Expiration or removal from DHT Node table
Posted: Thu May 23, 2019 11:54 am
Hi,
How long is an IP address stored in a DHT Node's table?
Recently I was using Shodan to do a quick check-up on my company's IP address. I discovered a server in another country that is running DHT Node on port 6881/udp, and that server has my company's IP address is the DHT Node table! This is a complete surprise and unexpected. We are still trying to track down the offending piece of equipment on our network which we assume is communicating to the DHT Node. What I am trying to figure out is if this communication is something recent, or could this communication have happened in the past. Knowing how long a DHT Node stores an IP address in the table before removing/expiring it would help me answer that question.
Any help is much appreciated!
- Fred
How long is an IP address stored in a DHT Node's table?
Recently I was using Shodan to do a quick check-up on my company's IP address. I discovered a server in another country that is running DHT Node on port 6881/udp, and that server has my company's IP address is the DHT Node table! This is a complete surprise and unexpected. We are still trying to track down the offending piece of equipment on our network which we assume is communicating to the DHT Node. What I am trying to figure out is if this communication is something recent, or could this communication have happened in the past. Knowing how long a DHT Node stores an IP address in the table before removing/expiring it would help me answer that question.
Any help is much appreciated!
- Fred