eMule IDs

TapaniS · Post by **TapaniS** » Thu Jan 04, 2007 5:32 am

I notised that there were someone in my eMule queue using id "TapaniS" asking krpkbp.8.nbb from me.

I would appreciate everybody finding a "new" id. I have been using "TapaniS" from the very begin 4/2006.

So we can not know who are behind different ids. Or can we? This one had server IP: 62.241.53.16

Regards,
TapaniS

PS. I notised this IP was a DonkeyServer No2.

Post by **Kirill Kryukov** » Thu Jan 04, 2007 3:39 pm

Hi TapaniS.. This is nick theft.. I saw Kirr-2 and Kirr-3 clients which were not me. I don't know what advantage it gives to the thief. May be Thomas can tell, because he knows more about eMule. I know that some eMule mods will automatically detect ID thiefs and ban them. eMule Xtreme and Scarangel both have this function.

Pachnes · Post by **Pachnes** » Thu Jan 04, 2007 5:44 pm

Kirill Kryukov wrote:Hi TapaniS.. This is nick theft.. I saw Kirr-2 and Kirr-3 clients which were not me. I don't know what advantage it gives to the thief. May be Thomas can tell, because he knows more about eMule. I know that some eMule mods will automatically detect ID thiefs and ban them. eMule Xtreme and Scarangel both have this function.

Hi TapaniS, Hi Kirill,

unfortunately we can not do anything. ID thiefs try to steal your unique user ID. Everybody can use the same Nickname in eMule. If you use Scarangel or Xtreme, you can find the IP of all clients in "Known Clients List". You than could add that IP (or IP-range) to your personal IPfilter.dat

But this is bad for you too, as you than can not download from him either.

jkominek · Post by **jkominek** » Fri Jan 05, 2007 12:09 am

Coincidentally, I noticed that exact same thing yesterday. Whoever stole my id was also using DonkeyServer2. Messages bounced back to me, but the data was definitely going elsewhere. Annoying! What is the motive? They're not going to get my credit record, right?

By only connecting onto the Kad network I found that members of this community could find me, but the culprit could not.

However, I'm now devoting all my bandwidth to populating the clocks-2 distribution server, and have closed emule down. If you see my id in your client list (for month of January), that's not me.

john

clocks · Post by **clocks** » Fri Jan 05, 2007 12:21 am

Also not sure. The problem that I had the other day was someone logging onto the FTP site. They uploaded 100-200 bytes of information to the ends of completed files 'ruining' them. The data was just letters, and I was able to easily remove, and reverify. Actually, it was most of the 0-byte files they messed with, I saved some larger ones, but just didn't bother with the 100MB sized ones.

Some sort of tablebase attack? LOL

I had posted this in the clocks-2 FTP but accidently deleted the post (so tired and a couple wrong clicks

)

Derek

clocks · Post by **clocks** » Fri Jan 05, 2007 1:22 am

And now I see myself uploading to clocks-2

Derek

kp1089 · Post by **kp1089** » Fri Jan 05, 2007 8:47 am

There is a nick thief operating at IP 85.152.132.244. He has tried to steal the nick from all my clients, but Xtreme has banned him in each case. You should add that IP address to your IP filter. If anyone sees kp1089, merepawn, blublazes, or watcher downloading, it is not my clients, as I have finished 2 months ago. All clients are still uploading, of course.

kp

Post by **Kirill Kryukov** » Fri Jan 05, 2007 9:06 am

clocks wrote:Also not sure. The problem that I had the other day was someone logging onto the FTP site. They uploaded 100-200 bytes of information to the ends of completed files 'ruining' them. The data was just letters, and I was able to easily remove, and reverify. Actually, it was most of the 0-byte files they messed with, I saved some larger ones, but just didn't bother with the 100MB sized ones.

Some sort of tablebase attack? LOL

I had posted this in the clocks-2 FTP but accidently deleted the post (so tired and a couple wrong clicks )

Derek

Wow.. I think this is a first case of a intentional attack on this project. I can't imagine why someone would be doing this.

Mindbreaker · Post by **Mindbreaker** » Sat Jan 06, 2007 11:38 am

Someone has been using my name too. They are from Spain, I am from the US.

Mindbreaker

Post by **Tinker** » Sat Jan 06, 2007 3:25 pm

Someone has also been using "Tinker" to upload from me.

How concerned should I be about this?

I would like to continue to allow uploads having benefited from downloading myself (about 73GB in 170 some odd 6 men files).

I have not downloaded anything since early Sept. and have been allowing uploads all along, but have stopped recently due to this galling behavior.

Thanks,
Brian Richardson
(Author of Tinker on ICC)

clocks · Post by **clocks** » Sat Jan 06, 2007 5:47 pm

I'm questioning it quite a bit if the IDs like this affect me. I've uploaded about 6GB to 'myself' in the last day or two. My average speed down was about 300k/sec for a long time - now I've been cruising 80-100K/sec for awhile.

Derek

Post by **Kirill Kryukov** » Sat Jan 06, 2007 6:06 pm

Tinker wrote:Someone has also been using "Tinker" to upload from me.

How concerned should I be about this?

I would like to continue to allow uploads having benefited from downloading myself (about 73GB in 170 some odd 6 men files).

I have not downloaded anything since early Sept. and have been allowing uploads all along, but have stopped recently due to this galling behavior.

Thanks,
Brian Richardson
(Author of Tinker on ICC)

I think we should not worry about them. If we all just stop sharing because of this, the project will just die. I have seen clients that used my name before, I just ignored them. Then I installed eMule Xtreme which bans them automatically.

Mindbreaker · Post by **Mindbreaker** » Sun Jan 07, 2007 3:03 am

Apparently the same person who was using my name is the same one pretending to be others: 62.241.53.16

I am using xtreme...I am not sure why he is still showing up.

How do I block this imposter?

mindbreaker

PAKman · Post by **PAKman** » Sun Jan 07, 2007 3:33 am

I had PAKman downloading from me today, was in Spain and using
Donkey 2. I use Extreme and under Options/Extreme II/Nick-/Modthiefs I checked BAN.
I hope this stops the impersonator.

Norm

Mindbreaker · Post by **Mindbreaker** » Sun Jan 07, 2007 5:52 am

PAKman wrote:I had PAKman downloading from me today, was in Spain and using
Donkey 2. I use Extreme and under Options/Extreme II/Nick-/Modthiefs I checked BAN.
I hope this stops the impersonator.
Norm

Thanks,

Mindbreaker

Darrell · Post by **Darrell** » Sun Jan 07, 2007 6:58 pm

Yep, the imposter is also / now using my ID Kovo and his ip is 62.241.53.16.

I am currently using emule 0.47c. Can I upgrade to the extreme version to block this guy without losing any uncompleted downloads, or having to disconnect?.

Thanks

Post by **Kirill Kryukov** » Sun Jan 07, 2007 7:02 pm

Darrell wrote:Yep, the imposter is also / now using my ID Kovo and his ip is 62.241.53.16.

I am currently using emule 0.47c. Can I upgrade to the extreme version to block this guy without losing any uncompleted downloads, or having to disconnect?.

Thanks

Yes you can upgrade from standard eMule to Xtreme without losing any incomplete downloads. Though you will have to disconnect and quit eMule before upgrading to Xtreme.

Darrell · Post by **Darrell** » Sun Jan 07, 2007 7:06 pm

Thanks Kirill for your prompt reply.

Which version would you recommend?

Thanks Darrell

Post by **Kirill Kryukov** » Sun Jan 07, 2007 7:12 pm

Darrell wrote:Thanks Kirill for your prompt reply.

Which version would you recommend?

Thanks Darrell

Usually the latest version is the way to go. I used Xtreme 5.3.1 before and it worked well for me. I did not try Xtreme 5.4 because I use different mod right now, but I believe 5.4 should be good too.

Darrell · Post by **Darrell** » Sun Jan 07, 2007 7:28 pm

Once again thanks.

Downloading 5.4 now!

Lutz Nebe · Post by **Lutz Nebe** » Mon Jan 08, 2007 10:16 am

I saw myself too today. It was the same from spain. I upgraded to Xtreme 5.4 and will block him.

It doesn't work. He is still downloading and isn't banned by Xtreme.
Behind his name now appears as well Xtreme 5.4. Is this my prog or does he use it too ?

CCRL Discussion Board

eMule IDs

eMule IDs

Unfortunately we can not do anything :-)

ID

ID