13:57:57
dennis_tra:matrix.org:
Hey folks, I've had a pass through all the different links. Thanks again!
13:57:57
dennis_tra:matrix.org:
I've put together some notes in this HackMD document: https://hackmd.io/@dennis-tra/S1eM98PPZl
13:57:57
dennis_tra:matrix.org:
I have adjusted the crawler and gathered these numbers:[... more lines follow, see https://mrelay.p2pool.observer/e/gLDI4eQKS3ZmdDN5 ]
14:37:08
boog900:
@dennis_tra:matrix.org: the multiple pings is just a holdover from when I was investigating their behaviour, just one should be ok
14:53:55
dennis_tra:matrix.org:
@boog900: Great, thanks! That makes things easier and is what I’m currently doing. With that I identify many more nodes as “bad” than what’s currently shown on xmrnetscan. At the same time I identify fewer nodes with the RPC port open.
14:55:11
boog900:
@dennis_tra:matrix.org: here is the ban list: https://github.com/Boog900/monero-ban-list/blob/main/ban_list.txt have you found IPs not on that list?
15:48:05
dennis_tra:matrix.org:
https://mrelay.p2pool.observer/m/matrix.org/zKrnbUMYXEAsyuMoIpUSABEV.csv (banned.csv)
15:48:07
dennis_tra:matrix.org:
yes, plenty
16:04:30
boog900:
@dennis_tra:matrix.org: I haven't done the whole list but it says 92.113.214.139 is not banned when it is in the list as the subnet 92.113.214.0/24
16:05:13
dennis_tra:matrix.org:
oh let me check, maybe I made a mistake in the CIDR parsing
16:06:20
dennis_tra:matrix.org:
it's twice in my list (once banned, once not-banned). There's an issue in my aggregation, sorry. Let me check again
16:44:34
dennis_tra:matrix.org:
False alert 👍️ there's no additional IP. I really messed up the CIDR parsing.
16:48:17
dennis_tra:matrix.org:
Looking a bit through the data. All the addresses below are from a banned node and were shared when crawling the network. At this IP there seem to four nodes running on different ports?
16:48:17
dennis_tra:matrix.org:
https://mrelay.p2pool.observer/p/q4a45uQKTXp6Wktf/1.txt (code snippet, 13 lines)
16:52:37
boog900:
@dennis_tra:matrix.org: Yeah the spies allow connections on multiple ports