Bitcoin Forum

So, the price of bitcoin crashed like 15% in the last 24 hours, with the adoption of the new unnecessary 0.8.4, the still guarenteed threat of more war in the middle east, and now 88.208.1.24.

http://blockchain.info/blocks/88.208.1.24

This IP, supposedly from Virginia, has more processing power than the world has ever seen before. (speculation)

They discovered 3 blocks in one ten minute period, and another 3 blocks in a 14 minute period.

That makes them capable of a 51% attack.

WHO ARE THEY AND WILL THEY RAPE THE NETWORK? :o

...Luck happens  ;D

This is concerning to say the least.


I wonder if these guys have fired up their 25TH Machines?
https://bitcointalk.org/index.php?topic=288045.new;topicseen#new


Yea Right....  They are not THAT lucky. 

Price is starting to recover.

Any idea what caused the crash?

It wasn't any of the things listed above.

Did a whale move or something?

(Also,88.208.1.24 is still very concerning - to me, it looks like a trial run of a network of datacenters working together to be able to overtake the bitcoin network... and you realize, they don't have to take over forever - just long enough to screwup the chain and crash the BTC price. GO AMERICA! Where's my I love NSA, you love NSA image.......)

Something to note:

Ashburn, VA (where the IP originates) is about 25 miles/40km from the CIA headquarters.

Hmmm

ASIC Farm

ghash.io

who's that?

It is CIA starting 51% attack.

It is their new data center in Ashburn, VA, near Langley, VA.

http://cqcounter.com/whois/?query=88.208.1.24&map=1#map_geo_location

i dont like the sound of this    :-\

advancedhosters.com

these guys are the IP and have large data centers.

http://cqcounter.com/traceroute/?query=88.208.1.24

share-bt.net registered with with Advanced Hosters, a shell company owned by a company named Haldex, LTD.

check out the traceroute. they are behind several proxies, some of which have omitted geolocation data.

but look what Avast says:

http://s8.postimg.org/fbh2nh58z/Untitled2.png

I don't know exactly what traceroute is good for...

But the end result, hop 11 and 12, are 149.11.134.22, which is registered in the District of Columbia, to Cogent Communications.
edit: ok, I reloaded and the end result is again 88.208.1.24, after the 11th hop being 149.11.134.22.

I'm not sure why Avast points to the Netherlands.

I've pinged the IP, it's still up. I'm doing a portscan on it.... not sure how that would be beneficial, but I don't know what to do in a situation like this....

using nmap

Discovered open port 110/tcp on 88.208.1.24
Discovered open port 443/tcp on 88.208.1.24
Discovered open port 25/tcp on 88.208.1.24
Discovered open port 143/tcp on 88.208.1.24
Discovered open port 993/tcp on 88.208.1.24
Discovered open port 80/tcp on 88.208.1.24
Discovered open port 995/tcp on 88.208.1.24
Discovered open port 587/tcp on 88.208.1.24

and still trying the other 60+ thousand TCP ports.

I attempted to use the IP as an SMTP server, but my client rejected me, saying it wasn't in the accepted list of rcpthosts.

Anyway... like I said, this is above my head... I know there are known ranges of US gov IP addresses, but I haven't found any available for free yet.

do a scan on port 1327. if its open then the machine is exploitable. i'm willing to bet its open, because my antivirus blocks the ip address as malicious due to botnet activity

First time using nmap was earlier today for a completely different use. I'll try. TCP or what? for 1327.
So far I'm only doing TCP.

Discovered open port 3333/tcp on 88.208.1.24
Discovered open port 3334/tcp on 88.208.1.24
Discovered open port 4369/tcp on 88.208.1.24
Discovered open port 5222/tcp on 88.208.1.24
Discovered open port 5269/tcp on 88.208.1.24
Discovered open port 5280/tcp on 88.208.1.24
Discovered open port 5223/tcp on 88.208.1.24
Discovered open port 7777/tcp on 88.208.1.24
Discovered open port 8332/tcp on 88.208.1.24
Discovered open port 8333/tcp on 88.208.1.24

done TCP scan; 1327 TCP is not open.

Jesus christ its not the cia, the blocks are found by https://ghash.io

for some reason that website is blocked by my antivirus

why is avast pointing to the Frisian islands?..WTF...lol

You sure it's from GHash.io?

Does GHash.io have a public block history? (like BTCGuild https://www.btcguild.com/index.php?page=pool_stats)



To put this into perspective (edited to take into account timezone differences):

From 20:52 to 1:22 (blockchain.info time), 12 blocks were mined by 88.208.1.24, and only 5 blocks by BTCGuild.


http://blockorigin.pfoe.be/blocklist.php
according to this, they have been identified as coming from GHash.io. I'm not familiar with their identification process. I've read that it can be faked.

Unless I see confirmation from a GHash.IO source, I'm skeptical.
BTCGuild currently says they have a Pool Speed of 222,571 GH/s
GHash.io currently says they have a Pool Speed of 140,540 GH/s (daily average or peak, not sure)

I just leave this here: http://blockchain.info/blocks/88.208.33.202

First 88.208.1.24
Then 88.208.33.202

Where can you see there power and the overall network power?

the world is about to end,just relax

The timing, power, and similar range is suspicious.  The traceroute is completely different, and whois says it is in the Netherlands. ADVANCEDHOSTERS LIMITED Haldex Ltd though, so it's likely the same host.

I've got 32 mins left on the port scan with nmap, but it seems like 88.208.33.202 is better secured - I didn't get an initial response this time saying that 25, 80, 443, etc were open. I just pinged both and they are about the same ping.



The price is going to shoot up (or at least be safer than most investments) once the bombs start dropping.

That is, as long as there isn't a well timed attack on the network, or the a complete shutdown of the internet (google services possibly excluded), by "terrorists" cutting fiber optic lines or "Chinese" hackers.

88.208.1.24 is back (never actually went offline, to my knowledge - but it did appear to stop mining) and just mined a new block. *edit: two blocks 256227, 256229

Discovered open port 3333/tcp on 88.208.33.202
Discovered open port 8333/tcp on 88.208.33.202
Filtered 22 and filtered 8332.

Done. Only those two TCP ports are open on 88.208.33.202.


Anyway... the processing seems diminished, or they just had some awesome luck before... (I agree that the math should be done by someone...)
Still need some solid confirmations on who owns those blocks - if it is indeed https://ghash.io or not. Can someone acquire info that by logging in?

SHA-256 is broken, sell sell sell

"Pick a number between 0 and 115792089237316195423570985008687907853269984665640564039457584007913129639935."

I pick 42!

Haven't read all posts here yet but iblocklist may help you out.

If this is true we may get very cheap Bitcoins for a while (assuming I understand the consequences of this right).

So you're saying that one person has more than ~375 TH/s?
Not likely.

http://en.wikipedia.org/wiki/Wikipedia:Blocking_IP_addresses
http://usahitman.com/magipa
found on google.

https://bitcointalk.org/index.php?topic=280718.0 explains ghash.io (bitfury asic pool)

last blocks on ghash.io ;)
618    2013-09-05 15:58:31    256267
617    2013-09-05 14:59:39    256259
616    2013-09-05 14:53:05    256258
615    2013-09-05 13:36:04    256251
614    2013-09-05 13:07:07    256250
613    2013-09-05 11:31:48    256241
612    2013-09-05 09:35:17    256229
611    2013-09-05 09:16:28    256227
610    2013-09-05 07:45:09    256219
609    2013-09-05 07:36:12    256217
608    2013-09-05 06:29:31    256213
607    2013-09-05 05:49:34    256205
606    2013-09-05 05:23:15    256198
605    2013-09-05 02:17:31    256175
604    2013-09-05 01:23:33    256166
603    2013-09-05 00:52:19    256164
602    2013-09-05 00:24:49    256161

إوا !  ،
 كل شات تاتعلق من كرعها 
      :(

what do you say guys should we fire up teh cannon. I'm ready to go

   لا ؟

Maybe it's the NSA (for
special needs)

Is that where the DWave quantum computer was delivered that Google and NASA jointly purchased ?

My bad, guys. I left one of my block erupters on the Heart of Gold.

 :'(

Funny that people have no idea what a 51% attack is.

IF a 51% attack occurs you will see no increase in hashing power.
If a 51% attack occurs the attacker will generate 100% of block.
If a 51% attack occurs there will be a long (at least 6 block) reorganization.
If a 51% attack occurs the new chain will replace transactions of an existing chain.

51% = boogeyman for clueless Bitcoiners.
Bad crop harvest = must be the 51% attack.
Bitter winter lasting longer than normal = must be the 51% attack.
Downpour on the eve of a battle = must be the 51% attack.
The king has no sons and five daughters = must be the 51% attack.

welp, glad I'm not a miner
Anyways this 51% attack business sounds kind of scary even if its not for reals

Thank you... My thoughts exactly.
It was funny months ago. Now it's irritating.

51% isnt real. someone should have factory of ASIC

Could this be the end of bitcoin?  Lol too dramatic, but when the CIA takes over...

doubt they could do a 51% attack though, could they?

Must be josh who plugged in all the undelivered orders  :)

The government could do anything
Heck they created the encryption standard that bitcoin uses
They're not persecuting bitcoins or anything though
Otherwise coinbase wouldn't be open for business

hahahahahahhahaha, good one

Made me laugh!  :D

 Virginia is mush less populous state that the state of Maryland (72/Km2 -- 180/Km2) , is tree times larger than the Maryland.  It's likely that's their agents responsible for operations are based in virginia.

Not a 51% attack, just someone with a lot of mining power. Although it is a bit scary that someone can have that amount of power. Just goes to show, with enough money, not even Bitcoin is 100% safe.

actually, with the current size of the network, it requires far greater than 51% to attack. you realize, this means to successfully attack it would take like 500 th+

Is it true that going forwards the 51% attack won't exactly go away? You would think it would get harder but surely not if the number of miners stays static? It would just require someone to have a large percentage of currently powerful hardware. Is this understanding right?

it's not an attack, read deathandtaxes post

He called it an attack!

I am not sure what post you are reading??  The above posts does not say its an attack.  In fact it is just a large pool.

we must stop 88.208.1.24 na0. IMMA CHARGIN MAH LAZER

https://i.imgur.com/8qYRLp2.png

I'm pretty sure it's ghash.io

whoever this is is rivaling btcguild

Based on hash rate or the recent blocks found?

If it's hash rate where do you find that info?

WTF, this could be corporatoions or goverments trying their systems.

It's the nsa... They have bought a lot of miners just to mess with Bitcoin... :P

End of bitcoin sell sell sell!

Malwarebytes just stopped my computer communicating with this IP....

IP-BLOCK   88.208.1.24 (Type: outgoing, Port: 51385, Process: javaw.exe)

What does this mean?

Process: javaw.exe
???

Why java?

Are they still mining Bitcoins fast?

Yes and no. Yes, they should be making a ton of btc, but no not enough for a 51% attack.

OOOOO they might be using your computer for processing power... Kill it!