Reply
Thread Tools
Search this Thread
Display Modes
  #1  
Old February 18th, 2007, 07:40 AM
eros2's Avatar
eros2 eros2 is offline
Junior Member
 
Join Date: Dec 2006
Location: Tiraspol, Moldova
Posts: 11
Lightbulb Strange ultrapeer (malicious?)

First, I use my own limewire build with version string "4.2.9 xXx". I never distribute it, so noone have it, only me.
Sometimes, when I start my limewire, on connections page I see ultrapeer with same version string as mine!
It looks like this ultrapeer just show version same as in connected cilent.
Its IP is 128.108.111.114, but I also seen same from some other IPs.

My guess it something malicious.
Reply With Quote
  #2  
Old February 18th, 2007, 10:08 PM
jum's Avatar
jum jum is offline
Latest source user
 
Join Date: Apr 2006
Location: Hannover, Germany
Posts: 87
Default

I have found that behaviour as well, it appears to be a range of networks allocated to cisco. I have no idea what they are doing there, but I just blocked their range as I did not like the fact that they fake their client IDs.
Reply With Quote
  #3  
Old February 21st, 2007, 05:28 AM
Aaron.Walkhouse's Avatar
Aaron.Walkhouse Aaron.Walkhouse is offline
· Moderator and Axeman ·
 
Join Date: May 2006
Location: My igloos melt in June.
Posts: 2,250
Default

Yes, I block all of 128.108.x.x in my firewall and it gets hundreds of hits a day.
No point in wasting bandwidth by connecting to those guys.
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
Forum Jump


All times are GMT. The time now is 06:08 PM.


Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.