Great research work, thanks! I didn't think of contacting the host, but I'd have dismissed the idea, as they'd have likely told me it's not their direct responsibility and to message the site owner directly. In any case, your edit was encouraging, but I realized I needed a better way to test this than checking some torrents in my client. First, I appended this to my nmap-payloads file (newer versions may already include a probe, but I haven't updated from 7.70).
Code:
# BitTorrent UDP tracker
udp 6969,80
# Magic number
"\x00\x00\x04\x17\x27\x10\x19\x80"
# Action (0x0 = connect)
"\x00\x00\x00\x00"
# Transaction ID
"\x1e\xdf\xad\x18"
Then I did an Nmap UDP scan (port 53 was included purely as a control group, since nothing should be running there).
Code:
C:\>nmap -sU -Pn -n --resolve-all -vv -p 6969,80,53 -r -T2 --scan-delay 1 --version-intensity 0 --ttl 64 --noninteractive tracker.openbittorrent.com
Starting Nmap 7.70 ( https://nmap.org ) at 2023-01-28 20:47 SA Eastern Standard Time
Initiating UDP Scan at 20:47
Scanning 7 hosts [3 ports/host]
Discovered open port 80/udp on 45.154.253.10
Discovered open port 80/udp on 45.154.253.5
Discovered open port 80/udp on 45.154.253.7
Discovered open port 6969/udp on 45.154.253.5
Discovered open port 80/udp on 45.154.253.9
Discovered open port 6969/udp on 45.154.253.7
Discovered open port 6969/udp on 45.154.253.10
Discovered open port 80/udp on 45.154.253.8
Discovered open port 6969/udp on 45.154.253.9
Discovered open port 6969/udp on 45.154.253.8
Completed UDP Scan at 20:48, 21.83s elapsed (21 total ports)
Nmap scan report for tracker.openbittorrent.com (45.154.253.10)
Host is up, received user-set (0.25s latency).
Scanned at 2023-01-28 20:47:55 SA Eastern Standard Time for 16s
PORT STATE SERVICE REASON
53/udp closed domain port-unreach ttl 50
80/udp open http udp-response ttl 50
6969/udp open acmsoda udp-response ttl 50
Nmap scan report for tracker.openbittorrent.com (45.154.253.9)
Host is up, received user-set (0.25s latency).
Scanned at 2023-01-28 20:47:55 SA Eastern Standard Time for 19s
PORT STATE SERVICE REASON
53/udp closed domain port-unreach ttl 50
80/udp open http udp-response ttl 50
6969/udp open acmsoda udp-response ttl 50
Nmap scan report for tracker.openbittorrent.com (45.154.253.8)
Host is up, received user-set (0.25s latency).
Scanned at 2023-01-28 20:47:55 SA Eastern Standard Time for 21s
PORT STATE SERVICE REASON
53/udp closed domain port-unreach ttl 50
80/udp open http udp-response ttl 50
6969/udp open acmsoda udp-response ttl 50
Nmap scan report for tracker.openbittorrent.com (45.154.253.6)
Host is up, received user-set.
Scanned at 2023-01-28 20:47:55 SA Eastern Standard Time for 13s
PORT STATE SERVICE REASON
53/udp open|filtered domain no-response
80/udp open|filtered http no-response
6969/udp open|filtered acmsoda no-response
Nmap scan report for tracker.openbittorrent.com (45.154.253.4)
Host is up, received user-set.
Scanned at 2023-01-28 20:47:55 SA Eastern Standard Time for 21s
PORT STATE SERVICE REASON
53/udp open|filtered domain no-response
80/udp open|filtered http no-response
6969/udp open|filtered acmsoda no-response
Nmap scan report for tracker.openbittorrent.com (45.154.253.7)
Host is up, received user-set (0.26s latency).
Scanned at 2023-01-28 20:47:55 SA Eastern Standard Time for 16s
PORT STATE SERVICE REASON
53/udp open|filtered domain no-response
80/udp open http udp-response ttl 50
6969/udp open acmsoda udp-response ttl 50
Nmap scan report for tracker.openbittorrent.com (45.154.253.5)
Host is up, received user-set (0.26s latency).
Scanned at 2023-01-28 20:47:55 SA Eastern Standard Time for 15s
PORT STATE SERVICE REASON
53/udp open|filtered domain no-response
80/udp open http udp-response ttl 50
6969/udp open acmsoda udp-response ttl 50
Read data files from:
Nmap done: 7 IP addresses (7 hosts up) scanned in 22.27 seconds
Raw packets sent: 30 (1.272KB) | Rcvd: 14 (712B)
Note how the IPs that end in 6 and 4 are completely unresponsive; scanning them individually resulted in this...
Code:
C:\>nmap -sU -Pn -n -vv -p 6969,80 -r -T2 --scan-delay 1 --max-retries 10 --version-intensity 0 --ttl 64 --noninteractive 45.154.253.6 45.154.253.4
Starting Nmap 7.70 ( https://nmap.org ) at 2023-01-28 20:51 SA Eastern Standard Time
Initiating UDP Scan at 20:51
Scanning 2 hosts [2 ports/host]
Completed UDP Scan at 20:51, 4.81s elapsed (4 total ports)
Nmap scan report for 45.154.253.6
Host is up, received user-set (0.25s latency).
Scanned at 2023-01-28 20:51:42 SA Eastern Standard Time for 3s
PORT STATE SERVICE REASON
80/udp closed http port-unreach ttl 50
6969/udp closed acmsoda port-unreach ttl 50
Nmap scan report for 45.154.253.4
Host is up, received user-set (0.27s latency).
Scanned at 2023-01-28 20:51:42 SA Eastern Standard Time for 5s
PORT STATE SERVICE REASON
80/udp open|filtered http no-response
6969/udp closed acmsoda port-unreach ttl 50
Read data files from:
Nmap done: 2 IP addresses (2 hosts up) scanned in 5.16 seconds
Raw packets sent: 5 (220B) | Rcvd: 3 (216B)
Meaning there's nothing listening on those ports as of this writing. The other addresses work consistently well, though, which is great news. Although I should note that going through months of downtime with the owners not taking any action or noticing at all is not very assuring...
Bookmarks