eztv.wf | eztvstatus.org
Search title:  
TV Packs only
 
💬

strange peers on sladinki007.net tracker send bad data?

Join the conversation
🏠 Forum » General » strange peers on sladinki007.net tracker send bad data?
Posted at 15/04/2007, 03:28
#28840
hi there,
i've noticed a strange peer list while downloading. consecutive ips, all using
azureus/2500. the thing is that i ger hundreds of hashfails, all from that
segment of ips (64.93.xx.xx).
i'd like to know if this happens to someone else, or if this is just with me.

a small segment of my peers... strange ehh?.. all azureus/2500.
----------
.
.
.
.
64.93.88.100:18228
64.93.88.103:65535
64.93.88.104:65535
64.93.88.123:65535
64.93.88.130:25775
64.93.88.14:65535
64.93.88.160:63749
64.93.88.161:65535
64.93.88.163:19508
64.93.88.164:65535
64.93.88.165:65535
64.93.88.167:65535
64.93.88.17:65535
.
.
.
.
-----------
Posted at 16/04/2007, 08:33
#29108
i've read about that. they try to "poison" the torrent so there is only bad data
going around. i've seen it on some torrent comments on the pirate bay.
eventually, somehow, there is only bad data and no one can get the torrent. what
torrent were you downloading? just wondering.
Posted at 16/04/2007, 13:26
#29146
*update*
peerguardianii informs it's most net2ez ip's. amazingly, it's currently blocking
around 20 attempts/s. this guys must have bw to spare!

i was dling galactica season3.. all torrents tracked by ___.sladinki007.net.
my guess is that this tracker is able to export the hashes of the torrents it's
tracking. so the "bad guys" are using it to dump all torrents tracked by it.

might there be a way to explicitly ban azureus/2500 connections, or blacklist
this ip's at tracker level? that's where the attacker got our ip's.

what a futile attack.. trying to cover the sun with a finger. stopping
technology has always been an senseless effort.
ctp
Posted at 16/04/2007, 18:54
#29194
banning all legitimate az v2.5.0.0 clients, even when you already have the
offending netblocks blocked by pg doesn't seem at all extreme to you ?

net2ez is just a hosting company - no way of knowing from publicly available
info who is running the spoiler attack from there.

my advice - just get used to this tactic, and keep your blocklist up to date.
there have been variants of it going on for a few years now, and this is one
of the milder poisoning attempts. some of the campaigns run by mediasentry on
hbo shows have almost amounted to ddos attacks at times.

all a bit futile, as you say, but the corporate suits seem to think they have
to be seen to be doing *somthing*, no matter how useless.
Posted at 16/04/2007, 22:49
#29222
as you say, banning legit az users might be kind of extreme, but checking on the
client\'s list, capturing and sorting it, spoilers and az2500 match 1 on 1.
legit az users are far past that version. newbies already have a newer version,
and old users know the rule.. update update and update.
i have to say that by my count, there are no legit az2500 users left.
a different approach would be.. az2500+1 hash fail = ban.. the rest, w8t for 5
hf before ban.
that i\'ll like better, if it were possible to implement on utorrent.
Posted at 23/04/2007, 01:21
#30443
so i'm wondering....

would it be possible to run peer guardian 2 on the tracker ?

(forgive my ignorance here).

but if peer guardian 2 was running on the tracker and (for example) media sentry
tried to jump on to the torrent. would the tracker actively refuse media
sentry's attempts to join the swarm ?

just a thought as to filtering the tracker.
also if the tracker is refusing them connections would their list of seeders
/ leechers not be updated ?..

i know this would stop legitimate users who have been blacklisted by the block
sites... ( for example a whole range from a dodgy carrier ((isp)) but surely
they would be in the minor..

just an idle thought.

tonsar
Posted at 23/04/2007, 05:39
#30487
dht & pex would negate that idea.
all it would take is for one member of the swarm to not be using $whatever
blocklist, and then the whole thing is wide open.
Posted at 24/04/2007, 18:55
#30825
i have definitely experienced this also.

someone from paramount was doing it to a star trek ds9 gigatorrent... mass
hashfails all coming from consecutive ip's. i've seen it on an x-files torrent
also.

but i haven't seen it happen since i switched to utorrent from bitcomet...
ssl  EZTV RSS EZTV Status | EZTV API | upload Upload | DMCA: [email protected]