Post date: Apr 16, 2012 12:00:00 PM

The specification for identifying mainline clients is the “v” key in the root dictionary of every message.

These are in the wild. I noticed a South Korean client that claimed that it was a uTorrent client (UTz\xAD) that:

114.200.XX.XX:345YY v:UTz\xAD is trying to convince me I’m: 114.200.XX.XX:440ZZ

The port was correct, but the ip was the buggy/malicious clients own.

A Vietnamese ‘uTorrent’ client (UTy\xA3) claimed that I was 192.168.1.1:440ZZ, which while it had the port correct, thought I was on an internal network.