This is an automated archive made by the Lemmit Bot.

The original was posted on /r/monero by /u/Ammortel on 2024-10-20 16:01:07+00:00.


Monero devs hunted down hundreds of malicious node IPs this week-end and made a list of them available at

These malicious nodes could potentially reveal the IP adress of the monero node from which originated a user transaction. Some of the IPs have been linked to the Linking Lion infrastructure. They’re all presumably from chainanalysis even though nothing is confirmed at this point.

If you are running a node, you may want to save this list in a file and point to that file in the monerod startup command line with the argument –ban-list filename

This will ban all these malicious IPs on your node, so it doesn’t communicate with them and keeps them outside the network.

You might also want to look at the --tx-proxy and --anonymous-inbound flags.