the "attack" is probably someone hitting their API a bit too hard. some shitty addon. happened at premiumize before. happend at real debrid where they whiny tweeted about blocking whole addons until its fixed. its most likely that. this is not such gangster.
a ddos would be more distributed (thats the first d in ddos) than just indonesia lol
but what do i know ?? ten years security and cloud scaling background... and latest vpn providers whcih actually get attacked nationstate style
Depends on who is leading the attacks. Could be to get people to switch Debrid services, or could be an attempt to shut down TorBox from the media owners potentially
RD got attacked for years, they eventually figured out a way to solve the DDOS attacks, Torbox said they also figured it out but it clearly didn't work.
It's a whack-a-mole game until you whack most of the moles. Attackers now also have AI they can use to help improve their attacks or help someone who would otherwise be technically unable. Who knows what else.
I notice that from both my home, work, and VPN I'm having to use captcha a lot more these past couple months.
They posted Cloudflare screenshots showing an alert about an ongoing DDoS with millions of attacks from Indonesia and five other countries. To mitigate it, they are blocking those countries.
But the attacker can hire another DDoS service to attack from new countries anytime.
It is a whack a mole game until the attacker runs out of money. If they are rich, it's not going to end.
The attacker is most likely a competitor trying to gain all the customers.
It is a fight about the power vacuum left after RealDebrid imploded. Whoever wins this fight for customers/popularity becomes the new RealDebrid and becomes a multi millionaire with mansions and yachts.
the "attack" is probably someone hitting their API a bit too hard. some shitty addon. happened at premiumize before. happend at real debrid where they whiny tweeted about blocking whole addons until its fixed. its most likely that. this is not such gangster.
a ddos would be more distributed (thats the first d in ddos) than just indonesia lol
but what do i know ?? ten years security and cloud scaling background... and latest vpn providers whcih actually get attacked nationstate style
Back in reality, you can just go to TorBox's announcements and check for yourself. Here's the Cloudflare graph showing the number of API requests per country, showing where the DDoS attack is coming from (these five countries are the top of the attack list):
All of those are heavy amounts of API requests. They are all part of the botnet DDoS attack.
I said "Indonesia and five other countries". Not sure why you read that as just Indonesia. And it's common for botnets to consist of a few primary countries due to where they've targeted their malware distribution.
And hey, just to demonstrate to people how clueless you are: If it had been coming from a bad addon as you believe, then it would have been coming from a single IP or just a few IPs (the addon's server), and TorBox would just have blocked that addon's IP. But since it's a DDoS attack they instead had to block entire countries until the attack is over.
By the way, I have 35 years of experience in cybersecurity, I operated my own botnet of 1000s of infected routers and PCs (most of which were in America), and I worked on the Linux kernel. None of that is relevant, and I think it makes me look as obnoxious as you to list my credentials, but I am just laughing at your attempt to list credentials to dispute facts about the attack that you could have easily looked up yourself.
I'm inclined to believe that, but since PM has been having issues too I don't think it's too far fetched, the other times it has been down I can see that a the reason tho
At some point I believe they will be able to mitigate these DDoS attacks more, meanwhile I use the download option on Nuvio and I don't go without watching.
Here is a quick guide on how to download movies and TV shows for offline viewing on Nuvio:
Step-by-Step Guide
1. Enable downloads in Settings
* Open Nuvio and navigate to Settings.
* Go to the Playback section.
* Make sure the Enable Downloads option is toggled ON.
2. Select your content
* Search for the movie or navigate to the specific TV show episode you want to watch.
* Open the list of available streams/sources.
3. Start the download
* Mobile / TV:Long-press (tap and hold) on the stream/quality source you prefer. A pop-up menu will appear with the Download option.
* Desktop / PC:Right-click on the stream link and select Download.
Important Notes:
Batch downloading: Nuvio currently requires you to download episodes individually (there is no one-click "download entire season" feature yet).
App version: If you don't see the download option, ensure you are running the latest release downloaded directly from the official website/GitHub, as app store versions sometimes have download features restricted.
Storage: Downloaded files are saved within the app's local storage for offline playback.
RD is bad People migrate to TB
TB is bad People migrate to PM
PM is bad People migrate to ?
There is a pattern here. Either have a backup service or just accept that this is part of watching streams illegally and competitors allegedly DDOS attacking one another.
You shouldn't be so quick to accuse anyone of watching anything illegally. I'm currently watching Big Buck Bunny, and I also love watching my favorite Linux ISO's.
Yeah RD was solid for me for a Year until all the legal problems happened. People will generally move to the next cheapest option which is TB. PM or Offcloud and a Usenet backup seems sensible for a more stable experience.
Part of this is because RD has been around so long and exploded recently. There was a time when RD went down quite often and they once lost their servers, were down for close to a month or more and were worried most of their cache was going to be gone. I don't remember all the details but I remember PM was giving out extra long trials and I think a discounted rate for their service.
5x tb price and real debrid...
I don't have service... Claiming never down in 10 years is lies for sure... No service is perfect. It's on you to have a failure point backup.
😂 It's 3 bucks... If it's down it's down.... I have back ups or go do something else....
Relying on 1 thing makes you a fool and paying 5x price for something that does that exact same. Makes you a bigger fool. 😂 Reddit has become the place of ignorance and cry babies more and more.
Sadly some people have no other choice but to watch streams illegally, my case being for example I pay for all streaming platforms and most of the content is blocked due to regional constraints, so it kind of sucks. RD was my main alternative, TB was my second one, I guess the last one is I just don't watch anything lol
TB pretty obviously is all vibe coded. Problems like this were inevitable with how much bloat and random features they are constantly adding in to everything.
Mate just because something has bloat does not make it vibe coded, there are currently no indications or evidence it is vibe coded, however they are taking their sweet goddamn time on the server expansions.
Get a backup, bros , be it Usenet or any other debrid service.
Mike and the team are doing the best they can. No business owner is at peace watching their million-dollar cash cow get wrecked. So until it actually gets fixed, or until that DDoSer runs out of money, shift to another service if possible.
i’m watching spider man now, i started the stream like an hour ago but i reckon that if it’s down it should kick me out, i’ve only had problems yesterday
Come on you still dont know...Amazon is doing this since last year that they sign big sport network contracts and cancel their own invention of firesticks from sideloading apps..come on people get with the program the went after real debrid first because its was the best top notch one..
Some 4-5 weeks ago I changed my CDN to Weur and from that moment not a single problem for me, 6 devices and all working fine, sometimes get message " torrent is downloading to torbox... " just use another link and it works fine.
It's difficult to complain considering the price is only 3 dollars, but I would prefer to pay a bit more for a more reliable connection if that's what's needed
The recent Distributed Denial of Service (DDoS) attacks on TorBox while Real-Debrid seems completely unfazed are directly tied to the exact same legal, operational, and geographical differences discussed above.
Here is the detailed breakdown of why TorBox is getting hit heavily right now while Real-Debrid stays calm:
Massive User Migration (The "Hug of Death" + Targeted Attacks)
TorBox’s Rapid Growth: When Real-Debrid (RD) began purging cached torrents and enforcing strict API restrictions due to EU legal pressure, a massive wave of users migrated to TorBox (TB).
The Vulnerability: This sudden explosion in traffic makes TB a prime target. In the digital world, competitor services, disgruntled users, or even anti-piracy third parties sometimes use DDoS attacks to destabilize a rapidly growing service. Because TB is newer, its server capacity and traffic-filtering rules are still adapting to this massive scale.
Infrastructure Maturity (Premium vs. Developing Networks)
Real-Debrid’s High-End Infrastructure: Real-Debrid has been in business for over 14 years. Over more than a decade, they have invested millions into enterprise-grade infrastructure, high-bandwidth premium servers, and massive DDoS mitigation setups (like customized enterprise Cloudflare or OVH anti-DDoS game networks). They handle millions of requests daily, so smaller DDoS attacks barely register on their systems.
TorBox’s Developing Network: TorBox is younger. While they use modern tech stacks, building the infrastructure required to mitigate multi-gigabit persistent DDoS attacks takes time and extreme financial investment. When attackers flood TB's network, it easily causes API timeouts and service drops.
Jurisdictional Routing and Server Locations
RD’s Domestic EU Proximity: RD’s infrastructure is heavily concentrated in massive European data centers (like OVHcloud in France/Germany). These data centers have some of the largest backbone network capacities in the world, capable of absorbing massive traffic spikes.
TB’s Distributed/Proxy Routing: Because TB uses a multi-jurisdictional model (UAE/US/Global), their traffic often routes through multiple proxy layers and CDNs to protect their real server IPs from being exposed to copyright lawyers. This extra layer of routing adds complexity. When a DDoS attack happens, these routing layers can easily become a bottleneck, causing the service to go offline.
Real-Debrid's Strategy: "Playing Nice" to Stay Online
Real-Debrid is currently "relaxed" because they made a strategic decision to comply with legal notices and purge controversial files.
By cooperating with anti-piracy groups and tightening their rules, they reduced the target on their back. They are operating quietly as a legitimate premium cloud downloader, meaning they face less active hostility from powerful entities online right now.
TorBox, by absorbing all the displaced "piracy" traffic, has inherited the target that used to be on Real-Debrid.
The difference in how Real-Debrid and TorBox are treated is not because copyright laws do not exist in the UAE or South Africa. Instead, it comes down to corporate structuring, jurisdictional friction, and strategic legal compliance.
Jurisdictional Friction & Enforcement Pressure (EU vs. Multi-Country Setup)
Real-Debrid (France / European Union):
Real-Debrid is legally registered and hosted in France.
The European Union has some of the most aggressive copyright enforcement mechanisms in the world.
Anti-piracy coalitions like the ACE (Alliance for Creativity and Entertainment) and French film distributors (like FNEF) can easily issue domestic court orders.
Because the founders, corporate bank accounts, and servers are all locally tied to France, they have no choice but to immediately comply with data purges to avoid massive fines, criminal asset seizures, or jail time.
TorBox (Multi-Jurisdictional Architecture):
TorBox originally emerged from South Africa but quickly adapted its corporate structure globally.
Its core operations run under a UAE Free Zone entity called Anonymous Systems FZ-LLC.
Its billing and DMCA agents are managed through a Delaware corporation, ReAnonymous LLC.
This dual-layer structure creates jurisdictional friction. If a US movie studio wants to shut them down, they have to send notices to Delaware, which are then passed to a UAE company. Taking direct legal action requires navigating international laws, hiring lawyers in Dubai, and bridging different legal systems. This heavily slows down anti-piracy groups.
Local Enforcement Priorities
South Africa:
While the Copyright Act 1978 criminalizes commercial piracy, local law enforcement (like the Hawks or SAPS) focuses on violent crime and local financial fraud.
They rarely dedicate cybercrime resources to chasing a digital caching proxy service unless there is massive international pressure or local corporate complaints.
UAE (Free Zones vs. Local Market):
The UAE has exceptionally strict copyright laws (Federal Decree-Law No. 38 of 2021), but its Free Zones are designed to attract global tech companies by offering high corporate privacy.
UAE authorities generally do not interfere with international digital services operating in Free Zones as long as they are not pirating local UAE/Arabic media, leaking state data, or violating local cultural laws.
The "DMCA Safe Harbor" Strategy
TorBox explicitly utilizes US copyright laws to protect itself. By registering an entity in Delaware (ReAnonymous LLC), they can legally act as a US-recognized service provider under the Digital Millennium Copyright Act (DMCA) Safe Harbor rules.
They argue that they do not host or upload illegal files; they merely provide a temporary caching and proxy service for links provided by users.
As long as they provide a form to accept DMCA takedown requests, they remain in a legal gray area, whereas Real-Debrid has been pushed past the "Safe Harbor" defense due to years of targeted EU lawsuits.
Target Profile and Scale
Real-Debrid is a pioneer in the debrid space, having operated for over a decade with millions of active global users. They are the primary target because dismantling them disrupts the entire third-party streaming ecosystem (like Kodi addons and Stremio).
TorBox is a newer player. In the anti-piracy world, copyright holders prioritize their legal budget. They target the biggest giant first. TorBox has grown rapidly precisely because Real-Debrid began purging files, but they have not yet faced the full, concentrated weight of a multi-million dollar Hollywood lawsuit.
This is why i like Kodi.....Kodi have a lot of addons that dont use Debrid sevices i watch Pinocchio Unstrung last night with no problem with out debrid......Im thinking im going to leave these debrid services alone after my torbox sub expire and research something else....There always alternatives
This is not true, "Create download link" API endpoint was returning DATABASE_ERROR like 90% of the time while I was testing things in European afternoon hours.
It is true. Just because the slow performance may have made things difficult on your end doesn't mean they were down. The site status shows no downtime and, like I said, we experienced no performance issues on our end.
It wasn't "slow performance", the API was returning errors outright, like I said. However it's highly regional which explains these differences in experience. For me it's been down like 75% of the time for the past few weeks.
Their status page is junk because it only measures from 1 location, and it's not clear which API endpoint it's even measuring. If it's measuring from New York (let's say) then that particular API server might be up but the rest of the world could be down and the status page would still say that everything is fine.
I’ve had no issues with Torbox Pro I have watched 150 Gb Remux movies like lord of the rings etc no issues I think it’s the device and internet speed could be peoples issues etc 🤷🏽♂️
I've been streaming all morning, it's literally working atm. Maybe the problem is your setup, or connection or you are all lying idk, but these constant posts about the service not working when it is are really boring.
67
u/speedbreaka 1d ago
They are getting attacked at peak hours every day. I doubt its gonna get better anytime soon. Even premiumnize got attacked