Multiple satoshi 0.16.1 with strange behavior

[dende93]

Hello everyone, I have a satoshi 0.17.1 node and for a few days a lot of chinese IPs with satoshi 0.16.1 are connecting to me, all in synchronization so they are using all my upload bandwidth.

I've noticed that they all have a very high ping and once connected, my ping goes to 1000 and more both looking at bitnodes and for other new peers.

I have 1 Mbps upload with my adsl, and I've sent them more than 5 GB per day in the past week.

So today I started banning, and in 6 hours I banned more than 150, all near addresses such as 223.245.201.219 and 223.245.201.117 or others that share almost all the numbers except the final part, or even random addresses but with the same features.

All with the same behavior, which are synchronizing and all from China. They're all with bloom and witness.

Any idea of what can it be? Is it legitimate?

[odolvlobo]

The block chain is 200 GB, so asking for 5 GB per day doesn't seem unreasonable.

[nc50lc]

Any idea of what can it be? Is it legitimate?

Strange, my hard guess is:
Ping request will just display the delay of the connection between you and the peers...
so if they are from China and you're from US (with 1mbps upload bandwith), 1000+ms is pretty normal specially if the other party's connection is too slow. (could be wrong)

[elda34b]

Looks like lots of node are trying to sync via your node imo, I don't think it's strange. Anyway it's fine if you don't want them to use all of your upload bandwidth.

[Carlton Banks]

You can set maxuploadtarget=n in either bitcoin.conf or as a desktop menu parameter. That will limit uploaded data to n MB per 24 hours

[dende93]

The block chain is 200 GB, so asking for 5 GB per day doesn't seem unreasonable.

Yes I know but my internet it's a bottleneck in that way, my upload is 100kb/s. Since my bandwidth is limited, I would at least know if I give it to "honest" nodes.

[dende93]

Any idea of what can it be? Is it legitimate?

Strange, my hard guess is:
Ping request will just display the delay of the connection between you and the peers...
so if they are from China and you're from US (with 1mbps upload bandwith), 1000+ms is pretty normal specially if the other party's connection is too slow. (could be wrong)

Usually my ping on bitnodes is 40-50 ms and I've always seen the peers connected to me under 100 ms.

[dende93]

Looks like lots of node are trying to sync via your node imo, I don't think it's strange. Anyway it's fine if you don't want them to use all of your upload bandwidth.

It's not that I don't want to give them all my bandwidth, it's that I'd like to understand why so many similar nodes connect and ask for so much data.

[dende93]

You can set maxuploadtarget=n in either bitcoin.conf or as a desktop menu parameter. That will limit uploaded data to n MB per 24 hours

Thank you, maybe I'll do. But first I want to know what they are doing, if they're honest I'll give all the data they want.

[lightning_fan]

I noticed the same. I have 20-30 new Chinese nodes connecting to my node every hour. Before I had 20-30 new nodes in a week. Something is definitely fishy here.
It is not the "normal" traffic I had before.I don't care about my bandwidth but this is really strange. I started banning them and now I ban about 2-7 nodes every 10 minutes. See also here:
https://twitter.com/midmagic/status/1107344196975755264

What are they up to?

Here my banlog of the past hours:

Code:

Banned client with IP: 175.42.193.44:5445
Banned client with IP: 39.190.10.208:22690
Found and banned 2 nodes.
Banned client with IP: 182.103.25.212:60550
Banned client with IP: 110.187.248.135:46016
Banned client with IP: 115.148.146.85:50018
Found and banned 3 nodes.
Banned client with IP: 114.228.119.59:21536
Banned client with IP: 114.104.235.41:59303
Found and banned 2 nodes.
Banned client with IP: 49.89.114.184:55814
Banned client with IP: 1.194.50.225:5774
Found and banned 2 nodes.
Banned client with IP: 118.125.11.120:54173
Banned client with IP: 183.146.190.28:50141
Banned client with IP: 122.190.94.133:4077
Found and banned 3 nodes.
Banned client with IP: 49.70.53.209:51941
Found and banned 1 nodes.
Banned client with IP: 27.156.135.162:9456
Banned client with IP: 117.26.217.254:5712
Banned client with IP: 27.209.89.102:50710
Banned client with IP: 123.160.52.61:52481
Banned client with IP: 182.120.230.239:52061
Banned client with IP: 220.184.216.92:62306
Banned client with IP: 171.221.143.43:43684
Found and banned 7 nodes.
Banned client with IP: 223.242.161.67:20622
Banned client with IP: 49.89.252.21:50693
Banned client with IP: 182.98.175.26:63111
Banned client with IP: 110.187.216.43:54420
Found and banned 4 nodes.
Banned client with IP: 110.184.79.251:8835
Found and banned 1 nodes.
Banned client with IP: 113.243.254.193:62124
Banned client with IP: 182.120.192.17:50725
Banned client with IP: 139.209.234.181:59940
Banned client with IP: 139.9.240.141:62479
Found and banned 4 nodes.
Banned client with IP: 110.84.244.201:7366
Found and banned 1 nodes.
Banned client with IP: 140.75.128.252:51337
Banned client with IP: 101.28.220.155:31195
Banned client with IP: 113.246.19.17:19937
Banned client with IP: 42.233.131.94:9570
Banned client with IP: 122.226.92.114:62775
Banned client with IP: 223.145.20.112:49183
Banned client with IP: 220.177.144.17:61806
Found and banned 7 nodes.
Banned client with IP: 175.42.161.148:10711
Banned client with IP: 118.113.233.100:28119
Found and banned 2 nodes.
Found and banned 0 nodes.
Banned client with IP: 115.150.209.210:63867
Banned client with IP: 1.189.106.41:58620
Banned client with IP: 182.120.228.10:52723
Found and banned 3 nodes.
Banned client with IP: 119.185.41.209:49802
Banned client with IP: 171.114.82.228:47234
Banned client with IP: 123.245.56.110:51356
Found and banned 3 nodes.
Banned client with IP: 39.66.2.46:50211
Banned client with IP: 123.163.252.225:13778
Banned client with IP: 59.63.150.192:51664
Banned client with IP: 121.12.120.243:60608
Found and banned 4 nodes.
Banned client with IP: 122.141.163.219:60398
Found and banned 1 nodes.
Banned client with IP: 42.234.24.34:19847
Banned client with IP: 175.166.8.252:56944
Banned client with IP: 220.203.63.160:12108
Banned client with IP: 114.237.125.88:57545
Found and banned 4 nodes.
Banned client with IP: 182.85.162.99:62789
Banned client with IP: 223.242.252.109:51676
Found and banned 2 nodes.
Banned client with IP: 112.10.27.164:23808
Found and banned 1 nodes.
Banned client with IP: 180.126.180.59:51279
Banned client with IP: 117.60.206.251:53021
Banned client with IP: 1.197.240.67:5322
Banned client with IP: 112.98.13.190:23653
Banned client with IP: 106.5.140.139:64305
Found and banned 5 nodes.
Banned client with IP: 222.170.26.2:64169
Banned client with IP: 175.23.152.175:60746
Banned client with IP: 122.190.94.163:9643
Found and banned 3 nodes.
Banned client with IP: 223.104.63.82:20150
Banned client with IP: 219.146.211.162:54633
Banned client with IP: 180.126.177.153:54039
Banned client with IP: 183.166.11.250:59371
Found and banned 4 nodes.
Banned client with IP: 122.138.102.67:60829
Found and banned 1 nodes.
Banned client with IP: 106.110.23.149:55724
Banned client with IP: 182.202.168.11:16374
Found and banned 2 nodes.
Banned client with IP: 49.89.115.204:58654
Banned client with IP: 114.80.116.156:61374
Found and banned 2 nodes.
Banned client with IP: 120.42.217.62:12778
Banned client with IP: 49.70.62.196:62247
Banned client with IP: 42.234.28.43:3041
Found and banned 3 nodes.
Banned client with IP: 58.47.185.196:5172
Banned client with IP: 117.44.164.70:42307
Banned client with IP: 124.231.27.32:58055
Banned client with IP: 49.70.58.124:52916
Found and banned 4 nodes.
Banned client with IP: 222.240.107.178:3977
Banned client with IP: 110.184.74.135:38477
Banned client with IP: 123.163.251.223:8592
Banned client with IP: 125.68.13.92:1211
Banned client with IP: 139.9.65.16:50546
Found and banned 5 nodes.
Banned client with IP: 112.252.31.174:50948
Banned client with IP: 139.209.234.145:61253
Found and banned 2 nodes.
Banned client with IP: 119.186.37.143:51877
Banned client with IP: 180.126.204.9:63192
Banned client with IP: 58.222.50.195:2057
Banned client with IP: 42.177.224.126:63569
Found and banned 4 nodes.
Banned client with IP: 120.37.116.72:46719
Banned client with IP: 220.161.31.28:52468
Banned client with IP: 123.163.255.12:4340
Banned client with IP: 59.83.212.135:56480
Banned client with IP: 175.150.27.141:64715
Found and banned 5 nodes.
Banned client with IP: 59.63.204.168:48166
Banned client with IP: 49.70.59.92:4229
Found and banned 2 nodes.
Banned client with IP: 123.162.212.109:11755
Banned client with IP: 123.101.179.162:51608
Found and banned 2 nodes.
Banned client with IP: 1.197.240.187:15219
Banned client with IP: 119.254.81.66:49698
Found and banned 2 nodes.
Banned client with IP: 36.62.24.131:44364
Found and banned 1 nodes.
Banned client with IP: 123.163.254.56:2228
Banned client with IP: 123.163.253.224:7233
Banned client with IP: 118.117.107.168:15683
Banned client with IP: 123.101.118.138:20638
Found and banned 4 nodes.
Found and banned 0 nodes.
Banned client with IP: 115.150.210.181:53339
Banned client with IP: 49.70.61.148:6903
Banned client with IP: 123.129.141.91:63557
Found and banned 3 nodes.
Banned client with IP: 49.70.57.238:6630
Found and banned 1 nodes.

[pooya87]

^ you are banning different node IP addresses simply because you don't like them! otherwise there is nothing abnormal about any of their behavior as far as i can tell. these are normal bitcoin nodes that have a high download speed and are trying to synchronize with the network and "catch up". which is why they are currently downloading a lot of data.