Pages:
Author

Topic: Most discoverable XT nodes are russian (Read 2403 times)

newbie
Activity: 42
Merit: 0
September 05, 2015, 01:43:01 PM
#34
more info here: http://qntra.net/2015/09/xt-node-blacklists-fail-to-prevent-ddos-attack/

"My nodes got hit with 25 GBit/sec." ^^

It's just a generic UDP flood attack so there's nothing a client could do about it.
legendary
Activity: 1260
Merit: 1002
September 04, 2015, 03:10:00 PM
#33
more info here: http://qntra.net/2015/09/xt-node-blacklists-fail-to-prevent-ddos-attack/

"My nodes got hit with 25 GBit/sec." ^^
hero member
Activity: 770
Merit: 500
✪ NEXCHANGE | BTC, LTC, ETH & DOGE ✪
September 03, 2015, 02:42:04 PM
#32
So... it is Rocky IV now

Core Stallone vs. XT Drago  Grin

Nah ... It is clear that there is lots of Bitcoin interest in Russia (I find lots of faucets in Russian at least), but not likely that they pro XT for any reason.
newbie
Activity: 42
Merit: 0
September 03, 2015, 12:50:40 PM
#31
I counted all active XT nodes here: https://getaddr.bitnodes.io/nodes/?q=/Bitcoin%20XT:0.11.0/

Number of nodes with user agent "Bitcoin XT:0.11.0" is 649.
Of these not a single one is shown to be in Russia.
legendary
Activity: 1806
Merit: 1024
September 03, 2015, 11:58:15 AM
#30
Maybe just block those that are not from Russia? Doesn't make sense to block NotXT nodes.

I'm quite sure that one of the real nodes is run by Mike Hearn... Cheesy

XTcoin is definitely great comedy. Grin

ya.ya.yo!

I discover and block nodes which represent them as Bitcoin XT. I don't block other clients.

But can you distinguish between XT and NotXT? I thought the whole point of NotXT was to pretend being a true XT node while in fact doing all processing like Bitcoin Core in order to trigger a premature fork.

ya.ya.yo!
legendary
Activity: 938
Merit: 1013
September 03, 2015, 11:43:57 AM
#29
Maybe just block those that are not from Russia? Doesn't make sense to block NotXT nodes.

I'm quite sure that one of the real nodes is run by Mike Hearn... Cheesy

XTcoin is definitely great comedy. Grin

ya.ya.yo!

I discover and block nodes which represent them as Bitcoin XT. I don't block other clients.
legendary
Activity: 1806
Merit: 1024
September 03, 2015, 10:45:31 AM
#28
Well, the counter stopped to grow. Probably if I will on other /24/16/8 network, it will show more nodes.

210 IPs, 3 not from RU

Maybe just block those that are not from Russia? Doesn't make sense to block NotXT nodes.

I'm quite sure that one of the real nodes is run by Mike Hearn... Cheesy

XTcoin is definitely great comedy. Grin

ya.ya.yo!
newbie
Activity: 42
Merit: 0
September 03, 2015, 09:30:07 AM
#27
Check the IPs on your list against https://getaddr.bitnodes.io/ to see if they are actual Bitcoin XT nodes.

I think this is the same Russian source that is behind DDoS attacks against XT nodes.
see: https://www.reddit.com/r/bitcoinxt/comments/3j7577/udp_flood_ddos_attacks_packet_analysis_and_attack/

Quote
There are also some hexcodes in that response, which are apparently a Cyrillic UTF-8 text: " Пoкaзaнo 730 XT нoд зa пocлeдниe 1200 ceкyнд " which google translated as "Displaying 730 XT nodes in the last seconds of 1200".
So it looks like a specific tool to find XT nodes.

and:
https://www.reddit.com/r/bitcoinxt/comments/3iumsr/udp_flood_ddos_attacks_against_xt_nodes/cukjn86

Quote
[–]ivan31337 -3 points 4 days ago
I have long use r/Bitcoins and I like it very much.
I watch the fight fork XT and I like it all stopped. because my savings can depreciate.
Since there is a link between coinwallet.eu (DDoS attack on the Bitcoin network) and XT, as well as hirkom and Andersen, I decided to contribute to the fight for a just cause
Well, what do you want? if I do mess (r/Bitcoin network attacks and planned attacks in September) then be prepared for a retaliatory lawlessness.
For clean and free future!

Looks like a Russian Bitcoin Core supporter (I'm sure no one wants this kind of support) is trying to knock down XT nodes from the network. So far he has been quite succesful and many people running XT nodes have been forced to quit doing so as their internet connection went down due to these UDP flood attacks (which are still ongoing). My node was under attack too, which caused my ISP supplied ADSL modem to crash.

Someone also started a DDoS attack against Slush's voting port for BIP 101, which made them to disable voting.
https://mining.bitcoin.cz/news/
legendary
Activity: 938
Merit: 1013
September 03, 2015, 07:46:52 AM
#26
Well, the counter stopped to grow. Probably if I will on other /24/16/8 network, it will show more nodes.

210 IPs, 3 not from RU

Code:
178.207.212.77
46.158.235.233
46.48.207.254
178.204.21.37
92.37.157.208
178.204.116.214
94.241.1.185
5.143.81.49
213.129.61.235
46.158.180.252
109.184.237.27
77.94.122.122
95.53.114.28
85.192.134.21
176.51.132.64
178.207.253.99
95.70.123.241
95.70.62.225
188.114.8.99
5.138.247.242
95.71.224.94
109.184.91.19
5.137.123.16
95.70.33.86
178.67.165.114
178.68.221.168
109.147.229.121
188.18.250.20
73.182.147.206
31.163.112.63
109.161.69.112
46.158.191.132
78.37.63.25
78.37.54.48
178.205.27.180
78.85.195.121
176.15.81.55
2.60.135.235
178.68.133.169
95.37.172.143
95.106.143.65
178.68.142.70
92.37.194.165
188.16.14.188
78.29.90.8
37.78.25.132
77.51.69.128
87.251.114.145
95.52.18.154
95.37.84.223
37.21.92.223
212.55.111.19
178.68.131.206
46.159.19.194
94.245.145.77
79.126.103.148
95.165.205.145
89.169.90.144
95.37.63.226
81.4.200.111
92.101.61.83
5.139.81.44
176.52.116.178
93.177.56.235
95.55.84.109
92.101.10.32
31.162.118.16
95.189.43.240
178.67.14.238
37.76.186.17
46.159.34.2
31.180.69.181
178.46.37.7
31.180.219.230
109.184.96.96
94.245.191.32
95.70.106.211
178.204.154.56
46.48.178.70
93.120.185.96
178.68.131.162
82.140.209.7
188.18.202.245
5.143.42.201
94.245.183.162
93.120.215.111
95.71.253.245
178.44.169.56
85.175.177.21
31.23.71.137
31.181.32.8
178.69.186.96
194.190.7.111
37.21.3.213
92.37.131.121
37.21.36.108
5.138.104.148
95.53.27.158
109.184.167.199
178.67.190.175
92.37.204.174
46.158.195.130
95.37.177.142
92.37.173.6
178.207.75.108
93.92.182.26
31.23.175.53
213.129.51.145
109.187.248.91
5.139.146.38
89.109.10.241
95.37.186.63
178.44.204.95
109.184.156.211
178.68.132.33
46.158.82.72
178.129.217.51
95.70.96.99
95.72.244.175
81.1.164.163
78.36.75.57
5.138.13.94
46.48.216.41
85.173.94.70
178.35.234.191
46.158.115.77
5.139.177.227
92.126.13.208
92.37.178.117
31.181.255.235
92.101.160.18
109.184.247.231
46.41.106.156
31.23.40.6
92.37.155.69
178.75.101.241
178.187.54.4
46.48.161.252
178.64.132.207
178.34.63.157
178.65.109.38
31.180.69.185
77.35.181.19
95.188.224.224
178.65.133.185
86.102.161.110
109.165.69.171
176.100.71.189
95.37.153.229
31.181.127.200
46.48.156.116
95.37.59.128
95.37.89.136
5.143.164.199
95.55.234.36
178.65.190.83
86.102.23.117
164.215.52.101
109.184.188.87
95.72.178.140
95.52.163.203
178.44.216.148
5.138.102.61
31.181.9.247
95.54.209.136
95.52.222.109
213.129.42.244
77.35.233.167
95.84.41.233
31.23.69.31
195.78.126.113
178.46.121.141
109.127.174.49
92.101.253.210
178.67.169.206
178.65.103.12
95.37.142.84
92.127.82.46
37.23.114.199
95.55.247.49
37.76.160.71
109.184.84.174
92.101.103.218
95.72.62.116
178.47.93.157
95.152.58.92
178.68.195.86
178.64.225.194
46.158.133.40
95.188.215.250
5.143.41.240
176.51.218.19
92.49.177.97
95.110.78.36
31.180.212.39
93.124.119.222
95.84.13.60
5.139.139.154
93.124.118.209
95.159.182.188
188.17.228.32
92.101.59.170
121.108.241.247
178.205.238.115
178.44.210.245
95.71.203.201
77.35.237.244
188.120.62.217
188.234.15.58
87.225.64.104
5.143.162.229
newbie
Activity: 1
Merit: 0
September 03, 2015, 07:29:03 AM
#25
hello
full member
Activity: 157
Merit: 102
Always remember to be awesome.
September 03, 2015, 07:22:40 AM
#24
I'm from Brazil, the IP for my XT node isn't on that list. Maybe you need to add some more IP seeds that are not in Russia?
hero member
Activity: 826
Merit: 1000
September 03, 2015, 05:50:35 AM
#23
From Reddit

[–]mike_hearnMike Hearn - Bitcoin Expert 1 točki a minute ago
The "BitKiller" program being run by some dude who hates BIP 101 connects to network nodes from Russia. and calls itself Bitcoin XT, although it isn't. If the node it talks to also says it's Bitcoin XT then a DDoS attack starts.
So this measurement isn't particularly meaningful.
sr. member
Activity: 462
Merit: 250
September 03, 2015, 05:38:44 AM
#22
No, it is the other way round. In Russia XT nodes discover you.
I am confused.
Do you mean if you run a node within Russia then  Russian XT nodes discover you?
https://en.wikipedia.org/wiki/Russian_reversal

Oh, OK.
Thanks!
hero member
Activity: 616
Merit: 500
September 03, 2015, 05:35:12 AM
#21
Bitcoin XT may hire those nodes to show their strength. Bitcoin XT is always unreliable.
hero member
Activity: 807
Merit: 500
September 03, 2015, 05:19:35 AM
#20
No, it is the other way round. In Russia XT nodes discover you.
I am confused.
Do you mean if you run a node within Russia then  Russian XT nodes discover you?
https://en.wikipedia.org/wiki/Russian_reversal
sr. member
Activity: 462
Merit: 250
September 03, 2015, 04:14:43 AM
#19
So one russians hire vps and bring up XT nodes.

Other russians attacks first ones.

And me (I also russian) discover all this shit.

No, it is the other way round. In Russia XT nodes discover you.

I run my node elsewhere and I do not see those IPs you listed trying to connect to me.

I am confused.
Do you mean if you run a node within Russia then  Russian XT nodes discover you?
member
Activity: 94
Merit: 10
September 03, 2015, 03:48:07 AM
#18
So one russians hire vps and bring up XT nodes.

Other russians attacks first ones.

And me (I also russian) discover all this shit.

No, it is the other way round. In Russia XT nodes discover you.

I run my node elsewhere and I do not see those IPs you listed trying to connect to me.
hero member
Activity: 1582
Merit: 502
September 03, 2015, 03:46:48 AM
#17
Of course, there is also the possibility that they are trying to keep the dispute going since it keeps the price low Wink
I bet none of you thought of that huh? Tongue
member
Activity: 99
Merit: 10
September 03, 2015, 03:41:17 AM
#16
My goodness, XT is getting more embarrassing by the hour. This has to be the biggest shill fiesta in Bitcoin's short history.
legendary
Activity: 2156
Merit: 1072
Crypto is the separation of Power and State.
September 03, 2015, 03:38:06 AM
#15
why Russian botnet motherhost attacks Russian XT nodes. What the fuck is going on?

Two trolls named [email protected] and [email protected] tried to take over Bitcoin with their hostile fork.

They had zero effect on the network, but pissed a lot of people off with their social engineering attack ('XT: BECAUSE BLOCKSTREAM IS HITLER').

Then some smart-ass released a spoof version of XT called NotXT.

Now, half of the world's Bitcoiners hate XT so much they are setting up fake nodes to trick it into forking before it has sufficient strength, while the other half hate XT so much they are attacking the first half's fake nodes.

Russia is just where we all go when this sort of crazy thing happens.   Cheesy
Pages:
Jump to: