torrust / torrust-demo

CI and configuration for the Torrust live demo.
https://index.torrust-demo.com
0 stars 0 forks source link

Potencial DDoS attack #12

Open josecelano opened 2 months ago

josecelano commented 2 months ago

I've downloaded the tracker database from the demo site (2024-08-12).

It contains 56.448.666 infohashes, but some seem fake.

Like:

sqlite> SELECT info_hash FROM torrents ORDER BY info_hash ASC LIMIT 100;
0000000000000000000000000000000000000000
0000000000000000000000000000000000000002
0000000000000000000000000000000000000003
0000000000000000000000000000000000000005
0000000000000000000000000000000000000006
0000000000000000000000000000000000002f09
0000000000000000000000000000004806000014
000000000000000000000000000000ba14000000
000000000000000000000000000000eb02000014

Others seem to follow a sequence:

fffffb4e6e562bf1396905bc4df0b9bb0f495f6e
fffffb88f51fb8efa09beb1de84e893b96928ebd
fffffbeac8d1993dd614aed428511f5ec1e8a603
fffffc4afad47628c89fc4e101a9edc2c635ba91
fffffcb40e97066bbb633b3e3c4d456bb5b3b642
fffffd71e09d9c4c2558984308e8a5dbd8a670a6
fffffe2a13d0dc9bec8c477667a0d46b2752d968
fffffe5b2b0e1e76292a70f71dfe559d53525dc1
ffffff04aaa42a5bee8de0266bdd42688c8b7f19
ffffff09debcb8fa36815e9c3af47ce9a4b5d762

I don't know how many are real and fake.

We remove peerless torrents from the torrents repository but don't clean persisted torrents from the database.

cc @da2ce7