upcarta
  • Sign In
  • Sign Up
  • Explore
  • Search

LinkingLion: An entity linking Bitcoin transactions to IPs?

  • Article
  • Mar 28, 2023
  • #Bitcoin
b10c.me
Read on b10c.me
1 Recommender
1 Mention
This post describes and discusses the behavior of an entity I call LinkingLion. The entity opens connections to many Bitcoin nodes using four IP address ranges and listens to transa... Show More

This post describes and discusses the behavior of an entity I call LinkingLion. The entity opens connections to many Bitcoin nodes using four IP address ranges and listens to transaction announcements. This might allow the entity to link newly broadcast transactions to node IP addresses. The entity has been active in some capacity since 2018 and is also active on the Monero network using the same IP address ranges. The entity might be a blockchain analysis company collecting data to improve its products.

I previously observed an entity making multiple, short-lived connections per second to many nodes on the Bitcoin P2P network. I called this entity an “Inbound Connection Flooder” and wrote about my initial observation in this post. However, after closer inspection of the entity’s behavior, I think these short-lived connections are only a symptom of the primary goal. I suspect this entity is likely tracking transaction propagation to attempt to determine which node broadcasts which transaction to link transactions to IP addresses.

Show Less
Recommend
Post
Save
Complete
Collect
Mentions
See All
Alex Waltz @raw_avocado · Mar 31, 2023
  • Post
  • From Twitter
Great article as usual!
  • upcarta ©2025
  • Home
  • About
  • Terms
  • Privacy
  • Cookies
  • @upcarta