aMule Forum

English => aMule Help => Topic started by: Ezeltje on January 23, 2006, 06:29:41 PM

Title: Bombarded by shared directories list requests
Post by: Ezeltje on January 23, 2006, 06:29:41 PM
Since 11:07, I have been under repeated barrage by a user named "stima" requesting my shared directories list. I have logged more than 3200 such requests since this morning, usually in bursts of up to three per second, like this:

Code: [Select]
2006-01-23 18:11:13: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:15: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:17: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:17: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:17: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:18: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:18: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:20: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:20: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:20: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:21: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:21: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:21: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:22: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:26: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:26: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:27: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:27: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:27: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:28: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:28: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:28: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:29: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:29: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:29: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:30: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:30: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:30: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:31: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:31: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:31: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:32: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:33: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:34: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:34: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:34: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:35: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:35: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:35: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:36: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:36: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:36: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:37: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:37: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:37: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:38: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:38: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:38: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:40: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:42: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:42: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:43: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:46: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:46: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:46: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:47: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:47: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:47: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:47: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:48: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:48: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:51: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:52: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:52: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:52: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:53: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:53: User stima (3084944542) requested your shareddirectories-list -> Denied
2006-01-23 18:11:53: User stima (3084944542) requested your shareddirectories-list -> Denied

This user appears in the log under several client IDs, namely 2027979934, 803308702, 2011268254, and 3084944542.

I am getting REALLY tired of it, since it slows down my system -- CPU usage goes way up. Anyone have any idea of what is going on? Is this a rogue eMule client or some kind of DoS attack? FWIW, I have the "Filter incoming messages" option switch on.

Anyone else seen anything like this?
Title: Re: Bombarded by shared directories list requests
Post by: Ezeltje on January 24, 2006, 01:10:32 PM
well, stima is at it again. Since posting the above, I have received more than 21,000 requests between the hours of 23:34:59 and 1300 (now), and they continue. I ran ethereal and got his IP number,  158.132.224.171, which resolves to a university in Hong Kong: ppp224171.its.polyu.edu.hk

Now, what to do about it...
Title: Re: Bombarded by shared directories list requests
Post by: Kry on January 24, 2006, 01:56:17 PM
Not much from our side. you just get the requests. What can aMule do appart from ignoring it?
Title: Re: Bombarded by shared directories list requests
Post by: Xaignar on January 24, 2006, 03:39:14 PM
You can always put him in your ipfilter list, since you know the IDs.
Title: Re: Bombarded by shared directories list requests
Post by: Ezeltje on January 24, 2006, 11:12:53 PM
Quote
Originally posted by Xaignar
You can always put him in your ipfilter list, since you know the IDs.
He appears to be using a pool of IP numbers, hence the periodic changes in his client ID. I've blocked this range:158.132.224.145 - 158.132.225.255 . So far, so good.
Title: Re: Bombarded by shared directories list requests
Post by: stefanero on January 24, 2006, 11:22:03 PM
hong kong university nice