The Mysterious And Scary BitTorrent Monitoring Site

[cahax0r]

27th April 2010 15:20

While many BitTorrent users operate their clients without a second thought, many are well aware that everything they can do has the potential to be monitored by someone, somewhere. The data available in BitTorrent swarms is necessarily public – if it wasn’t, no-one would be able to share anything with anyone.

The open nature of this amazing file-sharing system certainly has its benefits, but for many its greatest strength is also its greatest weakness. Organizations like the IFPI, RIAA, MPAA and others have spent a great deal of money over the years monitoring BitTorrent and other file-sharing networks. But what if that same feature was available to anyone right now via any browser?

That appears to be one of the functions behind a new and slightly unsettling website. After clicking past the title page, one is confronted by a message about the user’s IP address and location which is derived from a standard traceroute (we used a commercially available VPN for tests) but it is the note at the bottom that provokes the most interest.

View report

“View Complete Report” ? – Here goes….

Recorded BitTorrent downloads

Gulp. Apparently this interface provides the ability to monitor BitTorrent swarms (we don’t know and couldn’t find out which ones) for the IP addresses on the subnet of the accessing user’s IP address and show torrents that have been shared at some point.

After jumping onto a few legal torrents tracked by public trackers, we used the interface to try and find our test IP address in the reports but failed to locate it. There could conceivably be some sort of time delay but we were simply unable to confirm the exact mechanism of operation or, indeed, if the results are ‘real’ at all.

However, if the results are real (and they do look very convincing), then there is an even more worrying feature. Not only is it possible to search for torrents being shared on the user’s IP address, but also any IP address of the user’s choosing by simply reforming the end of the tracking URL to include /?host=X.X.X.X.

But it doesn’t stop there. At the bottom of one the pages is a link for the ‘Auditor Console’…

Auditor Console

This CLI-type affair accepts a few common commands. Typing ‘ls’ brings up a list of available directories, while the ‘cd [directory name here]‘ command allows access to them.

One of the folders provides monitoring of a few select IRC channels while others appear to be non-functioning. Others contain lots of documents about monitoring and surveillance including wire-tapping requests for certain ISPs.

Having looked around this site and done quite a bit of research trying to find out who is behind it, TorrentFreak found some rather interesting links back to several individuals which leads us to go “Hmmmmm……”. We won’t reveal them here right now, but instead show you this very creepy video we found while digging around.

http://vimeo.com/moogaloop.swf?clip_...p;fullscreen=1

But enough of the chit-chat, you should try this for yourselves. We’d also like to see if you find what we found. Have fun, and feel free to email us at tips@torrentfreak.com with anything interesting you may find, or go ahead and write about your discoveries in the comments.

I have had discussions with other people on other forums and some believe its fake, but I can assure you its not.

I just tried it and it does have me myself on report. I blanked out my IP as I do not hand it out publicly but Meningrey.Net had my whole IP up.

86.xx.xx.xx Dear John.2010.DvdRip.Xvid {1337x}-Noir

Doh! Which i downloaded from here this URL on ThePirateBay last week:-
http://thepiratebay.org/torrent/5495...iD_1337x_-Noir

So I suppose the main aspect we do not know is how much is being logged. I will assume that all / most public trackers are being monitored but private should be pretty safe as I download quite alot of stuff from diwana and none of that is logged.

Try it and post back your findings:-

www.meningrey.net

cahax0r Reviewed by cahax0r on 28th Apr 2010. The Mysterious And Scary BitTorrent Monitoring Site 27th April 2010 15:20 I have had discussions with other people on other forums and some believe its fake, but I can assure you its not. I just tried it and it does have me myself on report. I blanked out my IP as I do not hand it out publicly but Meningrey.Net had my whole IP up. Rating: 5

[-Im.z2ight-]

I only have 3 downloads and 1 i never downloaded

[BlaZe]

Lame
http://o.imm.io/ou0.png

[CJ]

Its fake, coz I havent done any of the download as the report is showing & how the hell any site can afford to save data of All the IPS in the world, what they have downloaded & all. Its not just 5 MB data. It would be PBs of Data.

Ps...PB is petaByte