FakeShare 1 .*(0000000|1111111|2222222|3333333|4444444|5555555|6666666|7777777|8888888|9999999):* [Fake Share] 0 0 To many of the same digit in a row. [Contains] FakeShare 2 ^(166430355311|715112427375|114681139229)$ [Fake Share] 0 0 Mainchat and search spamming bot [Exact] FakeShare 3 ^(98784247840|98784247785|96636764160|91268055040|85899345920|80530636800|7970010000|75161927680)$ [Fake Share] 0 0 Known fake share [Exact] FakeShare 4 ^(69793218560|66947802726|65712999629|64424509440|59055800320|55104430407|48318382080|44171435392|39051993934)$ [Fake Share] 0 0 Known fake share. [Exact] FakeShare 5 ^(32577036319|26993869455|214266156265|21171699199|18552221398|18328772935([0-9]){1}|174720100000|174719269601)$ [Fake Share] 0 0 Known fake share. [Exact] FakeShare 6 ^(140301549174|140295106724|13630010000|13625783747|128849018880|118648471552|102392020337|102005473280)$ [Fake Share] 0 0 Known fake share. [Exact] FakeShare 7 .*(21474836480|26843545600|32212254720|37580963840|37970010000|42949672960|5368709120|65719010000|10737418240|11534336|16106127360).* [Fake Share] 0 0 Known fake share [Contains] DC++ 0\.(307|401|403|403|403([234]){1}|666|6665|667) ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ ^$ .* ^$ ^1$ 0 0 ^(28\.8Kbps|33\.6Kbps|56Kbps|ISDN|Satellite|Cable|DSL|LAN\(T1\)|LAN\(T3\))$ !Client with limiter (,L:|,B:|,U:) [Bandwidth limited client] 0 0 Client uses limiter, shown as B:#, L:# or U:# in tag !Client with limiter. .*\[B([0-9]){1,2}\].* [Bandwidth liming client] 0 0 Limiter shown with [B#] in description !Fake tag 1 ^<\+\+ V:0\.([12]){1}([12387]){1,2},%[mode],%[hubs],%[slots]>$ [Bad tag] 0 0 Too long version number !Fake tag 2 ^<\+\+ V:0\.2([456]){1}([123]){0,1},%[mode],%[oldhubs],%[slots]>$ [Bad tag] 0 0 Old style hubcount on 0.24 or higer <++ V:0.251,M:P,H:3,S:3> !Fake tag 3 ^<\+\+ V:0\.30([0-7]){1},%[mode],%[oldhubs],%[slots]>$ [Bad tag] 0 0 Old style hubcount in 0.30x !Fake tag 4 ^<\+\+ V:([0-9.]){1,5},%[mode],H:0/0/0,.* [Bad tag] 0 0 Fake hubcount 0/0/0 !Fake tag 5 ^<\+\+ .*".*>$ [Bad tag] 0 0 " found in tag !Fake tag 6 ^<\+\+ .*\\.*>$ [Bad tag] 0 0 \ in tag is a stupid typo !Fake tag 7 (: | ,|, ) [Bad tag] 0 0 Found spaces in the wrong place in the tag !Fake tag 8 ^<\+\+V:%[version],.* [Bad tag] 0 0 No space found in tag between characters + and V !Fake tag 9 ^<\+\+ V:0\.40([0-3]){1},%[mode],%[oldhubs],%[slots]>$ [Bad tag] 0 0 Old style hubcount in 0.40x DC++ Orange ^0\.177o$ ^<\+\+ V:%[version],%[mode],%[oldhubs],%[slots]>$ [Bad Client] 0 0 Old mod with no apparent fake feature dDC++ ^(6\.02|0\.602)$ ^<(dDC|\+\+) V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad Client] 0 0 Mod with non-standard version number, no apparent fake abilities !Missing version number ^<\+\+ V:,%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Fake tag, missing version number !Invalid version number xxx ^<\+\+ V:([0-9]){0,5},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Fake tag, invalid format of version number Invalid version number .xx ^<\+\+ V:\.([0-9]){2,3},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Fake tag, leading 0 missing in version number !Inavlid version number abc ^<\+\+ V:[A-Za-z]{0,1}[.]{0,1}[A-Za-z]{1,9},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Fake tag, letters in version number !Invalid version number 0.xxxABC ^<\+\+ V:0\.([0-9]){2,3}([A-Za-z]){1,7},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Fake tag,version number followed by letters !Invalid version number 0.20x - ^0\.(200|201|202|203|204|205|206|207|208|209)$ ^<\+\+ V:%[version],M:([AP5]){1},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Invalid version number 0.21x - ^0\.(210|212|213|214|215|216|217|218|219)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Invalid version number 0.22x - ^0\.(220|221|222|223|224|225|226|227|228|229)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Invalid version number 0.23x - ^0\.(230|234|235|236|237|238|239)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Invalid version number 0.24x - ^0\.(240|243|244|245|246|247|248|249)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Invalid version number 0.25x - ^0\.(250|252|253|254|255|256|257|258|259)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs],%[slots]>$ [Bad tag] 0 0 Non existing version number !Invalid version number 0.26x - ^0\.(260|264|265|266|267|268|269)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs],%[slots]>$ [Bad tag] 0 0 Non existing version number Invalid version number 0.30x - ^0\.(30|308|309)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Version too high 1 ^<\+\+ V:0\.2([7-9]){1}([0-9]){0,1},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Version too high 2 ^<\+\+ V:0\.3([1-9]){1}([0-9]){0,1},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Version too high 3 ^<\+\+ V:0\.4([1-9]){1}([0-9]){0,1},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number !Version too high 4 0\.((5|[7-9]){1}([0-9]){1}([0-9]){0,1}|6(([0-6]){1}([0-5]){1}|([0-6]){1}([8-9]){1}|([7-9]){1}([0-9]){1})) ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number Version too high 5 ^<\+\+ V:[1-9]{1,9}[.]{0,1}[1-9]{0,9},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad tag] 0 0 Non existing version number .Phantom DC++ ^0\.(232|261|263|301|304|305|306)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),(%[slots]|%[slots],%[l])>$ ^<\.P> [Bad Client] 0 0 Client with Bandwidth Limiting feature BCDC++ mod ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ ^(\[.*(K|(M|M\+))/.*(K|(M|M\+))\]:\[([0-9]){1,10} sl\]|\[([0-9]){1,10} sl\]).* [Bad Client] 0 0 Client with Bandwidth Limiting feature and tag faking possibilities BYDC++ ^0\.(251|301|304)$ ^<\+\+ V:%[version]Backyard,%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad Client] 0 0 OP client made by Mindslayer R2++ personal mod ^0\.(307|401)$ ^<R2\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ .*\[%[version2]\].* ^9$ [Bad Client] 0 1 ^(512/512|1024/512|2048/512|ISDN|Satellite|Cable|DSL|LAN\(T1\)|LAN\(T3\))$ OP client by (R2/R200) R2++ ^0\.(307|401)$ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ .*<R2 Mod \[%[version2]\]>$ ^9$ [Bad Client] 0 1 OP client by (R2/R200) Chp++ ^<Chp\+\+ V:%[version],.* <CHP> [Bad Client] 0 0 Mod made by Chippen, no real fake features. CZDC++ Finn-SF ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ .*(<Finn-SF 0\.30([5-6]){1}\[([A-M]){1}\]>|<Finn-SF-NG 0\.30([5-6]){1}\[([A-M]){1}\]>|<Wannabe SF 0\.30([5-6]){1}\[([A-M]){1}\]>) $ ^(1|3|5|7|9|11)$ [Bad Client] 0 0 Finn-SF Network client based on CZDC++, Bandwidth Limiting capable CZDC++ FFS ^0\.(301|305|306|307|401)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ .*<FFS %[version2]>$ ^(1|3|5|7|9|11)$ [Bad Client] 0 1 FFS Network OP client, Bandwidth Limiting capable CZDC++ 2 - [Bad Client] 0 0 NetLimiter Bandwidth Limiting capable iDC++ (NetLimiter) ^0\.4(02|03|04)$ ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ .*<iDC%[version2]>(#NL#|\{L\})$ [Bad Client] 0 1 OP client, is using NetLimiter iDC++ 0\.(261|263|264|301|305|306|402|403|404) ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ .*<iDC%[version2]>.* [Bad client] 0 1 OP client DCMagmar ^<\+\+ V:%[version],%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ .*<DCMagmar> [Bad Client] 0 0 Based on iDC++ (I think?) DC++k CDM ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ .*<CDM %[version2]>$ [Bad Client] 0 1 OP client DC@fe++ .*<DC@fe\+\+>$ ^(1|2)$ [Bad Client] 0 0 Bandwidth Limiting capable DC++ PossumMod ^v0\.(0\.12|0\.12a|0\.12b)$ <\+\+ V:0.306 - PossumMod %[version],M%[mode],%[hubs],%[slots]>$ [Bad Client] 0 0 Bandwidth Limiting capable DC++p ^0\.401$ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ .*<p %[version2]> [Bad Client] 0 1 ^(28\.8Kbps|33\.6Kbps|56Kbps|ISDN|Satellite|Cable|DSL|LAN\(T1\)|LAN\(T3\))$ Bandwidth limiting capable client by psf8500 DCDM++ ^0\.(306|307|401)$ ^<\+\+ V:%[version],%[mode],%[hubs](,S:([0-9]){1,3}|,S:([0-9]){1,3},O:([0-9]){1,3}|,S:([0-9]){1,3},R:([0-9]){1,2}|,S:([0-9]){1,3},O:([0-9]){1,3},R:([0-9]){1,2})>$ .*<DCDM %[version2]>$ [Bad Client] 0 1 Client Detection mod wit bandwith limiter. DC:PRO ^<DC:PRO V:([0-9A-Z.]){7,9},%[mode],%[hubs],%[slots]>$ ^1$ [Bad Client] 0 0 Multisoure download capabilities, client emulations DHDc++ 1 - ^<DHDc\+\+ V:%[version],M.* [Bad Client] 0 0 OP client by Dashes DiCe!++ (1\.0|1\.1|1\.2|2\.0|2\.1) ^<DiCe!\+\+ V:%[version],M:([12S]){1},%[hubs],%[slots]>$ [Bad Client] 0 0 OP client by iceman50 DiPEDC++ ^0\.306$ ^<DiPEDC\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ ^1$ [Bad Client] 0 0 Dunno, do you? EDC++ <EDC\+\+>.* [Bad Client] 0 0 OP client by AluM FFS .*<FFS %[version2]> [Bad Client] 0 1 FFS network OP client based on StrongDC++ by Jep KoalaDC ^([0]){0}$ \[KDC V:(0.10|0.20|0.30|0.40),%[mode],%[s]\] [Bad client] 0 0 ^(28\.8Kbps|33\.6Kbps|56Kbps|ISDN|Satellite|Cable|DSL|LAN\(T1\)|LAN\(T3\))$ Old faking client MS++V ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ (<MS\+\+V>|Majin\+\+0.3) [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations nDC++ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ ^::\[%[version]([a-z]){0,1}\]:: [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations neXtDC++ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ v\[ ([1-9]){1} \]::\[ ([A-Z0-9]){0,2} \]::\[ ([A-Z0-9]){0,2} \] [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations NMDC emulation DC Client - First Time Login [Bad client] 0 0 Creates bad lock and pk Hash-Exploiters Bot ^2\.02$ ^<DC V:%[version],.* 46 [Bad Client] 0 0 Anti-Piracy Bot powerfulDC++ ^<\+\+ V:0\.([0-9]){2,3}p([0-9]){2},%[mode],(%[hubs]|%[oldhubs]),%[s]([,O:]){0,3}([0-9]){0,9}>$ ^1$ [Bad Client] 0 0 Multisource downloading ptDC ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ .*<pt%[version2]>$ [Bad Client] 0 1 Bandwidth Limiting capable PTDC++ ^0\.25$ ^<\+\+ V:%[version],%[mode],%[hubs](,%[s],PT:1.0|,%[slots],PT:1.0)>$ PTDC\+\+ lite [Bad Client] 0 0 No apparent cheating capabilities, just a weird looking tag rDH++ ^0\.306$ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ .* rDH\+\+\[%[version2]\] $ [Bad Client] 0 1 Multisource downloading, Bandwidth limiting, client emulations Replika ^([0]){0}$ \[REPLiKA\] [Bad client] 0 0 Old cheating client Reverse Connect 0\.(303|304|305|306|401|403) ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ (reverseconnect\.sf\.net|www\.RevConnect\.com) [Bad Client] 0 0 Multisource downloading rmDC++ ^0\.(306E\[1\]|306E\[2\]|306E\[3\]|306E\[4\]|306E\[5\]|306E\[6\]|306F\[1\]|306F\[2\]|306F\[3\]|306F\[4\])$ ^<RMDC\+\+ V:%[version], [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations, non GPL kick the sob SDC - client mod by sulan :) <SDC [Bad Client] 0 0 OP client by Sulan SdDC++ All 3 versions ^0\.(11|12|121)$ ^<SdDC\+\+ V:%[version]([A-Za-z]){1,99},%[mode],%[hubs],%[slots]>$ [Bad Client] 0 0 OP client by Agent 0017 Shadows Direct Connect ^0\.(01|02|03|031|032|033|034|035)$ <SDC V:%[version],M:([AP]){1},%[oldhubs],%[s]>$ [Bad Client] 0 0 ^(28\.8Kbps|33\.6Kbps|56Kbps|IDSN|Satellite|Cable|DSL|LAN\(T1\)|LAN\(T3\))$ No apparent cheat features StrongDC++ with NetLimiter ^1\.00 (RC6|RC7|RC7cvs([1-9]){1})$ ^<StrgDC\+\+ V:%[version],M: .*NetLimiter.* ^(1|3|5|7|9|11)$ [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations StrongDC++ ^1\.00 (RC7cvs([0-9]){2}|RC9cvs([0-9]){2}|RC7|RC8|RC6|RC5|RC4|RC3|RC2)$ ^<StrgDC\+\+ V:%[version],M: [Bad client] 0 0 Multisource downloading, Bandwidth limiting, client emulations StrongDC++ CVS ^1\.00 RC7cvs([1-9]){1}$ ^<StrgDC\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations StrongDC++ Beta - ^1\.00 RC6$ ^<StrgDC\+\+ V:%[version] Beta,M: ^(1|3|5|7|9|11)$ [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations StrongDC++ Debug - ^<StrgDC\+\+ V:%[version] Debug,M: [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations Whos's DC++ <\+\+ V:%[version]who([1-5]){1},%[mode],(%[hubs]|%[oldhubs]),%[slots]>$ [Bad Client] 0 0 Bandwidth limiting capable zDC++ ^0\.(305|306|401)$ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ zDC\+\+\[%[version]([a-z0-9]){1,2}\] $ [Bad Client] 0 0 Multisource downloading, Bandwidth limiting, client emulations zY++ 1 - .*<zY\+\+ %[version2] [Bad Client] 0 1 OP client by AluM zY++ 2 - <zY\+\+ V:%[version],M:.* [Bad Client] 0 0 OP client by AluM X-Dc .*<XDc %[version2]>$ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ [Bad Client] 0 0 ^(28\.8Kbps|33\.6Kbps|56Kbps|ISDN|Satellite|Cable|DSL|LAN\(T1\)|LAN\(T3\))$ No clue xAyiDe's XDC++ .*<XDC\+\+ [Bad Client] 0 0 OP client Unknown IconStatus ^<\+\+ V:([0-9.]){4,5},%[mode],%[hubs],%[slots]>$ ^(([3-9]){1}|([0-9]){2})$ [Bad client] 0 0 DC++ should never have a IconStatus above 2 Unknown client with limiter <\+\+ V:0\. v\[ ([0-9]){1,3} \]::\[ (([DL]){1}([0-9]){1,3} ){1,2}\]::\[ .* \] [Bad client] 0 0 Dont realy know, my guess is a nextDC++ virus and search spammer dude986@hotmail\.com [Bad user] 0 0 Search spam in everywhere and spamming virus links in to main chat DC++ Emulation ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ [Bad Client] 0 0 (Modem|Wireless) DC++ should never have Wireless or Modem in connectiontype Magmar DC ^<+\+\ V:%[version],%[mode],%[hubs],%[slots]>$ ^<MDC\+\+ .*> [Bad Client] 0 0 SababaDC++ ^<\+\+ V:%[version],%[mode],%[hubs],%[slots]>$ <<<sababadcpp\.6x\.to>>> [Bad Client] 0 0 arabic multisource client with kademilla BCDC based client ^<\+\+ V:,%[mode],%[hubs],%[slots]>$ ^\[(64K|128K|256K|512K|768K|1M|1.5M|2M|4M\+)/(64K|128K|256K|512K|768K|1M|1.5M|2M|4M\+)\] [Bad client] 0 0 Client using speed description found in BCDC Version too high 6 <\+\+ V:([1-9]){1}.* [Bad Client] 0 0