Bitcoin banlist

An optional, centralized, and likely incomplete banlist containing the IP addresses of possibly malicious entities on the Bitcoin network.

The banlist is available in these formats:

These files are not scripts. Always check the contents first before using the banlist.

Entities


LinkingLion

added: 2023-03-27

This entity connects from four IP address ranges to listening Bitcoin nodes using fake user agents. While many of the connections are short-lived, some listen for transaction announcements. This might allow the entity to link transactions to IP addresses.

The IP address ranges are annouced by Lionlink Networks (AS54098):

Some of these IP ranges have been making connections to Bitcoin nodes since at least 2018 and connect to nodes on the Monero network too. It's unclear if they are VPN endpoints. The entity could be a blockchain analysis company enhancing their products with the collected data.

More details: https://b10c.me/observations/06-linkinglion