Bitcoin Forum

Alternate cryptocurrencies => Altcoin Discussion => Topic started by: masterluc on September 03, 2015, 03:22:17 AM



Title: Most discoverable XT nodes are russian
Post by: masterluc on September 03, 2015, 03:22:17 AM
For a few hours I found 158 XT nodes (https://bitcointalk.org/index.php?topic=1169115.0) which send "Bitcoin XT" user agent identification. Geoip shows 156 of them use IP located in Russia. Conspiracy?  ;D

List of nodes found so far

Code:
178.207.212.77
46.48.207.254
178.204.21.37
92.37.157.208
178.204.116.214
94.241.1.185
5.143.81.49
46.158.180.252
109.184.237.27
77.94.122.122
95.53.114.28
85.192.134.21
176.51.132.64
178.207.253.99
95.70.123.241
188.114.8.99
5.138.247.242
109.184.91.19
95.70.33.86
178.67.165.114
178.68.221.168
109.147.229.121
188.18.250.20
73.182.147.206
31.163.112.63
78.37.63.25
78.37.54.48
2.60.135.235
178.68.133.169
95.106.143.65
178.68.142.70
92.37.194.165
188.16.14.188
78.29.90.8
77.51.69.128
87.251.114.145
95.52.18.154
95.37.84.223
37.21.92.223
212.55.111.19
46.159.19.194
95.165.205.145
81.4.200.111
5.139.81.44
176.52.116.178
93.177.56.235
92.101.10.32
31.162.118.16
95.189.43.240
178.67.14.238
37.76.186.17
46.159.34.2
31.180.69.181
178.46.37.7
31.180.219.230
109.184.96.96
95.70.106.211
178.204.154.56
46.48.178.70
93.120.185.96
82.140.209.7
188.18.202.245
5.143.42.201
94.245.183.162
95.71.253.245
31.23.71.137
31.181.32.8
37.21.3.213
92.37.131.121
37.21.36.108
5.138.104.148
95.53.27.158
178.67.190.175
92.37.204.174
46.158.195.130
95.37.177.142
92.37.173.6
178.207.75.108
93.92.182.26
31.23.175.53
213.129.51.145
109.187.248.91
5.139.146.38
89.109.10.241
95.37.186.63
178.44.204.95
109.184.156.211
46.158.82.72
178.129.217.51
95.70.96.99
78.36.75.57
5.138.13.94
85.173.94.70
92.37.178.117
31.181.255.235
31.23.40.6
92.37.155.69
178.64.132.207
178.65.109.38
95.188.224.224
178.65.133.185
86.102.161.110
176.100.71.189
31.181.127.200
46.48.156.116
95.37.59.128
95.55.234.36
178.65.190.83
86.102.23.117
95.72.178.140
95.52.163.203
178.44.216.148
31.181.9.247
95.54.209.136
213.129.42.244
95.84.41.233
31.23.69.31
195.78.126.113
178.46.121.141
109.127.174.49
95.37.142.84
92.127.82.46
37.23.114.199
95.55.247.49
37.76.160.71
109.184.84.174
92.101.103.218
95.152.58.92
46.158.133.40
95.188.215.250
5.143.41.240
176.51.218.19
92.49.177.97
95.110.78.36
31.180.212.39
95.84.13.60
5.139.139.154
93.124.118.209
188.17.228.32
178.205.238.115
178.44.210.245
95.71.203.201
188.120.62.217


Title: Re: Most discoverable XT nodes are russian
Post by: knight22 on September 03, 2015, 03:29:34 AM
So?


Title: Re: Most discoverable XT nodes are russian
Post by: tvbcof on September 03, 2015, 04:03:54 AM

Interesting.  Thx for the update.

A long long long time ago I predicted the global geopolitical strategy would play a role in the security of Bitcoin.  Now we see them dirty Chinese giving the XT guys (all two of them) a serious case of heartburn.  Nothing brings my heart more joy.



Title: Re: Most discoverable XT nodes are russian
Post by: masterluc on September 03, 2015, 05:43:13 AM
191 out of 194 are russian so far. Other three: JP,GB,US. Discovery in progress.

Code:
178.207.212.77
46.158.235.233
46.48.207.254
178.204.21.37
92.37.157.208
178.204.116.214
94.241.1.185
5.143.81.49
46.158.180.252
109.184.237.27
77.94.122.122
95.53.114.28
85.192.134.21
176.51.132.64
178.207.253.99
95.70.123.241
95.70.62.225
188.114.8.99
5.138.247.242
109.184.91.19
5.137.123.16
95.70.33.86
178.67.165.114
178.68.221.168
109.147.229.121
188.18.250.20
73.182.147.206
31.163.112.63
109.161.69.112
78.37.63.25
78.37.54.48
78.85.195.121
176.15.81.55
2.60.135.235
178.68.133.169
95.37.172.143
95.106.143.65
178.68.142.70
92.37.194.165
188.16.14.188
78.29.90.8
37.78.25.132
77.51.69.128
87.251.114.145
95.52.18.154
95.37.84.223
37.21.92.223
212.55.111.19
178.68.131.206
46.159.19.194
95.165.205.145
89.169.90.144
95.37.63.226
81.4.200.111
92.101.61.83
5.139.81.44
176.52.116.178
93.177.56.235
95.55.84.109
92.101.10.32
31.162.118.16
95.189.43.240
178.67.14.238
37.76.186.17
46.159.34.2
31.180.69.181
178.46.37.7
31.180.219.230
109.184.96.96
95.70.106.211
178.204.154.56
46.48.178.70
93.120.185.96
178.68.131.162
82.140.209.7
188.18.202.245
5.143.42.201
94.245.183.162
93.120.215.111
95.71.253.245
178.44.169.56
85.175.177.21
31.23.71.137
31.181.32.8
178.69.186.96
194.190.7.111
37.21.3.213
92.37.131.121
37.21.36.108
5.138.104.148
95.53.27.158
109.184.167.199
178.67.190.175
92.37.204.174
46.158.195.130
95.37.177.142
92.37.173.6
178.207.75.108
93.92.182.26
31.23.175.53
213.129.51.145
109.187.248.91
5.139.146.38
89.109.10.241
95.37.186.63
178.44.204.95
109.184.156.211
178.68.132.33
46.158.82.72
178.129.217.51
95.70.96.99
95.72.244.175
81.1.164.163
78.36.75.57
5.138.13.94
46.48.216.41
85.173.94.70
178.35.234.191
5.139.177.227
92.37.178.117
31.181.255.235
92.101.160.18
109.184.247.231
31.23.40.6
92.37.155.69
178.75.101.241
178.187.54.4
46.48.161.252
178.64.132.207
178.34.63.157
178.65.109.38
31.180.69.185
95.188.224.224
178.65.133.185
86.102.161.110
109.165.69.171
176.100.71.189
95.37.153.229
31.181.127.200
46.48.156.116
95.37.59.128
95.37.89.136
5.143.164.199
95.55.234.36
178.65.190.83
86.102.23.117
95.72.178.140
95.52.163.203
178.44.216.148
5.138.102.61
31.181.9.247
95.54.209.136
213.129.42.244
95.84.41.233
31.23.69.31
195.78.126.113
178.46.121.141
109.127.174.49
92.101.253.210
178.65.103.12
95.37.142.84
92.127.82.46
37.23.114.199
95.55.247.49
37.76.160.71
109.184.84.174
92.101.103.218
95.72.62.116
178.47.93.157
95.152.58.92
178.68.195.86
178.64.225.194
46.158.133.40
95.188.215.250
5.143.41.240
176.51.218.19
92.49.177.97
95.110.78.36
31.180.212.39
93.124.119.222
95.84.13.60
5.139.139.154
93.124.118.209
95.159.182.188
188.17.228.32
92.101.59.170
121.108.241.247
178.205.238.115
178.44.210.245
95.71.203.201
77.35.237.244
188.120.62.217
188.234.15.58
87.225.64.104


Title: Re: Most discoverable XT nodes are russian
Post by: Cconvert2G36 on September 03, 2015, 06:09:11 AM
They might be NotXT nodes. The UDP floods that have been relentlessly DDoSing XT nodes have had roots to a russian ISP.

https://www.reddit.com/r/bitcoinxt/comments/3j7577/udp_flood_ddos_attacks_packet_analysis_and_attack/ (https://www.reddit.com/r/bitcoinxt/comments/3j7577/udp_flood_ddos_attacks_packet_analysis_and_attack/)


Title: Re: Most discoverable XT nodes are russian
Post by: masterluc on September 03, 2015, 06:17:06 AM
So russians attacks russians?

Just checked. My node is not XT and not under any kind of attack.

I just check incoming connections on port 8333 for version string "Bitcoin XT". Whoever sends this version string to my bitcoin node goes to list.


Title: Re: Most discoverable XT nodes are russian
Post by: crazywack on September 03, 2015, 06:18:07 AM
Don't know if I should put my tin hat on for this....

 I can see Russia doing what it can to slow the Bitcoin train threw supporting disruption.


Title: Re: Most discoverable XT nodes are russian
Post by: Amph on September 03, 2015, 06:21:04 AM
Don't know if I should put my tin hat on for this....

 I can see Russia doing what it can to slow the Bitcoin train threw supporting disruption.


weren't they finally pro bitcoin lately, they unbanned it and are kind sustaining the whole thing

i throught they were not against it anymore, i think they are only trying the new client before other

or all those nodes belong to a single entity


Title: Re: Most discoverable XT nodes are russian
Post by: crazywack on September 03, 2015, 06:29:27 AM
I know they have relaxed their position on it publicly, but don't belive that they would want to give very much power to something they can't control. UNLESS it slowly becomes more centralized. Man the rabbit hole could go deep on this 1.

I'm not going to put much more thought into it and chalk it up to Putin and Hearn wrestle bears together.


Title: Re: Most discoverable XT nodes are russian
Post by: masterluc on September 03, 2015, 06:42:57 AM
DDoS usually goes from infected computers which have no significant geo preference. This case is outstanding. I can't figure out why they all have Russian IP.

And why Russian botnet motherhost attacks Russian XT nodes. What the fuck is going on?


Title: Re: Most discoverable XT nodes are russian
Post by: OmegaStarScream on September 03, 2015, 06:51:08 AM
Here is my theory honestly , we all know how russians are good at Cracking and hacking and that kind of stuff , so it's probably just some cracked VPS they sold them in some hacking forum in bulk for cheap price and voilà (or they are using them on bitcoin themselfs)


Title: Re: Most discoverable XT nodes are russian
Post by: masterluc on September 03, 2015, 07:00:51 AM
So one russians hire vps and bring up XT nodes.

Other russians attacks first ones.

And me (I also russian) discover all this shit.


Title: Re: Most discoverable XT nodes are russian
Post by: Mickeyb on September 03, 2015, 07:43:09 AM
Don't know if I should put my tin hat on for this....

 I can see Russia doing what it can to slow the Bitcoin train threw supporting disruption.


weren't they finally pro bitcoin lately, they unbanned it and are kind sustaining the whole thing

i throught they were not against it anymore, i think they are only trying the new client before other

or all those nodes belong to a single entity

Apparently they did show some signs of getting softer towards Bitcoin but the last I read is that they don't approve it just like they haven't before.

This is a country that tries to restrict outflow of their cash to ghe foreign countries. Lot of rich Russians that wish to get their money out of Russia so they can buy everything in South of France, London, etc. So Bitcoin works for them in case, or if the government would really soften it's stance towards the Bitcoin. 


Title: Re: Most discoverable XT nodes are russian
Post by: mallard on September 03, 2015, 08:11:55 AM
They might be NotXT nodes. The UDP floods that have been relentlessly DDoSing XT nodes have had roots to a russian ISP.

https://www.reddit.com/r/bitcoinxt/comments/3j7577/udp_flood_ddos_attacks_packet_analysis_and_attack/ (https://www.reddit.com/r/bitcoinxt/comments/3j7577/udp_flood_ddos_attacks_packet_analysis_and_attack/)

What are NotXT nodes? Google didn't help.


Title: Re: Most discoverable XT nodes are russian
Post by: iCEBREAKER on September 03, 2015, 08:38:06 AM
why Russian botnet motherhost attacks Russian XT nodes. What the fuck is going on?

Two trolls named gavin@tla.mit.edu and hearn@signint.google.mil tried to take over Bitcoin with their hostile fork.

They had zero effect on the network, but pissed a lot of people off with their social engineering attack ('XT: BECAUSE BLOCKSTREAM IS HITLER').

Then some smart-ass released a spoof version of XT called NotXT.

Now, half of the world's Bitcoiners hate XT so much they are setting up fake nodes to trick it into forking before it has sufficient strength, while the other half hate XT so much they are attacking the first half's fake nodes.

Russia is just where we all go when this sort of crazy thing happens.   :D


Title: Re: Most discoverable XT nodes are russian
Post by: tupelo on September 03, 2015, 08:41:17 AM
My goodness, XT is getting more embarrassing by the hour. This has to be the biggest shill fiesta in Bitcoin's short history.


Title: Re: Most discoverable XT nodes are russian
Post by: S4VV4S on September 03, 2015, 08:46:48 AM
Of course, there is also the possibility that they are trying to keep the dispute going since it keeps the price low ;)
I bet none of you thought of that huh? :P


Title: Re: Most discoverable XT nodes are russian
Post by: EpicFail on September 03, 2015, 08:48:07 AM
So one russians hire vps and bring up XT nodes.

Other russians attacks first ones.

And me (I also russian) discover all this shit.

No, it is the other way round. In Russia XT nodes discover you.

I run my node elsewhere and I do not see those IPs you listed trying to connect to me.


Title: Re: Most discoverable XT nodes are russian
Post by: louise123 on September 03, 2015, 09:14:43 AM
So one russians hire vps and bring up XT nodes.

Other russians attacks first ones.

And me (I also russian) discover all this shit.

No, it is the other way round. In Russia XT nodes discover you.

I run my node elsewhere and I do not see those IPs you listed trying to connect to me.

I am confused.
Do you mean if you run a node within Russia then  Russian XT nodes discover you?


Title: Re: Most discoverable XT nodes are russian
Post by: The00Dustin on September 03, 2015, 10:19:35 AM
No, it is the other way round. In Russia XT nodes discover you.
I am confused.
Do you mean if you run a node within Russia then  Russian XT nodes discover you?
https://en.wikipedia.org/wiki/Russian_reversal


Title: Re: Most discoverable XT nodes are russian
Post by: tadakaluri on September 03, 2015, 10:35:12 AM
Bitcoin XT may hire those nodes to show their strength. Bitcoin XT is always unreliable.


Title: Re: Most discoverable XT nodes are russian
Post by: louise123 on September 03, 2015, 10:38:44 AM
No, it is the other way round. In Russia XT nodes discover you.
I am confused.
Do you mean if you run a node within Russia then  Russian XT nodes discover you?
https://en.wikipedia.org/wiki/Russian_reversal

Oh, OK.
Thanks!


Title: Re: Most discoverable XT nodes are russian
Post by: Lucko on September 03, 2015, 10:50:35 AM
From Reddit

[–]mike_hearnMike Hearn - Bitcoin Expert 1 točki a minute ago
The "BitKiller" program being run by some dude who hates BIP 101 connects to network nodes from Russia. and calls itself Bitcoin XT, although it isn't. If the node it talks to also says it's Bitcoin XT then a DDoS attack starts.
So this measurement isn't particularly meaningful.


Title: Re: Most discoverable XT nodes are russian
Post by: wladston on September 03, 2015, 12:22:40 PM
I'm from Brazil, the IP for my XT node isn't on that list. Maybe you need to add some more IP seeds that are not in Russia?


Title: Re: Most discoverable XT nodes are russian
Post by: RFBC on September 03, 2015, 12:29:03 PM
hello


Title: Re: Most discoverable XT nodes are russian
Post by: masterluc on September 03, 2015, 12:46:52 PM
Well, the counter stopped to grow. Probably if I will on other /24/16/8 network, it will show more nodes.

210 IPs, 3 not from RU

Code:
178.207.212.77
46.158.235.233
46.48.207.254
178.204.21.37
92.37.157.208
178.204.116.214
94.241.1.185
5.143.81.49
213.129.61.235
46.158.180.252
109.184.237.27
77.94.122.122
95.53.114.28
85.192.134.21
176.51.132.64
178.207.253.99
95.70.123.241
95.70.62.225
188.114.8.99
5.138.247.242
95.71.224.94
109.184.91.19
5.137.123.16
95.70.33.86
178.67.165.114
178.68.221.168
109.147.229.121
188.18.250.20
73.182.147.206
31.163.112.63
109.161.69.112
46.158.191.132
78.37.63.25
78.37.54.48
178.205.27.180
78.85.195.121
176.15.81.55
2.60.135.235
178.68.133.169
95.37.172.143
95.106.143.65
178.68.142.70
92.37.194.165
188.16.14.188
78.29.90.8
37.78.25.132
77.51.69.128
87.251.114.145
95.52.18.154
95.37.84.223
37.21.92.223
212.55.111.19
178.68.131.206
46.159.19.194
94.245.145.77
79.126.103.148
95.165.205.145
89.169.90.144
95.37.63.226
81.4.200.111
92.101.61.83
5.139.81.44
176.52.116.178
93.177.56.235
95.55.84.109
92.101.10.32
31.162.118.16
95.189.43.240
178.67.14.238
37.76.186.17
46.159.34.2
31.180.69.181
178.46.37.7
31.180.219.230
109.184.96.96
94.245.191.32
95.70.106.211
178.204.154.56
46.48.178.70
93.120.185.96
178.68.131.162
82.140.209.7
188.18.202.245
5.143.42.201
94.245.183.162
93.120.215.111
95.71.253.245
178.44.169.56
85.175.177.21
31.23.71.137
31.181.32.8
178.69.186.96
194.190.7.111
37.21.3.213
92.37.131.121
37.21.36.108
5.138.104.148
95.53.27.158
109.184.167.199
178.67.190.175
92.37.204.174
46.158.195.130
95.37.177.142
92.37.173.6
178.207.75.108
93.92.182.26
31.23.175.53
213.129.51.145
109.187.248.91
5.139.146.38
89.109.10.241
95.37.186.63
178.44.204.95
109.184.156.211
178.68.132.33
46.158.82.72
178.129.217.51
95.70.96.99
95.72.244.175
81.1.164.163
78.36.75.57
5.138.13.94
46.48.216.41
85.173.94.70
178.35.234.191
46.158.115.77
5.139.177.227
92.126.13.208
92.37.178.117
31.181.255.235
92.101.160.18
109.184.247.231
46.41.106.156
31.23.40.6
92.37.155.69
178.75.101.241
178.187.54.4
46.48.161.252
178.64.132.207
178.34.63.157
178.65.109.38
31.180.69.185
77.35.181.19
95.188.224.224
178.65.133.185
86.102.161.110
109.165.69.171
176.100.71.189
95.37.153.229
31.181.127.200
46.48.156.116
95.37.59.128
95.37.89.136
5.143.164.199
95.55.234.36
178.65.190.83
86.102.23.117
164.215.52.101
109.184.188.87
95.72.178.140
95.52.163.203
178.44.216.148
5.138.102.61
31.181.9.247
95.54.209.136
95.52.222.109
213.129.42.244
77.35.233.167
95.84.41.233
31.23.69.31
195.78.126.113
178.46.121.141
109.127.174.49
92.101.253.210
178.67.169.206
178.65.103.12
95.37.142.84
92.127.82.46
37.23.114.199
95.55.247.49
37.76.160.71
109.184.84.174
92.101.103.218
95.72.62.116
178.47.93.157
95.152.58.92
178.68.195.86
178.64.225.194
46.158.133.40
95.188.215.250
5.143.41.240
176.51.218.19
92.49.177.97
95.110.78.36
31.180.212.39
93.124.119.222
95.84.13.60
5.139.139.154
93.124.118.209
95.159.182.188
188.17.228.32
92.101.59.170
121.108.241.247
178.205.238.115
178.44.210.245
95.71.203.201
77.35.237.244
188.120.62.217
188.234.15.58
87.225.64.104
5.143.162.229


Title: Re: Most discoverable XT nodes are russian
Post by: uxgpf on September 03, 2015, 02:30:07 PM
Check the IPs on your list against https://getaddr.bitnodes.io/ to see if they are actual Bitcoin XT nodes.

I think this is the same Russian source that is behind DDoS attacks against XT nodes.
see: https://www.reddit.com/r/bitcoinxt/comments/3j7577/udp_flood_ddos_attacks_packet_analysis_and_attack/

Quote
There are also some hexcodes in that response, which are apparently a Cyrillic UTF-8 text: " Пoкaзaнo 730 XT нoд зa пocлeдниe 1200 ceкyнд " which google translated as "Displaying 730 XT nodes in the last seconds of 1200".
So it looks like a specific tool to find XT nodes.

and:
https://www.reddit.com/r/bitcoinxt/comments/3iumsr/udp_flood_ddos_attacks_against_xt_nodes/cukjn86

Quote
[–]ivan31337 -3 points 4 days ago
I have long use r/Bitcoins and I like it very much.
I watch the fight fork XT and I like it all stopped. because my savings can depreciate.
Since there is a link between coinwallet.eu (DDoS attack on the Bitcoin network) and XT, as well as hirkom and Andersen, I decided to contribute to the fight for a just cause
Well, what do you want? if I do mess (r/Bitcoin network attacks and planned attacks in September) then be prepared for a retaliatory lawlessness.
For clean and free future!

Looks like a Russian Bitcoin Core supporter (I'm sure no one wants this kind of support) is trying to knock down XT nodes from the network. So far he has been quite succesful and many people running XT nodes have been forced to quit doing so as their internet connection went down due to these UDP flood attacks (which are still ongoing). My node was under attack too, which caused my ISP supplied ADSL modem to crash.

Someone also started a DDoS attack against Slush's voting port for BIP 101, which made them to disable voting.
https://mining.bitcoin.cz/news/


Title: Re: Most discoverable XT nodes are russian
Post by: yayayo on September 03, 2015, 03:45:31 PM
Well, the counter stopped to grow. Probably if I will on other /24/16/8 network, it will show more nodes.

210 IPs, 3 not from RU

Maybe just block those that are not from Russia? Doesn't make sense to block NotXT nodes.

I'm quite sure that one of the real nodes is run by Mike Hearn... :D

XTcoin is definitely great comedy. ;D

ya.ya.yo!


Title: Re: Most discoverable XT nodes are russian
Post by: masterluc on September 03, 2015, 04:43:57 PM
Maybe just block those that are not from Russia? Doesn't make sense to block NotXT nodes.

I'm quite sure that one of the real nodes is run by Mike Hearn... :D

XTcoin is definitely great comedy. ;D

ya.ya.yo!

I discover and block nodes which represent them as Bitcoin XT. I don't block other clients.


Title: Re: Most discoverable XT nodes are russian
Post by: yayayo on September 03, 2015, 04:58:15 PM
Maybe just block those that are not from Russia? Doesn't make sense to block NotXT nodes.

I'm quite sure that one of the real nodes is run by Mike Hearn... :D

XTcoin is definitely great comedy. ;D

ya.ya.yo!

I discover and block nodes which represent them as Bitcoin XT. I don't block other clients.

But can you distinguish between XT and NotXT? I thought the whole point of NotXT was to pretend being a true XT node while in fact doing all processing like Bitcoin Core in order to trigger a premature fork.

ya.ya.yo!


Title: Re: Most discoverable XT nodes are russian
Post by: uxgpf on September 03, 2015, 05:50:40 PM
I counted all active XT nodes here: https://getaddr.bitnodes.io/nodes/?q=/Bitcoin%20XT:0.11.0/

Number of nodes with user agent "Bitcoin XT:0.11.0" is 649.
Of these not a single one is shown to be in Russia.


Title: Re: Most discoverable XT nodes are russian
Post by: maokoto on September 03, 2015, 07:42:04 PM
So... it is Rocky IV now

Core Stallone vs. XT Drago  ;D

Nah ... It is clear that there is lots of Bitcoin interest in Russia (I find lots of faucets in Russian at least), but not likely that they pro XT for any reason.


Title: Re: Most discoverable XT nodes are russian
Post by: hdbuck on September 04, 2015, 08:10:00 PM
more info here: http://qntra.net/2015/09/xt-node-blacklists-fail-to-prevent-ddos-attack/

"My nodes got hit with 25 GBit/sec." ^^


Title: Re: Most discoverable XT nodes are russian
Post by: uxgpf on September 05, 2015, 06:43:01 PM
more info here: http://qntra.net/2015/09/xt-node-blacklists-fail-to-prevent-ddos-attack/

"My nodes got hit with 25 GBit/sec." ^^

It's just a generic UDP flood attack so there's nothing a client could do about it.