Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

观测到使用正常qBittorrent peer ID的吸血客户端 #110

Open
maidmeow4 opened this issue Aug 18, 2024 · 7 comments
Open

观测到使用正常qBittorrent peer ID的吸血客户端 #110

maidmeow4 opened this issue Aug 18, 2024 · 7 comments
Labels
discovery New discoveries

Comments

@maidmeow4
Copy link
Contributor

多个400MB左右的种子,上传量高达10GB,会汇报进度。
AS4837 36.248.0.0/14 China Unicom Fujian Province Network

图片

@LMDM387
Copy link

LMDM387 commented Aug 19, 2024

已检查到
客户端为“qBittorrent/4.6.5”,吸的种子多数为新番
已经观测到部分IP吸了两倍种子大小的流量
十成是吸血的,地址有十几个个,符合规则“125.77.27.0/24”
QQ图片20240819194210

连qbit都拿来吸血,这群人是真的丧心病狂
==============edit=================
183.131.169.0/24
这个IP段也是用qBit吸血的

@maidmeow4
Copy link
Contributor Author

maidmeow4 commented Aug 21, 2024

新发现的,58.241.88.0/24 , 使用qbittorrent 4.6.6进行吸血,多个在同一网段的IP同时下载多个种子

#112

@Akarinnnnn
Copy link

[2024-08-25 21:19:39][CheckPeer_AddBlockPeer (Bad-Progress_Uploaded)] 125.77.27.69:35522 "-qB4650-"|"qBittorrent/4.6.5" (TorrentInfoHash: eaa37fa1ec759c2e7132183b6db28820003943d1, TorrentTotalSize: 239.26 MB, PeerDlSpeed: 0.00 MB/s, PeerUpSpeed: 0.71 MB/s, Progress: 26.93%, Downloaded: 0.00 MB, Uploaded: 198.80 MB).

这个更离谱,五倍

@Simple-Tracker Simple-Tracker added the discovery New discoveries label Aug 27, 2024
@Simple-Tracker
Copy link
Owner

Simple-Tracker commented Aug 27, 2024

感谢反馈!

除依赖项目 PBH-BTN/BTN-Collected-Rules 外, 现也引入 Simple-Tracker/qBittorrent-ClientBlocker:ipBlockList.txt 作为另一 IP 库来源. 欢迎所有用户一起通过修改文件来完善它, 须提供的信息包括: InfoHash/IP-CIDR/上传量/Torrent 大小, 并满足一定特征, 如相同 IP-CIDR 下多 IP 并发单个 Torrent 或 上传量已(远远)大于 Torrent 大小 等... 同时, 也鼓励向依赖项目同时回报这些问题.

另外, 也欢迎有精力的用户自行维护一 IP 库, 以更快更及时的解决问题. 现 ipBlockListURL 也已支持同时添加多个来源 (并去重).

@sorayuki
Copy link

112.87.15 开头的很多IP,地址非常集中,端口各不相同
Deluge 1.3.15 客户端,-DE13F0-
一个新番种子能连一堆这种东西同时吸血
比如这些种子:

9c2c8a0519547f4d50dff583bd006a6fc9818ed7
d42e7cbad84f70ad950cd599912261b19d4efd09
54c0f7115397580263dbede068b4a1e645a009e2
8cf4537550e1bd971e7a8881e4e99799f577e3ff
bbbb4e168b1c8ea759cb9a11f5baa739c7d96e30

@LMDM387
Copy link

LMDM387 commented Aug 29, 2024

112.87.15 开头的很多IP,地址非常集中,端口各不相同 Deluge 1.3.15 客户端,-DE13F0- 一个新番种子能连一堆这种东西同时吸血 比如这些种子:

9c2c8a0519547f4d50dff583bd006a6fc9818ed7
d42e7cbad84f70ad950cd599912261b19d4efd09
54c0f7115397580263dbede068b4a1e645a009e2
8cf4537550e1bd971e7a8881e4e99799f577e3ff
bbbb4e168b1c8ea759cb9a11f5baa739c7d96e30

直接用112.87.15.0/24全部禁用就行了

@maidmeow4
Copy link
Contributor Author

观测到 112.87.15.* 使用 Deluge 1.3.15 大量吸血

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
discovery New discoveries
Projects
None yet
Development

No branches or pull requests

5 participants