New Riaa Ips

[Incorrigibl3]

Hey, I've never posted before, and I'm not sure if this goes here :unsure:, or has been found already. But I found alot of possible RIAA IP addresses when downloading Three Doors Down, and thought I should post 'em.

They all had atleast double sns.

nikkipurple1535@KaZaA:38.118.139.78
bennyblanco19@KaZaA:38.118.139.85
slayerjunkie20@KaZaA:38.118.139.88
hello5214@KaZaA:38.118.139.90
Danielle8@KaZaA:38.118.139.135
Tyler572@KaZaA:38.118.139.205
hlewis6502@KaZaA:38.118.139.213
jballer7@KaZaA:38.118.150.133
rad303@KaZaA:38.118.150.136
striker7@KaZaA:38.118.150.148
bridget7@KaZaA:38.118.151.14
Passport82@KaZaA:38.118.151.14
bjessica8146@KaZaA:38.118.151.18
TwoGoldTeef1@KaZaA:38.118.151.132
adf3@KaZaA:38.118.151.144
joekulbc8@KaZaA:38.118.151.206
chadwick8@KaZaA:38.118.154.81
snoopytweet197@KaZaA:38.118.154.82
hobbes61@KaZaA:38.118.154.89
dcdancerks0@KaZaA:38.118.154.153
SueShellandJosh5@KaZaA:38.118.154.194
boogs51@KaZaA:38.118.154.213
hco3@KaZaA:38.118.155.68
stephajo86@KaZaA:38.118.155.76
grimace75@KaZaA:38.118.155.140
LiLaZnGuRLiE2@KaZaA:38.118.155.144
ap2@KaZaA:38.118.156.23
llittle76@KaZaA:38.118.156.25
crg3804@KaZaA:38.118.156.66
vannice7@KaZaA:38.118.156.133
ataft51@KaZaA:38.118.156.199
modelingscam257@KaZaA:38.118.156.214
megan5@KaZaA:38.118.157.15
Chris5791@KaZaA:38.118.160.73
punkangel962@KaZaA:38.118.160.84
Amanda6@KaZaA:38.118.160.139
BnBtWiNs87@KaZaA:38.118.160.147
ARK33@KaZaA:38.118.161.8
suziqkraigh0@KaZaA:38.118.161.19
patricia87@KaZaA:38.118.161.89
benpickusmc10@KaZaA:38.118.163.133
jeremypg823@KaZaA:38.118.163.151
lilnelly803@KaZaA:38.118.163.206
DollarBill0@KaZaA:38.119.64.71
paul41@KaZaA:38.119.64.72
angel-chick_17@KaZaA:38.119.64.80
chocolate9260@KaZaA:38.119.64.82
dancergirl03@KaZaA:38.119.64.90
Melburn70@KaZaA:38.119.64.151
nalgas69@KaZaA:38.144.197.151
sarabrooke094@KaZaA:38.144.197.153
alexrox70@KaZaA:38.144.197.154
trinity76@KaZaA:66.53.77.122
0426@KaZaA:66.54.73.66
arnold644@KaZaA:66.54.73.85
heavenstarx18@KaZaA:66.54.73.114
oreos5@KaZaA:66.54.73.119
lindsie776@KaZaA:66.54.74.100
purpletricia28@KaZaA:66.54.76.118
hotstuff824@KaZaA:66.54.76.120
jrunner72@KaZaA:66.54.77.76
iversons_wifey47@KaZaA:66.54.77.90
stig44@KaZaA:66.54.77.98
l15@KaZaA:66.54.77.109
Pettempt74@KaZaA:66.54.77.115


Blah, everytime I update my IP Blocker about 50 new triple addresses are in the files.

[dingdongding]

nice, i went through your list to see what wasn't already covered by the peerguardian database (which paul uses in his k++ list)

here's what i found
not already covered by the pg db ranges:
66.54.77.109
66.54.77.115
66.54.77.76
66.54.77.90
66.54.77.98

i'm gonna submit fake files nhi:66.54.77.76-66.54.77.115 to the pg database and credit you for that


on this one i notice it stands out from the rest - it's a Pac-West Telecomm, INC. range- did you get a chance to view all files from that user? just wondering coz sometimes some morona holding a few fake/corrupted files get mixed in)
66.53.77.122



existing (related) peerguardian database ranges
Performance Systems International (Hash-Exploiter On KaZaA) fake files:38.118.0.0-38.118.255.255
fake file company (host is psi.net):38.119.0.0-38.119.64.161
fake files psi:38.144.197.66-38.144.197.160
fake files nhi:66.54.72.98-66.54.72.121
fake files nhi:66.54.73.68-66.54.73.120
fake files nhi:66.54.74.66-66.54.74.121
fake files nhi:66.54.76.69-66.54.76.122
fake files nhi:66.54.76.69-66.54.76.1222
fake files nhi:66.54.89.2-66.54.89.25


went thru your list to see what was covered already

covered by the existing pg db range
Performance Systems International (Hash-Exploiter On KaZaA) fake files:38.118.0.0-38.118.255.255

38.118.139.135
38.118.139.205
38.118.139.213
38.118.139.78
38.118.139.85
38.118.139.88
38.118.139.90
38.118.150.133
38.118.150.136
38.118.150.148
38.118.151.132
38.118.151.14
38.118.151.14
38.118.151.144
38.118.151.18
38.118.151.206
38.118.154.153
38.118.154.194
38.118.154.213
38.118.154.81
38.118.154.82
38.118.154.89
38.118.155.140
38.118.155.144
38.118.155.68
38.118.155.76
38.118.156.133
38.118.156.199
38.118.156.214
38.118.156.23
38.118.156.25
38.118.156.66
38.118.157.15
38.118.160.139
38.118.160.147
38.118.160.73
38.118.160.84
38.118.161.19
38.118.161.8
38.118.161.89
38.118.163.133
38.118.163.151
38.118.163.206


covered by pg db range
fake file company (host is psi.net):38.119.0.0-38.119.64.161

38.119.64.151
38.119.64.71
38.119.64.72
38.119.64.80
38.119.64.82
38.119.64.90


covered by pg db range
fake files psi:38.144.197.66-38.144.197.160

38.144.197.151
38.144.197.153
38.144.197.154


66.53.77.122

covered by pg db range
fake files nhi:66.54.73.68-66.54.73.120

66.54.73.114
66.54.73.119
66.54.73.66
66.54.73.85


covered here
fake files nhi:66.54.74.66-66.54.74.121

66.54.74.100


covered here
fake files nhi:66.54.76.69-66.54.76.122

66.54.76.118
66.54.76.120


and on a less important note i think the psi ranges are overpeer- the only reason i think that is i get overpeer and psi hits right next to each other when i'm tracking fake files (but bad is bad so the names aren't as important imo)


ddd

[DenDen2004]

if you havent noticed all the names had numbers after them.. when there is such a high number of 'people' with numbers never download from them.. its the first sign of a file being fake..

[Incorrigibl3]

Ah, well I don't click the button to update from the pg so I didn't know this. I did try to search more from this user a few times, and never got anything.

Yeah I saw, they mostly had the same numbers like 8 or 6, and all were from just @KaZaA.

[internet.news]

wow! amazing sadly!

[internet.news]

Originally posted by Incorrigibl3@25 November 2003 - 22:58
Ah, well I don't click the button to update from the pg so I didn't know this. I did try to search more from this user a few times, and never got anything.

Yeah I saw, they mostly had the same numbers like 8 or 6, and all were from just @KaZaA.
hey, if you know a good hacker, come hack into their
accounts so that on the screen it is displayed:

"hey, greetings from the klboard ;)" hehe...

would be interesting funny, if employees came back from lunch
and see onthe screens that ;)

[dingdongding]

Originally posted by DenDen2004@25 November 2003 - 17:54
if you havent noticed all the names had numbers after them.. when there is such a high number of 'people' with numbers never download from them.. its the first sign of a file being fake..
the fake file ranges in general are important to block for those than don't take time to notice things like that (ie most ppl lol)

[internet.news]

hmm....

[Switeck]

My list of hostiles turned up basically the exact same ip ranges:

38.118.139.143
38.118.139.145
38.118.139.218
38.118.150.135
38.118.150.136
38.118.150.138
38.118.150.141
38.118.150.146
38.118.151.8
38.118.154.4
38.118.155.24
38.118.156.10
38.118.156.13
38.118.156.72
38.118.156.84
38.118.156.88
38.118.156.130
38.118.156.135
38.118.156.143
38.118.160.2
38.118.161.68
38.118.161.73
38.118.163.206
38.118.163.218
38.119.64.9
38.119.64.11
38.119.64.21
38.119.64.68
38.119.64.83
38.119.64.87
38.119.64.88
38.119.64.90

and

66.54.72.112
66.54.72.119
66.54.73.120
66.54.76.88
66.54.76.115

Although I didn't even BOTHER trying to get their in-Kazaa/KL++ names. We all know they're fake names anyhow which could change on a whim.

Heck, be funny to hack into them and put @RIAA on them if anything. Only problem with doing that is it'd require 'infecting'/hacking into lots of computers (they use big server farms) and it'd probably just make them more effective versis the noobs.

[supersonic]

Use an IP harvestor :huh:
enter the message and ...
But i dont have it :unsure:

[Switeck]

Originally posted by supersonic@26 November 2003 - 23:11
Use an IP harvestor :huh:
enter the message and ...
But i dont have it :unsure:
My 'IP Harvester' is K-Dat -- it retains source information for downloads.

[internet.news]

If I block these IP Adresses - Iwouldnot get so many faked files
offered by the RIAA?

[Switeck]

Originally posted by internet.news@27 November 2003 - 09:53
If I block these IP Adresses - Iwouldnot get so many faked files
offered by the RIAA?
Yes, it will reduce the numbers considerably.

However, average users who have ALREADY downloaded the fakes may still share to you.

[RileyF]

Originally posted by DenDen2004@25 November 2003 - 22:54
if you havent noticed all the names had numbers after them.. when there is such a high number of 'people' with numbers never download from them.. its the first sign of a file being fake..
well you can't always avoid them, sometimes you download a file that has many sources and in this case you can't choose the sources manually, it uses them all, so that's a limitation, hope that there's gonna be a solution somewhere in the future (maybe a 'don't use this source' feature when right click on file in traffic tab, that's something that could be add to kl extensions)

[cosmic doobie]

:D
Nice work everybody and it certainly corresponds to the work we've been doing on the peer guardian forum.
As for user names these are generally changed every 6 hours i've noticed and unfortunately they don't accept messages as i have tried to send my greetings to these goons many times :lol:

[Switeck]

Originally posted by RileyF+27 November 2003 - 12:51--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (RileyF @ 27 November 2003 - 12:51)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-DenDen2004@25 November 2003 - 22:54
if you havent noticed all the names had numbers after them.. when there is such a high number of &#39;people&#39; with numbers never download from them.. its the first sign of a file being fake.. well you can&#39;t always avoid them, sometimes you download a file that has many sources and in this case you can&#39;t choose the sources manually, it uses them all, so that&#39;s a limitation, hope that there&#39;s gonna be a solution somewhere in the future (maybe a &#39;don&#39;t use this source&#39; feature when right click on file in traffic tab, that&#39;s something that could be add to kl extensions) [/b][/quote]
However, you WON&#39;T be getting any parts of a file from one of the BLOCKED ips.

The only solution that might work is "limit sources to x" for all downloads, so you try to get a file from only 1 source at a time. Chances are, for an MP3 file, you could still get the whole file so long as you find 1 good source.

[IWishAnon2609]

Out of curiousity, if these companies post fake files, wouldn&#39;t they get logging your IP and passing it onto the RIAA lawyers for ISP subpena?, or does it not count because you aren&#39;t in possession of the original because it is inherently screwed up (ie fake)?

[Switeck]

Originally posted by IWishAnon2609@27 November 2003 - 22:15
Out of curiousity, if these companies post fake files, wouldn&#39;t they get logging your IP and passing it onto the RIAA lawyers for ISP subpena?, or does it not count because you aren&#39;t in possession of the original because it is inherently screwed up (ie fake)?
That is a VERY good question... and the answer is simply:
Even THEY don&#39;t know if the files you have are their fakes or not.

But they will claim copyrights even on the fakes, so it may be a moot point.

HOWEVER, fair use allows up to 30 seconds of a copyrighted work for criticism, personal use, etc -- so long as it doesn&#39;t economically impact the copyright holder.

I would argue that the fakes certainly don&#39;t HELP their sales... but RIAA is doing them because it thinks it might indirectly.