Hacker News Reader

Comment by donmcronald | Hacker News Reader

That says I downloaded ssni-845-C.mp4 7GB (XXX) three days ago, but I didn't. WTF is that all about?

As others have already mentioned, some trackers poison the well with random IP addresses so that getting peer lists from trackers alone is not confirmation that that peer actually is sharing that torrent.

Dynamic IP or CGNAT by your ISP.

Nope. DHCP IP, but they're effectively static. It hasn't changed for 2 years.

> WTF is that all about?

Doing a Google search… someone likes the acting abilities of Yua Mikami.

I've got to call bullshit on that site. It comes up with a "likes porn" tag, claims porn downloads, and has a huge VPN ad at the top. That's seems like sketchy, fake, scareware tactics to me.

AFAIK trackers would randomly put IP addresses into the peer lists that they return, to provide plausible deniability for everyone[1]. If the site just grabs the peer list without validating them (ie. attempting a connection), that might be responsible for the false positives.

[1] https://en.wikipedia.org/wiki/Opentracker

Someone else must have downloaded it from your current IP address.

That's extremely unlikely. It says last seen at 8:30 AM on Thursday which makes no sense. I have a dedicated VLAN that routed over a VPN for anything not 100% super legit.

You must be somebody else's VPN. As it were. There are plenty of uses for pwned machines. Since they are free, the uses don't even need to makes sense.

No, I ran a test through two linux VPSes that I control, and both of them show me downloading something I didn't. I'm reasonably sure that neither of my boxes were compromised, although if we want confirmation we can get someone who works at a hosting company to check with an IP that hasn't been routed in months. I posed a explanation in a sibling comment: https://news.ycombinator.com/item?id=24256890

Reply on news.ycombinator.com