Log In     Register    

Help and Support
Ask a question, report a problem, request a feature...
<<  Back To Forum

Fraudulent % in peer list items

by mbe on 2026/01/26 12:18:59 PM    
I'm seeing a number of peers (again a Russia issue) claiming 100% file availability. As the source is under my control exclusively and no upload has happened (yet), this 100% claim is 100% wrong.
What are the consequences for other clients trying to connect and download?
In case that should impact honest users: is there a way to automatically identify and blocks those instances?
by Guest on 2026/01/27 09:48:56 AM    
You should expect that any torrent announced to the public DHT will be scraped by bots. Because it's public. There are well known sites, and those are quite useful in certain cases. To prevent that, don't use public torrents or switch to new protocol (limited to other Tixati users).

Bots from 31.200.249.0/24 subnet have been running for quite some time, but those are not the only ones that exist. They are just the most noticeable because of aggressive connection attempts. You also don't know who really owns the project, and to whom the collected data gets resold (I expect that there is more than one customer).
by mbe on 2026/01/29 01:08:44 AM    
Yes, and this has been discussed a number of weeks ago.
My question focusses on their 100% claim and its consequences.
by Guest on 2026/01/29 10:36:27 AM    
There are no consequences, those must be DHT Scrapers or DHT Crawlers that are used by websites like m***etdl or u**dex etx, to scrape metainfo which they then display on their websites.
100% must be indicative of the metadatainfo that they have acquired when we users upload torrents via tixati.
It is nothing just right click and ignore them.
by Guest on 2026/01/29 03:23:28 PM    
31.200.249.0/24 certainly looks like an anti-P2P botnet. It is also very noisy and extremely obvious in its operation.
I baited it with around a sample of 20 completely random unrelated public infohashes and it visited every one of them, so you can conclude their is extensive tracking behind those IP ranges.

The bitfield is always faked from this botnet as 100%, which is all 1's in a protocol message, its actually a really stupid thing to do and demonstrates a total lack of understanding.

You'll never get any files from this network, they are protocol only messages and unsupported by any real files or transfers.

The consequences?

It won't serve you any files that you were hoping for?
They might capture your IP, the infohash, your client identifier, your bitfield (0-100 of your percentage complete, calculated from bitfield 'pieces' your software sent to them)

Why not just block this nuisance in the Tixati firewall?

185.16.215.0/24 - Likely related to above botnet as IP's from this range also seem to be everywhere all the time.
by Guest on 2026/01/30 10:10:58 AM    
I'm blocking them already, but not (yet) through the Tixati firewall - TXs for the hint.
by Guest on 2026/01/30 10:42:01 AM    
PS: would those wrong 100% lure interested users into a trap (collect their IP) or even obstruct their download from real sources?




This web site is powered by Super Simple Server