CCRL Discussion Board

I notised that there were someone in my eMule queue using id "TapaniS" asking krpkbp.8.nbb from me.

I would appreciate everybody finding a "new" id. I have been using "TapaniS" from the very begin 4/2006.

So we can not know who are behind different ids. Or can we? This one had server IP: 62.241.53.16


Regards,
TapaniS

PS. I notised this IP was a DonkeyServer No2.

Hi TapaniS.. This is nick theft.. I saw Kirr-2 and Kirr-3 clients which were not me. I don't know what advantage it gives to the thief. May be Thomas can tell, because he knows more about eMule. I know that some eMule mods will automatically detect ID thiefs and ban them. eMule Xtreme and Scarangel both have this function.

Kirill Kryukov wrote:Hi TapaniS.. This is nick theft.. I saw Kirr-2 and Kirr-3 clients which were not me. I don't know what advantage it gives to the thief. May be Thomas can tell, because he knows more about eMule. I know that some eMule mods will automatically detect ID thiefs and ban them. eMule Xtreme and Scarangel both have this function.

Hi TapaniS, Hi Kirill,

unfortunately we can not do anything. ID thiefs try to steal your unique user ID. Everybody can use the same Nickname in eMule. If you use Scarangel or Xtreme, you can find the IP of all clients in "Known Clients List". You than could add that IP (or IP-range) to your personal IPfilter.dat

But this is bad for you too, as you than can not download from him either.

Coincidentally, I noticed that exact same thing yesterday. Whoever stole my id was also using DonkeyServer2. Messages bounced back to me, but the data was definitely going elsewhere. Annoying! What is the motive? They're not going to get my credit record, right?

By only connecting onto the Kad network I found that members of this community could find me, but the culprit could not.

However, I'm now devoting all my bandwidth to populating the clocks-2 distribution server, and have closed emule down. If you see my id in your client list (for month of January), that's not me.

john

Also not sure. The problem that I had the other day was someone logging onto the FTP site. They uploaded 100-200 bytes of information to the ends of completed files 'ruining' them. The data was just letters, and I was able to easily remove, and reverify. Actually, it was most of the 0-byte files they messed with, I saved some larger ones, but just didn't bother with the 100MB sized ones.

Some sort of tablebase attack? LOL

I had posted this in the clocks-2 FTP but accidently deleted the post (so tired and a couple wrong clicks )

Derek

And now I see myself uploading to clocks-2

Derek

There is a nick thief operating at IP 85.152.132.244. He has tried to steal the nick from all my clients, but Xtreme has banned him in each case. You should add that IP address to your IP filter. If anyone sees kp1089, merepawn, blublazes, or watcher downloading, it is not my clients, as I have finished 2 months ago. All clients are still uploading, of course.

kp

clocks wrote:Also not sure. The problem that I had the other day was someone logging onto the FTP site. They uploaded 100-200 bytes of information to the ends of completed files 'ruining' them. The data was just letters, and I was able to easily remove, and reverify. Actually, it was most of the 0-byte files they messed with, I saved some larger ones, but just didn't bother with the 100MB sized ones.

Some sort of tablebase attack? LOL

I had posted this in the clocks-2 FTP but accidently deleted the post (so tired and a couple wrong clicks )

Derek

Wow.. I think this is a first case of a intentional attack on this project. I can't imagine why someone would be doing this.

Someone has been using my name too. They are from Spain, I am from the US.

Mindbreaker

Someone has also been using "Tinker" to upload from me.

How concerned should I be about this?

I would like to continue to allow uploads having benefited from downloading myself (about 73GB in 170 some odd 6 men files).

I have not downloaded anything since early Sept. and have been allowing uploads all along, but have stopped recently due to this galling behavior.

Thanks,
Brian Richardson
(Author of Tinker on ICC)

I'm questioning it quite a bit if the IDs like this affect me. I've uploaded about 6GB to 'myself' in the last day or two. My average speed down was about 300k/sec for a long time - now I've been cruising 80-100K/sec for awhile.

Derek

Tinker wrote:Someone has also been using "Tinker" to upload from me.

How concerned should I be about this?

I would like to continue to allow uploads having benefited from downloading myself (about 73GB in 170 some odd 6 men files).

I have not downloaded anything since early Sept. and have been allowing uploads all along, but have stopped recently due to this galling behavior.

Thanks,
Brian Richardson
(Author of Tinker on ICC)

I think we should not worry about them. If we all just stop sharing because of this, the project will just die. I have seen clients that used my name before, I just ignored them. Then I installed eMule Xtreme which bans them automatically.

Apparently the same person who was using my name is the same one pretending to be others: 62.241.53.16

I am using xtreme...I am not sure why he is still showing up.

How do I block this imposter?


mindbreaker

I had PAKman downloading from me today, was in Spain and using
Donkey 2. I use Extreme and under Options/Extreme II/Nick-/Modthiefs I checked BAN.
I hope this stops the impersonator.
Norm

PAKman wrote:I had PAKman downloading from me today, was in Spain and using
Donkey 2. I use Extreme and under Options/Extreme II/Nick-/Modthiefs I checked BAN.
I hope this stops the impersonator.
Norm

Thanks,

Mindbreaker

Yep, the imposter is also / now using my ID Kovo and his ip is 62.241.53.16.

I am currently using emule 0.47c. Can I upgrade to the extreme version to block this guy without losing any uncompleted downloads, or having to disconnect?.

Thanks

Darrell wrote:Yep, the imposter is also / now using my ID Kovo and his ip is 62.241.53.16.

I am currently using emule 0.47c. Can I upgrade to the extreme version to block this guy without losing any uncompleted downloads, or having to disconnect?.

Thanks

Yes you can upgrade from standard eMule to Xtreme without losing any incomplete downloads. Though you will have to disconnect and quit eMule before upgrading to Xtreme.

Thanks Kirill for your prompt reply.

Which version would you recommend?

Thanks Darrell

Darrell wrote:Thanks Kirill for your prompt reply.

Which version would you recommend?

Thanks Darrell

Usually the latest version is the way to go. I used Xtreme 5.3.1 before and it worked well for me. I did not try Xtreme 5.4 because I use different mod right now, but I believe 5.4 should be good too.

Once again thanks.

Downloading 5.4 now!

I saw myself too today. It was the same from spain. I upgraded to Xtreme 5.4 and will block him.


It doesn't work. He is still downloading and isn't banned by Xtreme.
Behind his name now appears as well Xtreme 5.4. Is this my prog or does he use it too ?