|
Title: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on February 03, 2017, 04:54:04 AM trolling is not tolerated.
on 2017-01-23 from 7PM to 8PM this address (1EPKSuFjTH3xbCK3b5ebaPbe8iUGvKvF8a) started receiving (first arrow in pic below) lots of transactions which were all strange and then started sending them out (near second arrow) https://i.imgur.com/ECj2poV.jpg all the transactions it was receiving were strange, for example each of the sending addresses send their balance in multiple transactions instead of just one (sometimes up to 9 transactions) within a very short time frame (from couple of seconds to 1 minute). all with these transactions had higher fee than the normal of that time. and if they are followed back, they are all involved in strange transactions with behavior similar to what happens during spam attacks (also at the same time when a peak happens in the size of mempool) and surely enough spam attack happened on 2017-01-23 around 10 PM and mempool started growing fast. numbers going to 50-70K. same process was repeated on 2017-01-30 for this address (16FEW2CboX5hVk3FqxNJ3Wt5StySpu1TZH) a total amount of 1.6 million dollar in these two addresses and much more in related ones. now i ask you, coincidence? idiocy? or mother of all spams? another one: 3DFxwfbPhPcqwXDKAZs83pWGuwasYKqdyR (notice the 10 seconds apart transactions) another one: 1GDhoFrzbQ6Yp9LitKEH8xnWhUjhmaQRft (notice the 1-10 seconds apart transactions starting from back in 2012) The following set of quoted addresses are claimed to be used by Komodo notary nodes (https://bitcointalk.org/index.php?topic=1776143.msg17988058#msg17988058) but all the transactions created by these keys are a waste of space so they are listed here as a part of spam attack. an example transaction from the first key: https://blockchain.info/tx/1148de03991e0bf17e2846e7eb9373f7ae280ca07349f637052a6874c5b2eb5c?show_adv=true https://blockchain.info/address/1E2ac2gxeFR2ir1H3vqETTperWkiXkwy99?show_adv=true https://blockchain.info/address/1L5ykndv7aiEB33ojjDqyTKjmVykiHtobH?show_adv=true https://blockchain.info/address/19yj1mUuA6nAoCRVvPY7Wo8MmBc9jPJBpo?show_adv=true https://blockchain.info/address/1FUbfkGzm7fcrexDCkx2ATFghJY7u7nZf8?show_adv=true https://blockchain.info/address/1DZQLUB5nYngw52zUoA7AQ1aJ74UXr4nBF?show_adv=true https://blockchain.info/address/1BMLUBy8MMEmpvudWhHXgnv5VCNr5ZxF3n?show_adv=true https://blockchain.info/address/1TWDh4PrHLFujRYujyZBWs2NPJN1hVux4?show_adv=true https://blockchain.info/address/15FxFngAdULgovYV1jDy4AHSPsgKCdKWb5?show_adv=true https://blockchain.info/address/1M7yrxRLefgjxPNXMtsRfQ2ExJT1aoYr8a?show_adv=true https://blockchain.info/address/1LaTUQVT6jk2wv1w9CE27UZd2SZDrzJtx8?show_adv=true https://blockchain.info/address/1HvDEybR7sX1w3VPcKKpSMGEmqN2kBGAp2?show_adv=true https://blockchain.info/address/17bgX68iQZW4RxeQTSw3AZBpboMKjYsscB?show_adv=true https://blockchain.info/address/1G5kXhf4tN9ab42znVGcwVVkN96nQaQBR7?show_adv=true https://blockchain.info/address/15R3C2ZKmak5pCc4duLY2jLtFD3o1jaeNd?show_adv=true https://blockchain.info/address/13swCVuXeZhWkmwEXod83Mv2YWKVqYeMVS?show_adv=true a little bit of history! the oldest massive scale spam attack that i can remember was called "stress test" back in Aug and Sep 2015 where they started sending transaction with 0.0001BTC and 0.0001BTC fixed fee. then to make matters worse they started releasing the private keys of the addresses involved. soon there were hundreds of people with access to these keys and hundreds of transactions spending the same outputs. https://bitcointalk.org/index.php?action=profile;u=553487;sa=showPosts interestingly enough, this method of spam attack is still being used. 1BoatSLRHtKNngkdXEeobR76b53LETtpyT is a well known bitcoin address used in vanitygen with a publicly known private key. 1 satoshi outputs! (thanks to BTC.TOP mining pool for wasting block space) https://blockchain.info/address/1Enjoy1C4bYBr3tN4sMKxvvJDqG8NkdR4Z https://blockchain.info/address/1SochiWwFFySPjQoi2biVftXn8NRPCSQC example tx: https://blockchain.info/tx/75cb4ded9c80289dd581266ff2ab2da51fd72a406ff46270db8e86af1cf1bdd6 (25692 (bytes)) update 2017-04-16 an oldy but a goodie: 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f This address (most probably) belongs to BitFury. so far this key has made 142102 transactions with very low fee of 25 satoshi/byte and BitFury includes these inside the blocks they mine themselves. for example: https://blockchain.info/block-index/1477998 block has been mined on 2017-04-15 10:04:57 while mempool size was 30.8 MB (24.6 K tx). and worst part is that this blocks (and similar blocks) contain a large number of these transactions (in this case 1066 transaction or 411000 bytes - nearly half the block size). So far today Bitfury have filled over 1 block with 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's sending 0 btc. 13 blocks have been found by Bitfury. (since 00.00gmt) 6 of those blocks contain no 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's 7 of those blocks contain a total of 2625 transactions from/to 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f 0 bitcoin is sent in any of those 2625 tx's 2625 tx's @ 286 - 289 bytes = 1,017,187 bytes, or 1.02 full blocks. 2625 tx's sending 0 bitcoin is getting on for 10% of Bitfury blockspace 10% of Bitfury blockspace = ~1% of all todays conformation's. No other mining pool has included 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's in any other blocks today. update 2017-04-23 Mempool is empty, yaay. Oh wait it is not! (https://bitcointalk.org/index.php?topic=1776143.msg18704723#msg18704723) Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: -ck on February 03, 2017, 05:05:37 AM The earlier of these spam attacks has been discussed to death here:
https://bitcointalk.org/index.php?topic=1762690.0 The graph of rise in transaction sets at the time did not follow the normal stochastic nature of random transaction events. There was a perfect curve with a rise in the number of transactions starting from 2017-01-24 at 06:00 until it peaked at 17:00. After that there have been random injections into the network to keep the value high. The perfect curve is consistent with a single entity constructing a careful crafted set of injections into the network. See: http://statoshi.info/dashboard/db/transactions Change the graph to see the last seven days and you will see why this is not just some random rise in transactions. It's once again likely a political stunt to bring attention to blocksize and/or segwit. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on February 03, 2017, 05:09:26 AM yes but i don't see any proof, such as addresses involved in this attack in that topic.
only thing that is filling it up and bumping it a couple of times is a couple of users like kiklo spreading false information. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Kakmakr on February 03, 2017, 05:28:12 AM yes but i don't see any proof, such as addresses involved in this attack in that topic. only thing that is filling it up and bumping it a couple of times is a couple of users like kiklo spreading false information. Very good catch there OP, I was also intrigued with the way this spam was done and I could also not figure out with what address it was done. Thanks for the graph, it makes it easier to see the impact as the mempool fills up. It is obvious this person or group knew exactly how to cripple the network and what attack to launch. You have just given us the evidence and not the theory behind this attack. All the speculation can now be dropped, the evidence is there. ^smile^ These people are doing a lot more harm, than good with these attacks. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on February 22, 2017, 01:49:49 PM A new address involved with spam attacks:
Code: 1GDhoFrzbQ6Yp9LitKEH8xnWhUjhmaQRft Code: 1GmaH1FeGnioyGGd3RVyPXawTRQLS7g2v9 Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Quickseller on February 25, 2017, 07:27:18 AM It's once again likely a political stunt to bring attention to blocksize and/or segwit. This may or may not be true. However if you assume it to be true, then why not make these types of attacks more expensive to execute?Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Decoded on February 25, 2017, 07:29:10 AM Just a question, why do these spammers not simply spam double-spends, if they're not trying to get their transactions into the block? Because 20 sat/bye most probably wont get confirmed, right?
Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: danherbias07 on February 25, 2017, 07:31:59 AM The only question need to be answered is WHY?
What the hell is their purpose? To bring down bitcoin? This could be a work of someone who is really being stepped by bitcoin and what are those? Banks? Alts? Government? Gold investors? They even use a large amount of money just to make other transactions slower. They sure want some bitcoin user to give up using it. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: paul gatt on February 25, 2017, 08:05:09 AM The only question need to be answered is WHY? What the hell is their purpose? To bring down bitcoin? This could be a work of someone who is really being stepped by bitcoin and what are those? Banks? Alts? Government? Gold investors? They even use a large amount of money just to make other transactions slower. They sure want some bitcoin user to give up using it. I think their purpose is to create a balance, I believe so. Bitcoin is the continuous appreciation with a perfect curve, and suddenly it stopped and unpredictable change, I think that's their adjustment, your questions really reasonable. that's just my speculation temporary, actually I do not know why. if possible, I think we need someone more professional, a talented entrepreneur, or someone more knowledgeable and he will explain to us everything. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Metaphilibert on February 26, 2017, 03:03:13 PM Adresses spotted by amaclin (from https://bitcointalk.org/index.php?topic=1803970.0) are not spamming but used by komodo notary nodes
https://bitcointalk.org/index.php?topic=1605144.0 Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Sadlife on February 26, 2017, 03:35:20 PM Or maybe the government dogs are trying to DDOS the blockchain network through sending spammy transactions to the entire network.
For simple reasons like to hurt the bitcoin price value and to stop it from soaring up. After all, bitcoin is their biggest rival in the market so they wanna take down this digital currency that they dont have any control to. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: vnvizow on February 26, 2017, 03:57:52 PM Might be dark net money laundry business considering the net amount of coins in the addresses
Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on February 26, 2017, 05:38:10 PM Adresses spotted by amaclin (from https://bitcointalk.org/index.php?topic=1803970.0) are not spamming but used by komodo notary nodes https://bitcointalk.org/index.php?topic=1605144.0 You've already gotten a proper answer (https://bitcointalk.org/index.php?topic=1803970.msg17986726#msg17986726) so i won't repeat it. but in this topic, i am listing all the "Spams" on bitcoin blockchain whenever i find a series of them anywhere. and as you can see i am keeping the "why" of it to a minimum. and this IS spam no matter the reason: 64 tx_in and 50 tx_out https://i.imgur.com/2NNyrWo.jpg Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on February 28, 2017, 08:09:04 AM You've already gotten a proper answer (https://bitcointalk.org/index.php?topic=1803970.msg17986726#msg17986726) so i won't repeat it. You should repeat such things more and more times.There are several reasons to do it. a) My English language is not too strong to explain everything clear to native speakers b) I am not famous person and my words have been questioned c) If you repeat words - this will be yours words. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Lauda on February 28, 2017, 08:12:55 AM This may or may not be true. However if you assume it to be true, then why not make these types of attacks more expensive to execute? Nobody can make them more expensive as an individual. Segwit would provide more room, therefore it would require more fees to do this.Might be dark net money laundry business considering the net amount of coins in the addresses Doubtful.Or maybe the government dogs are trying to DDOS the blockchain network through sending spammy transactions to the entire network. Highly doubtful.For simple reasons like to hurt the bitcoin price value and to stop it from soaring up. After all, bitcoin is their biggest rival in the market so they wanna take down this digital currency that they dont have any control to. OP this is a nice find. I was confident it was another wave of 'subtle' spam. Remember, people like Roger Ver have massive amounts of Bitcoin and could do this for a long time (not that I'm saying its him). Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on February 28, 2017, 08:34:09 AM You've already gotten a proper answer (https://bitcointalk.org/index.php?topic=1803970.msg17986726#msg17986726) so i won't repeat it. You should repeat such things more and more times.There are several reasons to do it. a) My English language is not too strong to explain everything clear to native speakers b) I am not famous person and my words have been questioned c) If you repeat words - this will be yours words. haha, i am not native English speaker either. and besides for some people it doesn't matter what you say, how many times you say it and who is saying it :) and i am trying not to get sucked in who and why of these spams as much as possible that's why i didn't repeat and just linked the reply. OP this is a nice find. I was confident it was another wave of 'subtle' spam. Remember, people like Roger Ver have massive amounts of Bitcoin and could do this for a long time (not that I'm saying its him). Thanks, i can't take all the credit though. i usually find these things from different sources and i thought why not make topic and put them all in one place maybe someone finds out more about who really is doing these spams by doing some blockchain analysis. and i am trying not to reserve my opinion about who and why of these spams to myself (feel free to discuss it though) and mostly stick to the fact that these spams are happening and this is one of the examples of how users are affected (bitmixer payments): https://i.imgur.com/swSKQ6o.jpg Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on February 28, 2017, 08:42:44 AM me using ViaBTC accelerator Sometimes it can not helpTake this link to your collection https://blockchain.info/address/39sfuA8pY4UfybgEZi7uvA13jkGzZpsg5K You can see a lot of chained transactions here. The owner wastes blockchain space sending the chain of transactions instead of making one tx with many outputs. Nobody cares :) Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Lauda on February 28, 2017, 08:44:12 AM Here's another list as provided by a IRC member. The left number is not the number of TXs, but rather the number of created UTXOs from a certain address, currently sitting unconfirmed in the mempool:
Code: 1250;"13hB6VxWn52YuzXJJ9FE6Y7NVnT5CtRjmD" Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on February 28, 2017, 08:57:29 AM Here's another list as provided by a IRC member. The left number is not the number of TXs, but rather the number of created UTXOs from a certain address, currently sitting unconfirmed in the mempool: 1) 1250;"13hB6VxWn52YuzXJJ9FE6Y7NVnT5CtRjmD" 2) 1225;"1FoXbDsvXgwVoFwkszaZjkuRRDADoWTygX" 3) 1114;"37p9pUugydmoLpQyFLLqGAgjWmUFERa1Pq" Seems to me, at least two of top-3 addresses belongs to one person/service ;D https://blockchain.info/address/13hB6VxWn52YuzXJJ9FE6Y7NVnT5CtRjmD https://blockchain.info/address/37p9pUugydmoLpQyFLLqGAgjWmUFERa1Pq Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: 1Referee on February 28, 2017, 10:05:17 AM Here's another list as provided by a IRC member. The left number is not the number of TXs, but rather the number of created UTXOs from a certain address, currently sitting unconfirmed in the mempool: 1) 1250;"13hB6VxWn52YuzXJJ9FE6Y7NVnT5CtRjmD" 2) 1225;"1FoXbDsvXgwVoFwkszaZjkuRRDADoWTygX" 3) 1114;"37p9pUugydmoLpQyFLLqGAgjWmUFERa1Pq" Seems to me, at least two of top-3 addresses belongs to one person/service ;D https://blockchain.info/address/13hB6VxWn52YuzXJJ9FE6Y7NVnT5CtRjmD https://blockchain.info/address/37p9pUugydmoLpQyFLLqGAgjWmUFERa1Pq All transactions posted by Lauda are more or less being operated by one entity (you just didn't want to browse through the entire list :P). I tend to say that it is coming from (wealthy) BU enthusiasts, but I can't back it up with solid proof unless I find important connections. --- If at some point is proven that these addresses are in fact just troll spamming, isn't there a way for pools or nodes to blacklist coins coming from these addresses? I know it's a hated measure, but at least it would give these troll spammers less incentive to continue their nasty practices. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on February 28, 2017, 10:17:36 AM All transactions posted by Lauda are more or less being operated by one entity I am not interested in such investigations. I am ready to spend 15 seconds for checking(you just didn't want to browse through the entire list :P). only the couple addresses. Quote I tend to say that it is coming from (wealthy) BU enthusiasts, I am far away from Core/BU/etc religious wars. I even do not want to comment anything about it.Only one word: everyone anytime is looking for his profit, not for the bright future for everyone. And any ammo are good in this fighting. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: jeezy on February 28, 2017, 01:34:05 PM Please be careful with the pitchforks.
A small portion of the so called "spam" some of you guys reported is due to Komodos Notarization mechanism. Read up here: https://bitcointalk.org/index.php?topic=1605144.0 You can check the notary node addresses here: https://www.komodometrics.com/ 13swCVuXeZhWkmwEXod83Mv2YWKVqYeMVS is mine. 8) Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Lauda on February 28, 2017, 01:37:46 PM Quote I tend to say that it is coming from (wealthy) BU enthusiasts, I am far away from Core/BU/etc religious wars. I even do not want to comment anything about it.A small portion of the so called "spam" some of you guys reported is due to Komodos Notarization mechanism. Read up here: https://bitcointalk.org/index.php?topic=1605144.0 Komodo is wasting my storage space, therefore this is spam for me. I do not want this "Notarization mechanism". Figure out a better way of creating less bloat for whatever it is that you want to do.Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on February 28, 2017, 01:47:03 PM ~ Please stop spamming in this topic about Komodo. one of you already said this if you read the topic before spamming, and there are already too many posts about Komodo Notarization in this board already. I am not going to remove your post but this is the last one i will let exist on this topic. sorry! Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: cellard on February 28, 2017, 01:50:29 PM All transactions posted by Lauda are more or less being operated by one entity I am not interested in such investigations. I am ready to spend 15 seconds for checking(you just didn't want to browse through the entire list :P). only the couple addresses. Quote I tend to say that it is coming from (wealthy) BU enthusiasts, I am far away from Core/BU/etc religious wars. I even do not want to comment anything about it.Only one word: everyone anytime is looking for his profit, not for the bright future for everyone. And any ammo are good in this fighting. We should not just ignore the ongoing agenda by big pocketed BUcoiners to try to shut down Core. Since they cannot outcode them, they resort to cheap, brute force approaches, such as bribing miners (Roger Ver) and spamming the network with trash then claiming the fees are too high or its too slow (Roger Ver again). Also trying to ban those that address the constant bullshit in /r/btc (does Ver ring a bell?) We have the evidence. Big pocketed Roger Ver is using his money and influence to constantly push all those shitty softwares. We saw it with XT, Classic, now BU. Anything goes. Those are also promoted by CIA-compromised Gavin amongs other characters. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on February 28, 2017, 02:17:43 PM It isn't really religious. It is.dispute between the adherents of segwit and bigblock for me like a dispute between Catholics and Protestants who better trust in God Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Lauda on February 28, 2017, 03:18:12 PM It isn't really religious. It is.dispute between the adherents of segwit and bigblock for me like a dispute between Catholics and Protestants who better trust in God Please stop spamming in this topic about Komodo. one of you already said this if you read the topic before spamming, and there are already too many posts about Komodo Notarization in this board already. You should probably make a table of used addresses, TX counts and identifiers (if known). In this case, we have identified one cause of SPAM and you could mark it as such in said table.Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on February 28, 2017, 03:28:56 PM The majority of the the technical community LOL ;DThis kind of majority costs less than nothing in bitcoin world. The majority of single black women of Texas thinks... The majority of our site visitors... The majority of... Quote You should probably make a table of used addresses, TX counts and identifiers (if known). I am thinking about writing a program which would count my transactions (both send and receive)In this case, we have identified one cause of SPAM and you could mark it as such in said table. in the blockchain (count and total size). Seems to me that I also utilize several megabytes on your hard drive ::) Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Lauda on March 01, 2017, 06:16:17 PM The majority of the the technical community LOL ;DThis kind of majority costs less than nothing in bitcoin world. Here's another list as provided by a IRC member. The left number is not the number of TXs, but rather the number of created UTXOs from a certain address, currently sitting unconfirmed in the mempool: This one is now at 1.5k unconfirmed transactions. Code: 707;"3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f" https://i.imgur.com/0WvtHnX.png Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on March 01, 2017, 06:47:10 PM 707;"3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f" https://blockchain.info/address/3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15fThis one is now at 1.5k unconfirmed transactions. https://tradeblock.com/bitcoin/address/3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f very long chain of storing some unknown datas from my point of view - this is blockchain spam. but our rules allow such things. no complaining. just eating my popcorn ;D btw. cat anybody explain me why these transactions with a fee 25 sat/b were confirmed today? Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: shorena on March 06, 2017, 12:31:47 PM -snip- btw. cat anybody explain me why these transactions with a fee 25 sat/b were confirmed today? Its not uncommon, people just focus too much on the first few blocks. With patience way lower fees than 100 or 200 sat/b are possible. See e.g. cointape[1], 34k of todays confirmed transactions paid 1-20 sat/b. [1] https://bitcoinfees.21.co/ edit: typo Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Xester on March 06, 2017, 12:45:07 PM -snip- btw. cat anybody explain me why these transactions with a fee 25 sat/b were confirmed today? Its not uncommon, people just focus too much on the first few blocks. With patients way lower fees than 100 or 200 sat/b are possible. See e.g. cointape[1], 34k of todays confirmed transactions paid 1-20 sat/b. [1] https://bitcoinfees.21.co/ I have not tried setting that very low confirmation fee. The lowest fee I have set is at blockchain.info, in that site my lowest fee would be around 1500 satoshi. Other sites especially the gambling sites and exchanges are setting high miner fee when we withdraw that ranges from 20,000 satoshi to 50,000 satoshi. Next time I will try to set a very small amount and observe how long will it take before my transaction is confirmed. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on March 06, 2017, 12:56:24 PM Its not uncommon, people just focus too much on the first few blocks. With patients way lower fees than 100 or 200 sat/b are possible. See e.g. cointape[1], 34k of todays confirmed transactions paid 1-20 sat/b. 1) CPFP 2) ViaBTC/F2Pool/etc accelerators 3) Transactions with priority 57,600,000+ ( https://en.bitcoin.it/wiki/Transaction_fees ) None of these three reasons matches our case. So. We do see that Bitfury has its own unknown reasons to prioritize transactions from 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f You can see that these transactions are placed in the beginning of the block. So, they were prioritized in Bitfury mempool. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Herbert2020 on March 06, 2017, 01:08:52 PM Its not uncommon, people just focus too much on the first few blocks. With patients way lower fees than 100 or 200 sat/b are possible. See e.g. cointape[1], 34k of todays confirmed transactions paid 1-20 sat/b. 1) CPFP 2) ViaBTC/F2Pool/etc accelerators 3) Transactions with priority 57,600,000+ ( https://en.bitcoin.it/wiki/Transaction_fees ) None of these three reasons matches our case. So. We do see that Bitfury has its own unknown reasons to prioritize transactions from 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f You can see that these transactions are placed in the beginning of the block. So, they were prioritized in Bitfury mempool. just a thought but have you checked the OP_RETURN part of these transactions to see what they are storing? they may be doing some sort of weird data storage thing on blockchain. although it is way too many transactions! here is on: Code: 6a 2819c7a233526da80a876597433b12feb263f04151c72c87c71115afada920f6bcffffffffffffffff Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on March 06, 2017, 01:17:51 PM just a thought but have you checked the OP_RETURN part of these transactions I have much more interesting things in my life rather than checking OP_RETURN datas in thousands of transactions ;DTitle: Re: Mother of all spam attacks on bitcoin network! proof? Post by: layoutph on March 25, 2017, 05:11:12 AM This is so lame, spending multiple 0.0001btc just to clog bitcoin blockchain? To fillup the whole blocks? This is serious. This might be a propaganda of other altcoin or from Bitcoin Unlimited.
Is there anything we can do to stop this? Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: dinofelis on March 25, 2017, 05:59:16 AM This is so lame, spending multiple 0.0001btc just to clog bitcoin blockchain? To fillup the whole blocks? This is serious. This might be a propaganda of other altcoin or from Bitcoin Unlimited. Is there anything we can do to stop this? If you "find a way to stop this", you've just rendered bitcoin not permissionless any more. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Lauda on March 26, 2017, 11:09:38 AM Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: shorena on March 26, 2017, 12:40:24 PM Yep, fee suggestions by cointape[1] still high though. Still too many idiots not lowering their fees. [1] https://bitcoinfees.21.co/ Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on March 26, 2017, 12:56:56 PM [1] https://bitcoinfees.21.co/ this is not such a good reference for setting fee anymore, i have been watching it and it has been pretty high even though mempool was empty and other resources have been reporting a lower feehttps://api.blockcypher.com/v1/btc/main also the same with Electrum, it reports a decent and low fee/byte Adding two new sets: 1 satoshi outputs! (thanks to BTC.TOP mining pool for wasting block space) https://blockchain.info/address/1Enjoy1C4bYBr3tN4sMKxvvJDqG8NkdR4Z https://blockchain.info/address/1SochiWwFFySPjQoi2biVftXn8NRPCSQC example tx: https://blockchain.info/tx/75cb4ded9c80289dd581266ff2ab2da51fd72a406ff46270db8e86af1cf1bdd6 Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on March 26, 2017, 01:05:00 PM 1 satoshi inputs! (thanks to BTC.TOP mining pool for wasting block space) outputs.these transactions were created and broadcasted 3 years ago :) Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on April 16, 2017, 04:26:50 AM an oldy but a goodie: 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f
This address (most probably) belongs to BitFury. so far this key has made 142102 transactions with very low fee of 25 satoshi/byte and BitFury includes these inside the blocks they mine themselves. for example: https://blockchain.info/block-index/1477998 block has been mined on 2017-04-15 10:04:57 while mempool size was 30.8 MB (24.6 K tx). and worst part is that this blocks (and similar blocks) contain a large number of these transactions (in this case 1066 transaction or 411000 bytes - nearly half the block size). Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: rizzlarolla on April 16, 2017, 06:53:13 PM an oldy but a goodie: 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f This address (most probably) belongs to BitFury. so far this key has made 142102 transactions with very low fee of 25 satoshi/byte and BitFury includes these inside the blocks they mine themselves. for example: https://blockchain.info/block-index/1477998 block has been mined on 2017-04-15 10:04:57 while mempool size was 30.8 MB (24.6 K tx). and worst part is that this blocks (and similar blocks) contain a large number of these transactions (in this case 1066 transaction or 411000 bytes - nearly half the block size). Bitfury use 1% of total bitcoin blockspace/hashpower to send nothing back and forth. quote from https://bitcointalk.org/index.php?topic=1835475.msg18270006#msg18270006 "Last 10 blocks mined by bitfury contain 1.147550mb of tx's from 3QQ address. That is 11.4% of their blockspace. (last 24 hour) bitfury have 10% of Bitcoin's total hashpower. 11.4% blockspace of 10% Bitcoin's total hashpower = 1.14% of Bitcoins total hashpower mining fake tx's from 1 address. 1 address sending zero bitcoin is using 1% of Bitcoin's total resource's" In the thread linked above there is some discussion about this addy. CKminer chips in, but explains very little. Anyone else think Bitfury need to explain? Link to addy https://blockchain.info/address/3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f?offset=0&filter=6 Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Quickseller on April 16, 2017, 11:02:21 PM an oldy but a goodie: 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f This address (most probably) belongs to BitFury. so far this key has made 142102 transactions with very low fee of 25 satoshi/byte and BitFury includes these inside the blocks they mine themselves. for example: https://blockchain.info/block-index/1477998 block has been mined on 2017-04-15 10:04:57 while mempool size was 30.8 MB (24.6 K tx). and worst part is that this blocks (and similar blocks) contain a large number of these transactions (in this case 1066 transaction or 411000 bytes - nearly half the block size). Bitfury use 1% of total bitcoin blockspace/hashpower to send nothing back and forth. quote from https://bitcointalk.org/index.php?topic=1835475.msg18270006#msg18270006 "Last 10 blocks mined by bitfury contain 1.147550mb of tx's from 3QQ address. That is 11.4% of their blockspace. (last 24 hour) bitfury have 10% of Bitcoin's total hashpower. 11.4% blockspace of 10% Bitcoin's total hashpower = 1.14% of Bitcoins total hashpower mining fake tx's from 1 address. 1 address sending zero bitcoin is using 1% of Bitcoin's total resource's" In the thread linked above there is some discussion about this addy. CKminer chips in, but explains very little. Anyone else think Bitfury need to explain? Link to addy https://blockchain.info/address/3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f?offset=0&filter=6 I remember a few months back, there was a thread about an address spamming 0.00001BTC, but it turned out that the transactions were acting as some sort of 'anchor' to an altcoin. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on April 17, 2017, 04:02:07 AM ~ i say, yes they need to explain, specially because it is abusing the power they have as a miner to "ignore other people's transactions" and include their own without any cost (they receive the tx fee and spend nothing).Anyone else think Bitfury need to explain? ~ It is possible that these transactions contain some kind of information that is being used by some other entity. i believe you have Komodo notary nodes (https://bitcointalk.org/index.php?topic=1776143.msg17988058#msg17988058) in mind.I remember a few months back, there was a thread about an address spamming 0.00001BTC, but it turned out that the transactions were acting as some sort of 'anchor' to an altcoin. and i am still going to call them both spam since these are abusing the rules. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: rizzlarolla on April 18, 2017, 08:46:04 PM So far today Bitfury have filled over 1 block with 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's sending 0 btc. 13 blocks have been found by Bitfury. (since 00.00gmt) 6 of those blocks contain no 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's 7 of those blocks contain a total of 2625 transactions from/to 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f 0 bitcoin is sent in any of those 2625 tx's 2625 tx's @ 286 - 289 bytes = 1,017,187 bytes, or 1.02 full blocks. 2625 tx's sending 0 bitcoin is getting on for 10% of Bitfury blockspace 10% of Bitfury blockspace = ~1% of all todays conformation's. No other mining pool has included 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's in any other blocks today. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: -ck on April 19, 2017, 04:24:26 AM So far today Bitfury have filled over 1 block with 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's sending 0 btc. 13 blocks have been found by Bitfury. (since 00.00gmt) 6 of those blocks contain no 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's 7 of those blocks contain a total of 2625 transactions from/to 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f 0 bitcoin is sent in any of those 2625 tx's 2625 tx's @ 286 - 289 bytes = 1,017,187 bytes, or 1.02 full blocks. 2625 tx's sending 0 bitcoin is getting on for 10% of Bitfury blockspace 10% of Bitfury blockspace = ~1% of all todays conformation's. No other mining pool has included 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's in any other blocks today. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: Astonuse on April 19, 2017, 04:13:11 PM So far today Bitfury have filled over 1 block with 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's sending 0 btc. 13 blocks have been found by Bitfury. (since 00.00gmt) 6 of those blocks contain no 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's 7 of those blocks contain a total of 2625 transactions from/to 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f 0 bitcoin is sent in any of those 2625 tx's 2625 tx's @ 286 - 289 bytes = 1,017,187 bytes, or 1.02 full blocks. 2625 tx's sending 0 bitcoin is getting on for 10% of Bitfury blockspace 10% of Bitfury blockspace = ~1% of all todays conformation's. No other mining pool has included 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f tx's in any other blocks today. But why do they choose this very obvious spam transaction to include? Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on April 23, 2017, 09:03:51 AM Memory pool is empty, yaaay.
but is it really? let's take a look. https://blockchain.info/unconfirmed-transactions shows 3540 transactions in memory pool. now let's take a closer look. https://i.imgur.com/j64VA2w.jpg That is 18 Megabytes of transaction! now let's look some more: https://blockchain.info/tx/88c032357d6b0567756cc74515175e83f930a1b5e2d821ba69b1d11c4032ef91 hmm! 59145 (bytes) with 10 sat/B fee. is there more? sure there is, AntPool just mined a whole lot of these https://blockchain.info/block-index/1483607 Number Of Transactions in this block = 102 the worst part is, this is not the first time and won't be the last and that is only one block mined by one mining pool, there are more being mined by others. https://i.imgur.com/6MbgcOk.jpg Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on April 23, 2017, 01:26:14 PM Memory pool is empty, yaaay. but is it really? There is a service (i think an exchange but do not know more) which combines its small utxo once(?) per week, sending a lot of transactions with 200 inputs and one output Something like this: https://tradeblock.com/bitcoin/address/3PKSECRWUD5ZgJyswjRVHoufQbwnUVH1M6 This is not "an attack example" I think. They try to do it on weekends when the fees are low. This is just reducing the number of utxo in their wallet and moving the funds from user deposit addresses to cold/hot wallet. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on April 24, 2017, 10:20:43 PM https://blockchain.info/address/1NzZrgTMAzR92pxNZYtKv57RnF3J51MCm9
one another crazy blockchain spamer ;D the interesting thing is that a lot of transactions generated from this address have starts with "0" 01918bc7a54aec8a327db4382e4e6a4d5405180b2209b000731155c8fca969a8 0198004b28a696d64f293efae463c8d23df97291347bca3ca15aeb50b31b05ea 01935c62b140f096e5315c24bdb481bc4d6afa7a35e2b3d9fe89b698a38a4348 017ac7a834dbbb3f421ebacd247efc3b6b6ce81adbea896ed57b95d8e8d9515a 01fc5bb2dd0e13afd1480dbcf3e43636c53914fabc3fc7e6a69445955cd66056 019b24bd4e8a5e15dac01a3f369f1e6e6546a81dc00c016a32ebf88656cc3c6e 013a753775cb1483bcae0860407ad7334bc167b0ff02adb2d89be34397124469 and so on... Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on May 01, 2017, 10:31:28 AM Ding Ding Ding ... i think we have a winner here ;)
if we exclude that one block which was full and only had 1 transaction (well technically 2 with coinbase) this one with 75 transactions comes a close second. https://blockchain.info/block/00000000000000000141b02fc9d3fcf602a0946f4f66377597f7a51cc98afd82?show_adv=true Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: freebutcaged on May 01, 2017, 11:59:21 AM They are trying to mix and consolidate bitcoins by mining the transactions themselves and getting the fees, it could be an advanced method of mixing coins, losing tracks and confusing any blockchain analysis.
Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on May 01, 2017, 12:15:37 PM They are trying to mix and consolidate bitcoins by mining the transactions themselves and getting the fees, it could be an advanced method of mixing coins, losing tracks and confusing any blockchain analysis. [in case you are talking about my last 2 comments] meh, i think what amaclin said above about them being an exchange service or similar service with lots of transactions is more plausible. and i am thinking about removing the entry from OP i can find any more information on it because as much as it is weird to see 10 s/b transactions being confirmed they don't fall under typical spam criteria of useless transaction. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: amaclin on May 17, 2017, 12:47:06 PM an oldy but a goodie: 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f This address (most probably) belongs to BitFury. so far this key has made 142102 transactions with very low fee of 25 satoshi/byte and BitFury includes these inside the blocks they mine themselves. This is Georgia (ex-USSR republic, not an US state) document stamping service https://naprweb.reestri.gov.ge/#/view/14300198 https://blockchain.info/tx/de64826fee8facfca05a85fa7fc819ae47f0f851b9d6860019adf02a2d0bcc3c (As far as I know ButFury has some relation to Georgia) Proof: https://i.imgur.com/U9hgKE6.png Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: BitWhale on May 17, 2017, 03:37:52 PM The only question need to be answered is WHY? What the hell is their purpose? To bring down bitcoin? This could be a work of someone who is really being stepped by bitcoin and what are those? Banks? Alts? Government? Gold investors? They even use a large amount of money just to make other transactions slower. They sure want some bitcoin user to give up using it. If i had to guess, their reasoning is to push the community to make a decision on the blockchain debate. It's starting to get to the point now where if we don't do something it's going to cause bitcoin way more harm than good. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: GetClams.com on May 17, 2017, 05:00:42 PM The only question need to be answered is WHY? What the hell is their purpose? To bring down bitcoin? This could be a work of someone who is really being stepped by bitcoin and what are those? Banks? Alts? Government? Gold investors? They even use a large amount of money just to make other transactions slower. They sure want some bitcoin user to give up using it. If i had to guess, their reasoning is to push the community to make a decision on the blockchain debate. It's starting to get to the point now where if we don't do something it's going to cause bitcoin way more harm than good. I think it will have the intended effect if that is what this is. Lets just get it done for goodness sakes. Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on May 18, 2017, 03:58:46 AM an oldy but a goodie: 3QQB6AWxaga6wTs6Xwq8FYppgrGinGu15f This address (most probably) belongs to BitFury. so far this key has made 142102 transactions with very low fee of 25 satoshi/byte and BitFury includes these inside the blocks they mine themselves. This is Georgia (ex-USSR republic, not an US state) document stamping service https://naprweb.reestri.gov.ge/#/view/14300198 https://blockchain.info/tx/de64826fee8facfca05a85fa7fc819ae47f0f851b9d6860019adf02a2d0bcc3c (As far as I know ButFury has some relation to Georgia) Proof: https://i.imgur.com/U9hgKE6.png very good find. i also found this news from a year ago: “We are launching the property rights registration project for Georgian citizens so that they can register property on the blockchain,” said Valery Vavilov, chief executive of BitFury. https://www.forbes.com/sites/laurashin/2016/04/21/republic-of-georgia-to-pilot-land-titling-on-blockchain-with-economist-hernando-de-soto-bitfury/#44da340744da Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on July 19, 2017, 04:34:56 PM i found a not so bad article regarding the spam attack. it is worth a read.
i wished it was more specific about the details specially for recent months, not sticking mostly to the old self-admitted and way-too-obvious spam attacks of 2015. anyways here is the link and if anyone has any more details about his work please share it here. https://bravenewcoin.com/news/bitcoin-spam-attack-stressed-network-for-at-least-18-months-claims-software-developer/ Quote There is evidence to indicate that Bitcoin’s network has been suffering a far greater workload than needed recently, according to the developer behind the bitcoin analytics platform OXT. The French developer, Laurent, told BraveNewCoin that he is “95% confident” that the 2015 “Stress Test” and “Flood Attack” events affected the number of bitcoin transactions as recently as January 2017. https://i.imgur.com/TXSj20P.jpg #MobyDick more https://twitter.com/LaurentMT/status/886630294329204740 Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on September 02, 2019, 01:09:03 PM although the following belongs to BCH but i think it is interesting to see how a spam attack works in real time against bitcoin (BCH is the exact copy inheriting everything) and since it is on an empty mempool so you could clearly single out the spam transactions.
https://i.imgur.com/INOGPJr.jpg at all times BCH mempool looks like what you see on the right side of the above chart (the flat line), mostly an empty mempool with no more than 200 kB of transactions in it mostly around 50 kB. the interesting thing about this is how it is performed. - it starts with an initial injection of a large number of transactions (265,000) with a total size of 51 MB - the total time it takes is less than 30 minutes. that is ~150 spam/second - another wave also starts 6 hours later that time with half the amount (163,000-31MB) - this entire spam cost only a 100 bucks. this is how the 2017 spam attack basically worked. of course ratio-wise it is not comparable (they injected 51000 kilobytes in a mempool that only had 200 kilobytes in it) another interesting thing which is mostly BCH related is: - it created a fee market! that "200 kB max" regular transactions that you always see started paying higher fees to get their transactions confirmed. in case you have forgotten BCH has 32 MB blocks... https://i.imgur.com/sCVdosv.jpg - and finally looking at the way mempool drops it shows miners are not picking up any more than 1 to 1.5 MB of transaction data to put in the blocks they find (apart from 1 that picked up large amounts in 2 goes). Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: pooya87 on November 16, 2022, 05:42:14 AM It's been a while since I've updated this topic but yesterday the mempool grew and with it the fees went up. Which is a normal thing when price volatility increases but when looking at how it all increased, things look start looking suspicious.
[Speculation] In a natural mempool size growth we don't have a straight line because not everyone jumps on board of sending transactions at the same time specially not for a long period of time. It happens in "bursts", in other terms there should be a lot of different rates in the chart. Like this picture of a small rise from earlier this month. https://i.imgur.com/yXYkMb1.jpg However in a spam attack the attacker injects a large volume of spam transactions into the mempool usually at a fixed rate so the chart looks like the following picture which is from Nov. 14 to 15 over ~8 hours: https://i.imgur.com/wzxyeay.jpg (Note that the count chart (https://jochen-hoenicke.de/queue/#BTC,2d,count) also shows the same thing but not as cleanly since with each new block the count drops but the "slope" is fixed which points to the fixed rate at which transactions entered mempool). From there, it's just a matter of keeping the mempool full and preventing it from going back down to keep the fees up while avoiding a larger cost on the spammer (due to ever rising fee if the spam rate was sustained). Usually regular users do most of the work there and the spammer doesn't have to spend much: https://i.imgur.com/NKSvODJ.jpg Title: Re: Mother of all spam attacks on bitcoin network! proof? Post by: NotATether on November 16, 2022, 08:01:52 AM From there, it's just a matter of keeping the mempool full and preventing it from going back down to keep the fees up while avoiding a larger cost on the spammer (due to ever rising fee if the spam rate was sustained). Usually regular users do most of the work there and the spammer doesn't have to spend much It will take about 8-16 hours for all these transactions to clear up. There are almost 200vMB of these transactions in the mempool at the moment. A block is mined every 10 minutes and can pack about 2-4vMB of transactions at once. So assuming the worst case scenario of 2vMB, we have 12 vMB packed up every hour, or ~17 hours to clear up the mempoo, It's half that amount if block sizes grow to 4vMB. All this assuming that the number of new transactions goes down starting now. |
