Log In
Register
Home
News
Support
Forum
Donate
Help and Support
Ask a question, report a problem, request a feature...
<< Back To Forum
Fraudulent % in peer list items
by
mbe
on 2026/01/26 12:18:59 PM
I'm seeing a number of peers (again a Russia issue) claiming 100% file availability. As the source is under my control exclusively and no upload has happened (yet), this 100% claim is 100% wrong.
What are the consequences for other clients trying to connect and download?
In case that should impact honest users: is there a way to automatically identify and blocks those instances?
by
Guest
on 2026/01/27 09:48:56 AM
You should expect that any torrent announced to the public DHT will be scraped by bots. Because it's public. There are well known sites, and those are quite useful in certain cases. To prevent that, don't use public torrents or switch to new protocol (limited to other Tixati users).
Bots from 31.200.249.0/24 subnet have been running for quite some time, but those are not the only ones that exist. They are just the most noticeable because of aggressive connection attempts. You also don't know who really owns the project, and to whom the collected data gets resold (I expect that there is more than one customer).
by
mbe
on 2026/01/29 01:08:44 AM
Yes, and this has been discussed a number of weeks ago.
My question focusses on their 100% claim and its consequences.
by
Guest
on 2026/01/29 10:36:27 AM
There are no consequences, those must be DHT Scrapers or DHT Crawlers that are used by websites like m***etdl or u**dex etx, to scrape metainfo which they then display on their websites.
100% must be indicative of the metadatainfo that they have acquired when we users upload torrents via tixati.
It is nothing just right click and ignore them.
by
Guest
on 2026/01/29 03:23:28 PM
31.200.249.0/24 certainly looks like an anti-P2P botnet. It is also very noisy and extremely obvious in its operation.
I baited it with around a sample of 20 completely random unrelated public infohashes and it visited every one of them, so you can conclude their is extensive tracking behind those IP ranges.
The bitfield is always faked from this botnet as 100%, which is all 1's in a protocol message, its actually a really stupid thing to do and demonstrates a total lack of understanding.
You'll never get any files from this network, they are protocol only messages and unsupported by any real files or transfers.
The consequences?
It won't serve you any files that you were hoping for?
They might capture your IP, the infohash, your client identifier, your bitfield (0-100 of your percentage complete, calculated from bitfield 'pieces' your software sent to them)
Why not just block this nuisance in the Tixati firewall?
185.16.215.0/24 - Likely related to above botnet as IP's from this range also seem to be everywhere all the time.
by
Guest
on 2026/01/30 10:10:58 AM
I'm blocking them already, but not (yet) through the Tixati firewall - TXs for the hint.
by
Guest
on 2026/01/30 10:42:01 AM
PS: would those wrong 100% lure interested users into a trap (collect their IP) or even obstruct their download from real sources?
Add Reply
<< Back To Forum
This web site is powered by
Super Simple Server