# Small getaddr responses from 897 nodes (/Satoshi:27.0.0/ on AS63949)

**URL:** https://bnoc.xyz/t/small-getaddr-responses-from-897-nodes-satoshi-27-0-0-on-as63949/121
**Category:** Observations
**Tags:** p2p
**Created:** [April 27, 2026, 5:24pm UTC](https://bnoc.xyz/t/small-getaddr-responses-from-897-nodes-satoshi-27-0-0-on-as63949/121 "2026-04-27T17:24:26Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![stratospher](https://bnoc.xyz/user_avatar/bnoc.xyz/stratospher/32/134_2.png) [@stratospher](https://bnoc.xyz/u/stratospher)
#### Post date: [June 25, 2026, 11:18am UTC](https://bnoc.xyz/t/small-getaddr-responses-from-897-nodes-satoshi-27-0-0-on-as63949/121/6 "2026-06-25T11:18:52Z")

</div>

came across `/Satoshi:27.0.0/` nodes on Linode/AS63949 as well. 2,006 IPs and half of them seem dead.

all of them:

- on block height 0
- send exactly 256 addresses as GETADDR response. every address in the response have:
  - timestamp = now
  - are also part of this linode cluster

they’re also in ~0.2% of the new table but ~6% of the tried table (most are ~6% but seeing 2-10% range) of different addrman snapshots in peer.observer. it didn’t exist in 2024.

these linode nodes seem to be the IPv4 celebs - the most seen ipv4 addresses in GETADDR responses when running virtu’s crawler. The overall top 5000 are almost entirely onion addresses - only 9 IPv4 nodes break into that top 5000 and all 9 are from this cluster.

---

_[View the full topic](https://bnoc.xyz/t/small-getaddr-responses-from-897-nodes-satoshi-27-0-0-on-as63949/121)._