Quote from: ocminer on October 27, 2015, 11:44:10 PM

Quote from: Deluxcoin on October 27, 2015, 11:38:24 PM

Quote from: ocminer on October 27, 2015, 11:31:40 PM

I don't want to FUD, but a certain IP in the nodelist triggered one of my alarm-scripts:

Code:

{
   "addr" : "31.215.21.13:12063",
   "services" : "00000001",
   "lastsend" : 1445988269,
   "lastrecv" : 1445988269,
   "bytessent" : 9102,
   "bytesrecv" : 2252,
   "conntime" : 1445987907,
   "pingtime" : 0.28261200,
   "version" : 60015,
   "subver" : "/Satoshi:1.0.0/",
   "inbound" : true,
   "startingheight" : 434,
   "banscore" : 0,
   "syncnode" : false
   }

After some digging a similar IP was used for/with Tianhe and Dracula Coin, both contained a Trojan/Virus so YMMV but be warned:

https://bitcointalk.org/index.php?topic=1180005.msg12417463#msg12417463

https://bitcointalk.org/index.php?topic=1078517.msg11690668#msg11690668

However - this can just be a bad coincidence.. Just make sure you've got the wallet sandboxed - I did the same on my side.

i'm not sure what the point is, but i cant see this IP on those tinahe and dracula coins threads ?

EDIT: also this IP is NOT the seed node!

You can see a similar IP on those threads (starting with 31.215...)

Like I said before, could also just be a bad coincidence..

Well it might be a miner from that IP range , however its always best to scan/sandbox wallets before use.