musicisbest Posted March 8, 2010 Report Share Posted March 8, 2010 I've never seen anything like this before...The peers listed for a torrent I'm seeding 62.212.84.2:30099 [FAKE] utorrent/1.8.2.062.212.84.49:0 [FAKE] utorrent/1.8.2.062.212.84.50:0 [FAKE] utorrent/1.8.2.062.212.84.51:0 [FAKE] utorrent/1.8.2.0And their completed percentages are all 0.0. They were uploading at 50 kB/s (total) which is my max U/L bandwidth. I don't know for how long. The combination of "FAKE" client, sequential IPs and 0 percent is fishy to me. Anyone have any ideas on what is happening? Link to comment Share on other sites More sharing options...
moogly Posted March 8, 2010 Report Share Posted March 8, 2010 Surely a poisoner of p2p networks. They 'catch' you (and other peers sharing a specific torrent) with honey pot client and flood your client. You have surely a ton of hashfails for this torrent (see General tab) that's the sign of a torrent poisoner. Link to comment Share on other sites More sharing options...
Switeck Posted March 8, 2010 Report Share Posted March 8, 2010 A search here:http://www.db.ripe.net/whois?form_type=simple&full_query_string=&searchtext=62.212.84.51&do_search=Search...listed them as this:inetnum: 62.212.84.0 - 62.212.84.255netname: LEASEWEBdescr: LeaseWebdescr: P.O. Box 93054descr: 1090BB AMSTERDAMdescr: Netherlandsdescr: www.leaseweb.comAt least that rules out a bunch of consumer ADSL/cable lines that just incidentally are on the torrent. A poisoner seems the most likely explanation. Link to comment Share on other sites More sharing options...
bently Posted March 7, 2011 Report Share Posted March 7, 2011 interesting.Leaseweb used to host a number of torrent trackers, until they lost some court battles. http://www.afterdawn.com/news/article.cfm/2008/07/04/leaseweb_loses_court_appeal_to_breinIt now appears they are hosting some anti-p2p customers that are aggressively attacking the users by poisoning swarms and bleeding bandwidth. Link to comment Share on other sites More sharing options...
tabitha Posted March 7, 2011 Report Share Posted March 7, 2011 The man who has made up his mind to win will never say "impossible ". Link to comment Share on other sites More sharing options...
moogly Posted March 7, 2011 Report Share Posted March 7, 2011 LW is an hosting provider, that's all. Whatever its clients run a tracker or a client farm as honeypot.Just ban the suspicious IP range and you're done. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.