@eyedeekay
&Irc2PGuest88200
&zzz
+R4SAS
+RN
+dr|z3d
+eche|off
+hagen
+not_bob_afk
+postman
+snex
+wodencafe
Arch2
Danny
DeltaOreo
FreeB
FreefallHeavens
Irc2PGuest59134
Irc2PGuest59581
Irc2PGuest70083
Irc2PGuest96449
Irc2PGuest97049
Onn4l7h
Onn4|7h
Sisyphus
Sleepy
T3s|4_
T3s|4__
acetone_
aeiou
ardu
b3t4f4c3___
bak83_
boonst
carried6590
cumlord
death
dr4wd3
duck
eyedeekay_bnc
mareki2p_
onon_
orignal_
phobos
pisslord
poriori_
profetikla
qend-irc2p
radakayot_
rapidash
shiver_1
solidx66
thetia
u5657
uop23ip
w8rabbit
weko_
x74a6
zzz
thanks for the reviews eyedeekay, I'm going to merge them and bump to -7 shortly
eyedeekay
Thanks zzz, I'm still doing manual syncing so I'll make sure it gets to github
zzz
ok. you're still working on disabling the CI?
eyedeekay
Disabling parts, fixing other parts, yeah
orignal
"tm botnet" seems legitimate users
orignal
of Invizible Pro
eyedeekay
Interesting. Tell us more?
orignal
on saltr
orignal
what borat said
eyedeekay
Oh I see, just a sec
orignal
he says i2pd works directly now
eyedeekay
So the claim is that lots of people are using it now? That's encouraging if true
orignal
yes
orignal
someone told them about i2pd and Invizible Pro ))
eyedeekay
Well good for them in that case. Invizible Pro is convenient in any case
eyedeekay
Does Invizible Pro set up an IRC tunnel though? Or do they have to use SOCKS or something? I wonder if documentation for that exists
eyedeekay
Would be nice to have more reports of this
orignal
idk
zzz
not sure I buy it. If it's not a botnet, how come all there's over 200 routers total in 5 /24s?
eyedeekay
Seems possible if they all used the same school as their main ISP, but I'm feeling your caution nonetheless
orignal
because whole Turmenia uses very few extrenal IPs
orignal
it's well known thing
zzz
sounds like the music school has plenty
orignal
no. whole country
zzz
lets find out what this music school is and if it matches the subnets
orignal
you didn't read his statement right
zzz
this is 5 /24s, that's 1250 IPs, and at least 20% of them are running i2p, maybe up to 50%?
orignal
he said that his pupil in his music school know about Invisible Pro from somewhere
orignal
you can buy or can't buy. Just FYI Turkment people use i2pd and use it directly
zzz
tm has a lot more than 5 /24s
zzz
1 /19, 3 /20, 1 /21, 4 /22, 2 /23, 16 /24
orignal
for residential users I meant
orignal
say banks have thier own ranges
snex
at the payday loan company we had a fraud alert about a shitload of people suddenly asking for loans at the same time from the same IP. turned out all the hospitals in a given county had the same IP and same paydays so everybody would log on at the same time and ask for loans lol
orignal
do we have an AI bot here? ))
eyedeekay
I am seeing that there might be as few as ~4,300 mobile IP's in tm
snex
yes its name is t3s|a
eyedeekay
Invizible Pro being an Android app would be mostly limited to those I expect
eyedeekay
as in 'designated for mobile use'
orignal
eyedeekay are you serious?
zzz
this is not just a few kids at school. I've been averaging around 2000 new routers/day for months, and it peaked at 7000 yesterday
orignal
do you really believe people there use mobile internet from phones? ))
orignal
zzz, no few kids
orignal
there is info somewhere there
orignal
and even kids know it now
orignal
seems you don't understand thier mentality
eyedeekay
Invizible Pro is an Android app, it seemed a plausible explanation for the narrow range of IPs. I don't claim to understand tm, enlighten us.
orignal
well, people like this(let me be tolerant) only able to repeat after each others
orignal
one wrote an instruction and everybody follows it
orignal
literally
orignal
if you android phone is conected to wifi will it be from moobile range?
orignal
if you have mobile internet can you connect your computer through your phone?
eyedeekay
I would assume the more setup would be the exception rather than the rule barring some other constraint
orignal
I assume people there use whatever they are able to obtain
orignal
rather than what's needed
eyedeekay
Fair enough. I don't have any insight into what it's like to actually obtain internet service for a person in tm.
eyedeekay
Might be helpful to have
orignal
and I bet you never met a Turkmen IRL)))
eyedeekay
No, not that I know of, but I don't go around asking either
eyedeekay
If there are constraints that encourage wifi-island-hopping then that's materially interesting on more than one level
orignal
anyway, my point is that it's pretty possible
orignal
that all these new routers are users'
eyedeekay
2000 routers a day for months sounds crazy even if we're super optimistic, unless maybe Invizible Pro is generating a new RI every time you launch it
snex
are you able to tell if ones from day x are gone on day x+1?
orignal
if somebody find a way to get an access to world internet this way
orignal
and shared with others
orignal
it's possible
orignal
the main question is
orignal
which outproxy is under attack now
eyedeekay
snex yeah you can, but it might be quicker to look at Invizible Pro's code and see how it manages your identity
orignal
<orignal> borat_ а куда все ваши ослоебы ломятся? в инстраграмм?
orignal
<borat_> orignal, ну школьники в основной массе да, впны то банят пачками
zzz
so your theory is 1) for residential users, the entire country is natted behind 5 /24s; 2) some music school kids got 10,000 people in the country to install invizible pro in 4 days
orignal
mostly 1
orignal
that's well known fact about Turkmenia
orignal
and I know from other people not only from borat
zzz
ok but that's still something like 15,000 more new routers than usual in the last week, and the tm population is 7 million, so that's 0.2% of the population installed i2p in the last week?
zzz
another datapoint: diva's reseed is up to 80K requests a day, normally about 7k. He's one of ~10 reseeds, that would imply almost a million new routers a day
orignal
yes, if they all got an instruction
eyedeekay
The only way I see this is if Invizible Pro has some serious stuff going on with it
zzz
the diva reseeds aren't constant, they're peaking at up to 8k/hr in the afternoon UTC, down to 500/hr by evening, then climbing up again immediately
eyedeekay
Could it be 2 things? Mass adoption of I2P *and* gov DDOS to put it down?
orignal
last looks too dumb
eyedeekay
The reseeds all rate-limit to some degree, if attacker as the tm.gov has the ability to impersonate people at ISP level they have options that could degrade reseed service that are not very challenging