# Latest **URL:** https://bnoc.xyz/latest.md [Latest](https://bnoc.xyz/latest.md) · [Categories](https://bnoc.xyz/categories.md) · [Tags](https://bnoc.xyz/tags.md) --- ## [What Bitcoin research papers to reimplement and validate?](https://bnoc.xyz/t/what-bitcoin-research-papers-to-reimplement-and-validate/196)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 2\ **Last updated:** [October 28, 2026, 8:54pm UTC](https://bnoc.xyz/t/what-bitcoin-research-papers-to-reimplement-and-validate/196 "2026-10-28T20:54:10Z")
The Chaincode Labs Bitcoin Open Source Software (BOSS) challenge is considering to have participants revisit, re-implement, and validate existing research papers (using LLMs) as part of their exercises. If you know about… --- ## [Collection of public Bitcoin related datasets](https://bnoc.xyz/t/collection-of-public-bitcoin-related-datasets/200)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 0\ **Last updated:** [October 28, 2026, 7:39pm UTC](https://bnoc.xyz/t/collection-of-public-bitcoin-related-datasets/200 "2026-10-28T19:39:42Z")
To make finding public Bitcoin datasets more simple, we’ve setup bitcoin-data.github.io. It lists a bunch of datasets already and I’m happy to accept contributions expanding it. --- ## [Compact block reconstruction degradation between September - October 2026](https://bnoc.xyz/t/compact-block-reconstruction-degradation-between-september-october-2026/198)
**Author:** [@m4ycon](https://bnoc.xyz/u/m4ycon)\ **Replies:** 5\ **Last updated:** [October 27, 2026, 9:17pm UTC](https://bnoc.xyz/t/compact-block-reconstruction-degradation-between-september-october-2026/198 "2026-10-27T21:17:44Z")
On April, I was working on adding some stats based on logs about compact block reconstruction in peer-observer (see 420 and 465), since then, I’ve been looking to the added panels to validate them and I’ve seen some degr… --- ## [/Satoshi:31.0.0/ peers with no service flags and protocol 70015 pushed transactions, then stopped together on Oct 18](https://bnoc.xyz/t/satoshi-31-0-0-peers-with-no-service-flags-and-protocol-70015-pushed-transactions-then-stopped-together-on-oct-18/193)
**Author:** [@benunskilled](https://bnoc.xyz/u/benunskilled)\ **Replies:** 10\ **Last updated:** [October 22, 2026, 11:07pm UTC](https://bnoc.xyz/t/satoshi-31-0-0-peers-with-no-service-flags-and-protocol-70015-pushed-transactions-then-stopped-together-on-oct-18/193 "2026-10-22T23:07:43Z")
My listening node (Core 31.1) got inbound connections from a small fleet announcing /Satoshi:31.0.0/ that, as far as I can tell, isn’t Bitcoin Core. Who: 6,591 sessions from 22 IPv4 addresses (Oct 6–18), each in a diffe… --- ## [Large disruption in Tor exit node population: visible in your data?](https://bnoc.xyz/t/large-disruption-in-tor-exit-node-population-visible-in-your-data/197)
**Author:** [@jonhbit](https://bnoc.xyz/u/jonhbit)\ **Replies:** 1\ **Last updated:** [October 21, 2026, 11:05pm UTC](https://bnoc.xyz/t/large-disruption-in-tor-exit-node-population-visible-in-your-data/197 "2026-10-21T23:05:44Z")
Looks like there was an attack that hijacked 300+ Tor relay nodes, promoted them to exit nodes (to become 10+% of the count of exit nodes at the time), and was then discovered and stopped. Roughly, detected on October 2n… --- ## [Addrman health dashboard](https://bnoc.xyz/t/addrman-health-dashboard/185)
**Author:** [@naiyoma](https://bnoc.xyz/u/naiyoma)\ **Replies:** 3\ **Last updated:** [October 20, 2026, 5:37am UTC](https://bnoc.xyz/t/addrman-health-dashboard/185 "2026-10-20T05:37:46Z")
Sharing an addrman health dashboard ( Addrman health ) which @stratospher and I vibe-coded for fun last month. The dashboard lets you upload your addrman (peers.dat) and gives a quick overview of the state and compositi… --- ## [/Satoshi:25.0.0/ and /Satoshi:25.1.0/ clients disrespecting fRelay](https://bnoc.xyz/t/satoshi-25-0-0-and-satoshi-25-1-0-clients-disrespecting-frelay/17)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 5\ **Last updated:** [October 19, 2026, 10:14pm UTC](https://bnoc.xyz/t/satoshi-25-0-0-and-satoshi-25-1-0-clients-disrespecting-frelay/17 "2026-10-19T22:14:49Z")
These IP addresses of v25.0 / v25.1 clients disrespecting fRelay were shared with me. They belong to different cloud providers (seeing Hetzner, Google, AWS, …): # Google 104.199.210.140 /Satoshi:25.1.0/ 104.199.67.60 /S… --- ## [Effect of Linux Kernel CVE-2026-99999 (CVSS 9.3, PwnScape) on the Bitcoin network](https://bnoc.xyz/t/effect-of-linux-kernel-cve-2026-99999-cvss-9-3-pwnscape-on-the-bitcoin-network/189)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 3\ **Last updated:** [October 19, 2026, 8:30pm UTC](https://bnoc.xyz/t/effect-of-linux-kernel-cve-2026-99999-cvss-9-3-pwnscape-on-the-bitcoin-network/189 "2026-10-19T20:30:11Z")
VPS providers have been patching and restarting the hosts of their VPS / cloud servers following CVE-2026-99999 for the past days since the vulnerability was made public on the 15th. Some of these likely run Bitcoin node… --- ## [Request: Bitcoin and/or Lightning packet captures](https://bnoc.xyz/t/request-bitcoin-and-or-lightning-packet-captures/111)
**Author:** [@cndolo](https://bnoc.xyz/u/cndolo)\ **Replies:** 8\ **Last updated:** [October 19, 2026, 7:27pm UTC](https://bnoc.xyz/t/request-bitcoin-and-or-lightning-packet-captures/111 "2026-10-19T19:27:15Z")
Hi, I’m currently working on a research project and looking to strengthen my dataset with more vantage points besides my own. We are interested in traffic analysis, and in particular (for now) detection and classificati… --- ## [Follow-up to data request: research paper on passive, network attack](https://bnoc.xyz/t/follow-up-to-data-request-research-paper-on-passive-network-attack/188)
**Author:** [@cndolo](https://bnoc.xyz/u/cndolo)\ **Replies:** 1\ **Last updated:** [October 19, 2026, 7:26pm UTC](https://bnoc.xyz/t/follow-up-to-data-request-research-paper-on-passive-network-attack/188 "2026-10-19T19:26:40Z")
Hi, A few months ago, I posted here requesting packet captures of Bitcoin/LN traffic that I needed for a research project. I got traces from @b10c in time and @jonhbit provided LN traces as well but the paper was alread… --- ## [Wiki: Resources for monitoring and network data](https://bnoc.xyz/t/wiki-resources-for-monitoring-and-network-data/37)
**Author:** [@deadmanoz](https://bnoc.xyz/u/deadmanoz)\ **Replies:** 4\ **Last updated:** [October 15, 2026, 1:05am UTC](https://bnoc.xyz/t/wiki-resources-for-monitoring-and-network-data/37 "2026-10-15T01:05:35Z")
A topic for various sites and datasets relating to monitoring and network data: https://btcnodes.io/ Node count (Similar to the old bitnodes-io) Bitcoin Network Monitor - DSN Research Group, KASTEL @ KIT KIT DSN Bitcoi… --- ## [LinkingLion: An entity linking Bitcoin transactions to IPs?](https://bnoc.xyz/t/linkinglion-an-entity-linking-bitcoin-transactions-to-ips/12)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 17\ **Last updated:** [October 10, 2026, 6:14pm UTC](https://bnoc.xyz/t/linkinglion-an-entity-linking-bitcoin-transactions-to-ips/12 "2026-10-10T18:14:59Z")
In March 2023, I published LinkingLion: An entity linking Bitcoin transactions to IPs? about an entity which opens connections to many Bitcoin nodes using four IP address ranges and listens to transaction announcements. … --- ## [Address Relay under stress: Attack Characteristics and Measuring Its Effects](https://bnoc.xyz/t/address-relay-under-stress-attack-characteristics-and-measuring-its-effects/164)
**Author:** [@stratospher](https://bnoc.xyz/u/stratospher)\ **Replies:** 12\ **Last updated:** [October 9, 2026, 5:30pm UTC](https://bnoc.xyz/t/address-relay-under-stress-attack-characteristics-and-measuring-its-effects/164 "2026-10-09T17:30:19Z")
This is joint work with @mzumsande. It’s a companion piece to this post, digging into the data from the address spam attack. Below is a summary of our analysis. The address spam propagated through normal address gossip.… --- ## [Passive Traffic Analysis of Bitcoin P2P v2](https://bnoc.xyz/t/passive-traffic-analysis-of-bitcoin-p2p-v2/161)
**Author:** [@victorandre957](https://bnoc.xyz/u/victorandre957)\ **Replies:** 3\ **Last updated:** [October 9, 2026, 2:36pm UTC](https://bnoc.xyz/t/passive-traffic-analysis-of-bitcoin-p2p-v2/161 "2026-10-09T14:36:06Z")
I started working on this subject after reading the discussion in 0xB10C/project-ideas#12. The question that interested me was relatively simple: after BIP324 removes the cleartext Bitcoin message framing, what can a … --- ## [OS fingerprints of ~16.6k Bitcoin nodes](https://bnoc.xyz/t/os-fingerprints-of-16-6k-bitcoin-nodes/152)
**Author:** [@ViniciusCestarii](https://bnoc.xyz/u/ViniciusCestarii)\ **Replies:** 3\ **Last updated:** [October 9, 2026, 2:00pm UTC](https://bnoc.xyz/t/os-fingerprints-of-16-6k-bitcoin-nodes/152 "2026-10-09T14:00:36Z")
I scanned publicly reachable Bitcoin nodes with nmap -O and aggregated the detected operating system as Linux, Windows, BSD, macOS, Other/Device, or Unknown. Latest scan (2026-07-07): 16,662 IPv4/IPv6 targets Reachabl… --- ## [Increase in the number of reachable IPv4 nodes (bitprojects.io)](https://bnoc.xyz/t/increase-in-the-number-of-reachable-ipv4-nodes-bitprojects-io/45)
**Author:** [@matthias](https://bnoc.xyz/u/matthias)\ **Replies:** 11\ **Last updated:** [October 2, 2026, 4:33pm UTC](https://bnoc.xyz/t/increase-in-the-number-of-reachable-ipv4-nodes-bitprojects-io/45 "2026-10-02T16:33:48Z")
A few days ago, a sudden increase in the number of reachable IPv4 nodes from about 8,500 to 10,500 was observed by our monitoring nodes at KIT: This increase seems to come mostly from 2040 new reachable addresses in … --- ## [Outbound connection success rates of a Bitcoin node](https://bnoc.xyz/t/outbound-connection-success-rates-of-a-bitcoin-node/142)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 14\ **Last updated:** [September 30, 2026, 10:21pm UTC](https://bnoc.xyz/t/outbound-connection-success-rates-of-a-bitcoin-node/142 "2026-09-30T22:21:27Z")
To have data for a simulation, I’ve been looking at the rate of successful outbound connections my nodes are making. I’m parsing and using the following log messages for this: trying TRANSPORT connection (CONN\_TYPE) to… --- ## [ViaBTC bitpeers sending the same \`block\` message multiple times during forks](https://bnoc.xyz/t/viabtc-bitpeers-sending-the-same-block-message-multiple-times-during-forks/178)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 2\ **Last updated:** [September 27, 2026, 12:49am UTC](https://bnoc.xyz/t/viabtc-bitpeers-sending-the-same-block-message-multiple-times-during-forks/178 "2026-09-27T00:49:36Z")
Just a network observations I wanted to write down. Nothing problematic. While looking into peers sending us the same block multiple times in a short time-frame, I came across this interaction with a peer: 2026-04-20T… --- ## [Invalid blocks catalogue](https://bnoc.xyz/t/invalid-blocks-catalogue/177)
**Author:** [@deadmanoz](https://bnoc.xyz/u/deadmanoz)\ **Replies:** 1\ **Last updated:** [September 24, 2026, 7:29pm UTC](https://bnoc.xyz/t/invalid-blocks-catalogue/177 "2026-09-24T19:29:41Z")
I’ve written up some research on invalid Bitcoin blocks, alongside a catalogue of 143 established cases spanning 2010 to 2026. These are blocks that met Bitcoin’s PoW requirement but failed a consensus rule. The work st… --- ## [/btcwire:0.5.0/hemi-soak:1.0/ annoucing its address on many ports (82.221.101.217)](https://bnoc.xyz/t/btcwire-0-5-0-hemi-soak-1-0-annoucing-its-address-on-many-ports-82-221-101-217/170)
**Author:** [@stratospher](https://bnoc.xyz/u/stratospher)\ **Replies:** 4\ **Last updated:** [September 21, 2026, 11:09pm UTC](https://bnoc.xyz/t/btcwire-0-5-0-hemi-soak-1-0-annoucing-its-address-on-many-ports-82-221-101-217/170 "2026-09-21T23:09:21Z")
I found it hard to believe the number of IP addresses received including duplicates rose to 460,241 addresses on 31 august in a node I was looking at. Apparently 99.2% of all the addresses which got rate limited in net\_… --- ## [Brainstorming: What data to collect and monitor during the BIP-110 & BIP-300 forks in August 2026?](https://bnoc.xyz/t/brainstorming-what-data-to-collect-and-monitor-during-the-bip-110-bip-300-forks-in-august-2026/139)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 26\ **Last updated:** [September 16, 2026, 10:11pm UTC](https://bnoc.xyz/t/brainstorming-what-data-to-collect-and-monitor-during-the-bip-110-bip-300-forks-in-august-2026/139 "2026-09-16T22:11:06Z")
For August 2026, there are currently two forks scheduled: BIP-110 at height 961632 (early August; around 2026-08-07) BIP-300 on 2026-08-21 (ecash.com). I think there’s no fixed activation height set yet? It would be g… --- ## [Address Relay under stress](https://bnoc.xyz/t/address-relay-under-stress/163)
**Author:** [@mzumsande](https://bnoc.xyz/u/mzumsande)\ **Replies:** 7\ **Last updated:** [September 15, 2026, 4:36pm UTC](https://bnoc.xyz/t/address-relay-under-stress/163 "2026-09-15T16:36:35Z")
This is joint work with @stratospher. From April 2026 to July 2026, there was a period of increased address relay caused by some entity spamming the network. In this post, we will discuss what consequences it had on the… --- ## [Bitcoin Backbone: User Agent Usage](https://bnoc.xyz/t/bitcoin-backbone-user-agent-usage/172)
**Author:** [@ariard](https://bnoc.xyz/u/ariard)\ **Replies:** 0\ **Last updated:** [September 8, 2026, 7:16pm UTC](https://bnoc.xyz/t/bitcoin-backbone-user-agent-usage/172 "2026-09-08T19:16:58Z")
Hello, In the context of bitcoinbackbone.org, we start some real-world networking test on mainnet. As an indicative purpose, the user agent is the following “backbone-alpha:0.0.1”. So far, we’re testing all the initia… --- ## [Blocks at the same height by the same pool](https://bnoc.xyz/t/blocks-at-the-same-height-by-the-same-pool/171)
**Author:** [@CedArctic](https://bnoc.xyz/u/CedArctic)\ **Replies:** 0\ **Last updated:** [September 5, 2026, 8:20pm UTC](https://bnoc.xyz/t/blocks-at-the-same-height-by-the-same-pool/171 "2026-09-05T20:20:49Z")
Following up on the discussion from recent similar observations (see 1, 2, 3, 4), I wanted to see how frequently any given pool mines two blocks at the same height. I attach a small dataset below. :goose: Methodology: I… --- ## [Bitcoin Core versions run by mining pools](https://bnoc.xyz/t/bitcoin-core-versions-run-by-mining-pools/57)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 4\ **Last updated:** [September 3, 2026, 1:10pm UTC](https://bnoc.xyz/t/bitcoin-core-versions-run-by-mining-pools/57 "2026-09-03T13:10:53Z")
By looking at which pools mine P2A spends, we can guess when a pool roughly upgraded their getblocktemplate node to Bitcoin Core version v28. pool first spend first creation total inputs total outputs MARA Pool 8… --- ## [/python-bitcoinlib:0.12.2/ client getting addr-ratelimited (since 2026-04-10)](https://bnoc.xyz/t/python-bitcoinlib-0-12-2-client-getting-addr-ratelimited-since-2026-04-10/116)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 8\ **Last updated:** [September 2, 2026, 3:12pm UTC](https://bnoc.xyz/t/python-bitcoinlib-0-12-2-client-getting-addr-ratelimited-since-2026-04-10/116 "2026-09-02T15:12:59Z")
Since 2026-04-10 at about 16:30 UTC I’ve seen multiple IPv4 addresses connect to my monitoring nodes gossiping addresses via addr (and not addrv2) at a higher rate. These addresses are frequently rate-limited. IPs are: … --- ## [SpiderPool mines two blocks at same height 963853](https://bnoc.xyz/t/spiderpool-mines-two-blocks-at-same-height-963853/166)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 5\ **Last updated:** [September 2, 2026, 2:36pm UTC](https://bnoc.xyz/t/spiderpool-mines-two-blocks-at-same-height-963853/166 "2026-09-02T14:36:59Z")
I happened to catch it while the split was on-going which allowed to check which of the SpiderPool blocks the pools were mining on-top of. Note that AntPool & Friends don’t all mine on the same block here. I suspect tha… --- ## [Electrum Server Monitoring: Header Propagation and Shared Infrastructure](https://bnoc.xyz/t/electrum-server-monitoring-header-propagation-and-shared-infrastructure/167)
**Author:** [@dutenrapha](https://bnoc.xyz/u/dutenrapha)\ **Replies:** 4\ **Last updated:** [August 27, 2026, 5:25pm UTC](https://bnoc.xyz/t/electrum-server-monitoring-header-propagation-and-shared-infrastructure/167 "2026-08-27T17:25:22Z")
In my previous post (Electrum Server Monitoring), I explored whether public Electrum servers could be grouped by comparing their mempool.get\_fee\_histogram responses. The initial hypothesis was simple: if multiple Electr… --- ## [Electrum Server Monitoring](https://bnoc.xyz/t/electrum-server-monitoring/135)
**Author:** [@dutenrapha](https://bnoc.xyz/u/dutenrapha)\ **Replies:** 4\ **Last updated:** [August 25, 2026, 9:44pm UTC](https://bnoc.xyz/t/electrum-server-monitoring/135 "2026-08-25T21:44:42Z")
Recently, I started working on the following research idea proposed by b10c: Research and exploration: Can we spot public spy-Electrum servers run by Chainalysis? Based on the ideas from b10c, I started collecting data … --- ## [Unreachable addresses in Bitcoin GETADDR responses](https://bnoc.xyz/t/unreachable-addresses-in-bitcoin-getaddr-responses/155)
**Author:** [@danielabrozzoni](https://bnoc.xyz/u/danielabrozzoni)\ **Replies:** 3\ **Last updated:** [August 15, 2026, 12:21pm UTC](https://bnoc.xyz/t/unreachable-addresses-in-bitcoin-getaddr-responses/155 "2026-08-15T12:21:57Z")
In the past few months we saw many unreachable addresses being gossipped on the p2p network (see this thread or this one). This refers to unsolicited ADDR messages, but I wondered if we could find some more information o… [Next page](https://bnoc.xyz/latest.md?page=1)