09:04:25 <br-m> <basses:matrix.org> https://blog.quarkslab.com/bitcoin-core-audit.html
21:48:12 <br-m> <rucknium> Spy nodes from the LionLink ASN seem to have completely disappeared a few days ago: https://moneronet.info/
21:48:21 <br-m> <rucknium> 🎉
22:48:47 <br-m> <ofrnxmr> Whats with the huge spike up of nodes using the banlist
22:50:33 <br-m> <plowsof:matrix.org> what if the spy nodes where patched to bypass detection + running on another ip range so they can ban the old ones too? :P
23:28:20 <br-m> <ofrnxmr:xmr.mx> Thats what it looks like to me
23:28:41 <br-m> <ofrnxmr:xmr.mx> And so they appear as honest nodes since they are running the banlist
23:41:14 <br-m> <boog900> Rucknium said its probably false positives, if the addresses have become unreachable they would have been dropped from node's peer lists, so the nodes would not be sending addresses on the ban list around the network.  
23:42:43 <br-m> <boog900> also the number of nodes on the network has dropped so we know they haven't switched yet. The nodes that were not apart of the big subnets switched/updated to pass the proxy check a month or 2 ago. 
23:44:26 <br-m> <ofrnxmr> Ah so they are paying attention :P
23:48:33 <br-m> <rucknium> The scanner doesn't detect whether nodes are running the ban lists directly. Instead, the scanner infers they are running the ban lists by whether any of the banlisted IPs are shared in the peerlist exchange that occurs every time nodes contact each other. Since there are no more nodes on the network that are on the DNS ban li [... too long, see https://mrelay.p2pool.observer/e/lqOO-NAKUkJkMUty ]
23:50:38 <br-m> <rucknium> This explanation is displayed if you click the circled ❓️ in the top right of the chart.
23:51:51 <br-m> <rucknium> There are probably still some spy nodes in the DigitalOcean and Hetzner ASN, but I haven't done the check yet.