents are to be saved, there needs to be coders on this quick. I could tell you the exact day, last week, they started doing this in full effect and I'm sure they started in so-called beta terms also. Now that they see their new defense working ,
I bet the the situation 10-folds within a month. Guaranteed.

Also if admins across the web care to protect their bitorrent investments, they all better get pro-active.
Nothing like this has taken place before.

Many more reports on tpb, just today, of them attacking everything now. All torrents across the board. It didnt start that way.

[Guest_ubisuck_*]

tried to post a really good warning to slyck.com but I cannot post url and I've got a few in it.

[yeoldrocker]

Dopeman tanks a lot for all the work you and the team are putting in.
Ubisuck is trying to keep us all aware of what is going on , and updating us with the lists...
The problem is - how do you get everyone to see all this and take action accordingly ?
I believe that most downloaders just go for torrents without carefully reading through Forums (until they have a problem or a request and then decide to look around)

The war is on ...

[Guest_ubisuck_*]

If dopeman can provide me with an updated list when it comes out of TPB, Ill post it at slyck.com. There's an answer that confirms this and asks for any update on the IPs.

[deadlysensi]

Media defender operate out of a californian network. Block this network on the trackers and torrent sites and you block the problems. Other groups may be operating out of this range as well.

As soon as I pool a list of the correct range for this network, I'll post the info. I beleive if you block this network then you would be solving a lot of torrent problems. Fakes etc. This network is non residential and has no business being on torrent traffic or uploading torrents.

There isn't much else I can add to this apart from the ip info, when I get it.

[deadlysensi]

Importent update.
A quick whois of the media defender website shows them as being registred on godaddy.com. This is the same place the 3wplayer site is registred on and ( I beleive ) the 3wplayer fakes are sourcing from.

It's the godaddy people you need to ban and be concerned about.
I'll have this info shortly.

whois info

Registry Whois Domain Name: mediadefender.com

Status: clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited

Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL:

CODE

http://registrar.godaddy.com

Expiration Date: 2013-07-13
Creation Date: 2000-07-13
Last Update Date: 2007-07-05

Name Servers:
ns01.mediadefender.com
ns02.mediadefender.com

IP Address: 209.35.163.225
IP Location: United States
Website Status: active
Server Type: Microsoft-IIS/5.0
Alexa Trend/Rank: 1 Month: 315,735 3 Month: 638,795
Page Views per Visit: 1 Month: 2.6 3 Month: 2.4
Cache Date: 2007-07-16 17:29:41 MST
Compare Archived Data: 2007-06-02

------------------------------------------------------------------

Registry Whois Domain Name: 3wplayer.com

Status: clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited

Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL:

CODE

http://registrar.godaddy.com

Expiration Date: 2008-05-04
Creation Date: 2007-05-04
Last Update Date: 2007-05-04

Name Servers:
ns3.zoneedit.com
ns7.zoneedit.com

IP Address: 69.72.144.122
IP Location: United States
Website Status: active
Server Type: Apache
Alexa Trend/Rank: 1 Month: 158,746
Page Views per Visit: 1 Month: 1.7
Cache Date: 2007-07-16 11:40:51 MST
Compare Archived Data: 2007-05-16

[enigmax]

@ubisuck

they are using a modified azureus that spoof ziptorrent.

I could show you the SS but I cannot post url here

if you send that to me i'll happily get right over there now and post it for you

thanks

enigmax // torrentfreak

[deadlysensi]

This is strange. Whois for media defender reports them as being registred with godaddy. Yet the ip the whois brings up comes back as being registred under interland inc.
Anyone know if they are the one and same ( godaddy on the interland inc network ) or is there something else going on with this.
Incase anyone is wondering, that is why I haven't posted an ip range for them yet. I'm getting conflicting information and am finding it hard to pin them to one network.

Edit:- Interland inc hosts godaddy.

Here is a range officialy used by media defender.

209.35.0.0 - 209.35.255.255

[deadlysensi]

Here is another range. This one used by godaddy.

208.109.0.0 - 208.109.255.255

[deadlysensi]

I can post abuse contact details for these ranges if needed.

[deadlysensi]

The last entry on the above ip list is may be wrong. Relates to RFC 3171 - IANA Guidelines for IPv4 Multicast Address Assignments and may just be normal traffic. Remove this and it removes most of the ziptorrent blocks. Probably just a correction for the list. Check here for info.

CODE

http://www.faqs.org/rfcs/rfc3171.html

[deadlysensi]

Have been advised that both these entries are wrong. They are blocking upnp. The ziptorrent:240.0.0.0-255.255.255.255 one is the one I spoke of in my previous post.

ziptorrent:224.0.0.0-239.255.255.255
ziptorrent:240.0.0.0-255.255.255.255

[deadlysensi]

This thing is spreading like a disease. My upload is being attacked now. Hundreds of bots trying to latch on. Thankfully I'm using the block list but what about the people out there waiting for the last 0.5 percent?
Dopeman:- I'm using the vip tracker at pirate bay. torrent is found at these locations.

CODE

http://www.mininova.org/tor/790308

CODE

http://thepiratebay.org/tor/3740313/Peter_pan_1953

This just started less than an hour ago by the looks of it. I'm fighting to see if I can complete the torrent for those legit peers who are neerly finished.
Isn't even anything that big. Just a version of peter pan that I encoded.
Like you said. It's getting worse. Have tested a few more torrents. It's everyware. Pirate bay trackers getting hit hard.