Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potencial DDoS attack #12

Open
josecelano opened this issue Sep 6, 2024 · 0 comments
Open

Potencial DDoS attack #12

josecelano opened this issue Sep 6, 2024 · 0 comments
Labels
Security Publicly Connected to Security

Comments

@josecelano
Copy link
Member

I've downloaded the tracker database from the demo site (2024-08-12).

It contains 56.448.666 infohashes, but some seem fake.

Like:

sqlite> SELECT info_hash FROM torrents ORDER BY info_hash ASC LIMIT 100;
0000000000000000000000000000000000000000
0000000000000000000000000000000000000002
0000000000000000000000000000000000000003
0000000000000000000000000000000000000005
0000000000000000000000000000000000000006
0000000000000000000000000000000000002f09
0000000000000000000000000000004806000014
000000000000000000000000000000ba14000000
000000000000000000000000000000eb02000014

Others seem to follow a sequence:

fffffb4e6e562bf1396905bc4df0b9bb0f495f6e
fffffb88f51fb8efa09beb1de84e893b96928ebd
fffffbeac8d1993dd614aed428511f5ec1e8a603
fffffc4afad47628c89fc4e101a9edc2c635ba91
fffffcb40e97066bbb633b3e3c4d456bb5b3b642
fffffd71e09d9c4c2558984308e8a5dbd8a670a6
fffffe2a13d0dc9bec8c477667a0d46b2752d968
fffffe5b2b0e1e76292a70f71dfe559d53525dc1
ffffff04aaa42a5bee8de0266bdd42688c8b7f19
ffffff09debcb8fa36815e9c3af47ce9a4b5d762

I don't know how many are real and fake.

We remove peerless torrents from the torrents repository but don't clean persisted torrents from the database.

cc @da2ce7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Security Publicly Connected to Security
Projects
None yet
Development

No branches or pull requests

1 participant