ip blocklist/blacklist

monkeysmasher · **Posted:** Mon Dec 22, 2003 9:50 pm **Post subject:** ip blocklist/blacklist

say, just wondering if most people used blocklist/blacklists. i was messing around and compiled them, the one from bluetack has 2529323825 IPs from 6765 profiles of p2p nasties, spammers,tojan dorks.
i did some experimenting, and dropped my firewall for about 5 minutes(as long as it took to take a piss), and without any p2p or ftp programs running for a couple hours earlier. i get back and had close to 1500 hits from nasties trying to scan me, snoop, look for copyrighted material.
i added them all to my firewall blocklist, then started up the old mule. I think it may be the fastest ive ever downloaded now.

eh, so if anybody wants my compiled list of bad ip's, let me know. it is kind of a large text file, without overlapping ip#'s, its still over a megabyte. 1.5mb or so.

i am interested to see if anybody else gets as many hits as me from these #'s.

spudthedestroyer · **Posted:** Mon Dec 22, 2003 9:55 pm **Post subject:**

I'll give it a whirl. Just have an ipfilter at the moment, and router

monkeysmasher · **Posted:** Tue Dec 23, 2003 1:22 am **Post subject:**

http://members.lycos.co.uk/skitzotheclo ... arding.P2P

is 6765 ip ranges.
i got most of them from bluetack and peerguardian(good sites), and people scanning me continuosly

i'm interested to see how many hits people get, i get a few hundred every couple minutes. anybody who's interested just download the above, then
just put this in your peerguardian dir, then start pg while your on emule. it'll use a lot of cpu, so your upload/download will probably slow down or die if you got slow cpu or buncha stuff open.

you dont have to kill your firewall or anything. just see which ip's dont get stopped by your firewall.

i think i got something sinister going on this computer, now i got open ports.............

monkeysmasher · **Posted:** Tue Dec 23, 2003 3:01 am **Post subject:**

re-installed my firewall. ah, am i just too paranoid about nothing? i rarely even share anything anymore, but i am still interested in why i keep getting hits from people on these block lists.

spudthedestroyer · **Posted:** Tue Dec 23, 2003 3:32 am **Post subject:**

peerguardian is pretty useless, I've explained it many times for those who want to look at it (most might be at fh actually), but a lot of the ips they have ranged are actually false. Home ips, isps, etc.

I suspect that the case with this, and of course; cpu will hit the roof if you block out the connections of legitimate users, which i suspect is the case. This is the problem with zonealarm and p2p. Unlike other firewalls, it "manages" all the connections, even those that are permitted freely to your system, and thusly it displays similar symptoms.

Try this block range

Everyone 0.0.0.0-255.255.255.255 10 #lions be here

Anyways, I'll tell you wat happens when i next load up emule, but i suspect your blocking far too many legitimate users (by that i mean average tom, dick and harry.. not susan... shes a skank)

monkeysmasher · **Posted:** Tue Dec 23, 2003 3:50 am **Post subject:**

ahh
yeah, peer guardian i am sure is easy for bad guys to get around. i was wondering why i keep getting hits even though i dont have emule running, is the thing. hours later i still get hits. this has been going on for quite a while, like months. i was afraid maybe my ip number was on some hackerwebsite's target practice list.
really, hundreds of blocked ip's in a couple minutes continously is odd i would think. i also wonder if i just have a crappy isp.

spudthedestroyer · **Posted:** Tue Dec 23, 2003 3:56 am **Post subject:**

ip scans are frequent whatever. Now sitting behind a router I don't have to worry about it. I thought routers weren't needed but now its properally configured it beats software solutions

oh and because I like teasing paranoid people....
you know that if you are logged in as administrator on XP or 2000, any process has the right to kill another. For example, if they exploit a vulnerability in any service, they can override your firewall/peerguardian.... trust no1. :eatthis:

PC_Arcade · **Posted:** Sat Dec 27, 2003 1:37 pm **Post subject:**

Can someone give me a link to a url I can put into emult to keep my blocklist up to date please, mine seems to have gone

PC_Arcade · **Posted:** Tue Jan 06, 2004 10:34 am **Post subject:**

satan · **Posted:** Wed Jan 07, 2004 4:56 am **Post subject:**

PC_Arcade wrote:

bump

Do you mean the IPFilter and Fakes?

PC_Arcade · **Posted:** Wed Jan 07, 2004 8:10 am **Post subject:**

Yeah, that's the one.

satan · **Posted:** Wed Jan 07, 2004 8:16 am **Post subject:**

PC_Arcade wrote:

Yeah, that's the one.

I want it also.

the ones I'm using are from Sept.=(

graag · **Posted:** Thu Jan 08, 2004 4:08 pm **Post subject:**

There's http://www.iespana.es/IPFILTER/ipfilter.dat which is fairly up-to-date.

PC_Arcade · **Posted:** Thu Jan 08, 2004 4:29 pm **Post subject:**

Thanks graag

monkeysmasher · **Posted:** Fri Jan 09, 2004 3:16 am **Post subject:**

woops, forgot bout this post.
there is a peerguardian to emule ipfilter.txt converter at bluetacks
http://www.bluetack.co.uk/convert.html

i prefer to see what ip's are getting blocked, emule doesnt show them as far as i can tell.

satan · **Posted:** Sat Jan 10, 2004 12:24 pm **Post subject:**

monkeysmasher wrote:

woops, forgot bout this post.
there is a peerguardian to emule ipfilter.txt converter at bluetacks
http://www.bluetack.co.uk/convert.html

i prefer to see what ip's are getting blocked, emule doesnt show them as far as i can tell.

then email me that ipfilter.dat daily, or use a host and post it.

monkeysmasher · **Posted:** Sun Jan 11, 2004 3:07 pm **Post subject:**

yeah, right, everyday. i may as well go out and get a job. i dont even bother getting out of bed everyday.

Gorehound · **Posted:** Sun Jan 11, 2004 6:08 pm **Post subject:**

what about progs like "secretmaker"? do they actually encrypt your ip, respectively change it?

edit: ?rrgh, not secretmaker, what i meant was JAP.

Polityk · **Posted:** Sun Feb 01, 2004 3:40 pm **Post subject:**

http://tfo.fasttrackcentral.org/ef13.exe

Very nice program.

John_Doe · **Posted:** Thu Apr 22, 2004 6:00 am **Post subject:**

Quote:

Someone from w.netfirms.com [209.171.43.28], port 20 wants to connect to port 1758 owned by 'Internet Explorer' on your computer

hmmm....

ip blocklist/blacklist

Who is online