Bitnodes estimates the relative size of the Bitcoin peer-to-peer network by finding all of its reachable nodes.


ASN HEALTH

This page reports network health data for reachable ASNs, which are ASNs that have at least one reachable IPv4/IPv6 Bitcoin node. Data points are collected whenever a new network snapshot is available, which occurs approximately every 10 minutes. BGP alerts are promptly displayed within 10 seconds of detection and will be automatically cleared after 1 hour if they are not persistent.

Each autonomous system (AS) is associated with a unique autonomous system number (ASN) and consists of a group of IP prefixes that fall under the control of a single administrative entity, such as an Internet Service Provider (ISP). ASNs are crucial for determining the most efficient routes for network traffic using Border Gateway Protocol (BGP), which enables the Internet to operate as a global, interconnected network.

A diverse range of ASNs is essential for the Bitcoin peer-to-peer network to maintain its decentralized nature, a key characteristic that sets it apart from traditional financial systems. This diversity also enhances the network's resiliency against potential threats, making it more difficult for bad actors to disrupt the network by targeting a single point of weakness.

Page is updated automatically on new snapshot. Time since last snapshot: 0s


NODESCOUNTRY
UPTIME 50%LATENCY 50%
FULL NODESPRUNED NODES
IPV4 NODESIPV6 NODES
IPV4 ROA %IPV6 ROA %
AS174 ADJACENT PEERSHUAWEI CLOUDS (AS136907), A2HOSTING (AS55293), HOSTKEY-USA (AS395839), TACH (AS397412), Hostinger International Limited (AS47583), T-MOBILE-AS21928 (AS21928), TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA (AS14754), Andrews & Arnold Ltd (AS20712), Viettel Group (AS7552), MANAGEDNETWORK (AS7057), ORACLE-BMC-31898 (AS31898), COGECOWAVE (AS7992), active 1 GmbH (AS197071), Iberwix Telecom S.l. (AS203936), ITL LLC (AS21100), PONYNET (AS53667), myNet GmbH (AS31543), VTR BANDA ANCHA S.A. (AS22047), Hostopia Australia Web Pty Ltd (AS55803), USINTERNET (AS10242), O2 Czech Republic, a.s. (AS5610), EASTLINK-HSI (AS11260), ARTERIA Networks Corporation (AS2519), COMCAST-7922 (AS7922), 31173 Services AB (AS39351), Fiber Operator B.V. (AS207375), MEVSPACE sp. z o.o. (AS201814), DDFR IT Infra & Security B.V. (AS35467), WWZ Telekom AG (AS8821), DNA Oyj (AS16086), UNINET (AS8151), NEXEON (AS20278), Quickline AG (AS15600), AS-CHOOPA (AS20473), AS INFONET (AS8728), FORT-COLLINS-CONNEXION (AS397142), Datacamp Limited (AS60068), CHINA UNICOM China169 Backbone (AS4837), Aruba S.p.A. (AS31034), UK Dedicated Servers Limited (AS42831), ATT-INTERNET4 (AS7018), ANTIK Telecom s.r.o (AS42841), Medianet Invest Ae (AS200736), Locaweb Servicos de Internet SA (AS27715), Kcom Group Limited (AS12390), Administracion Nacional de Telecomunicaciones (AS6057), FRONTIER-FRTR (AS5650), SH.cz s.r.o. (AS39392), HUB66 (AS395510), firstcolo GmbH (AS44066), Mega Cable, S.A. de C.V. (AS13999), MVPS LTD (AS202448), LeaseWeb Netherlands B.V. (AS60781), Andorra Telecom, S.a.u. (AS6752), HVC-AS (AS29802), Superloop (AS38195), TERAEXCH (AS399077), Gtd Internet S.A. (AS14259), ARVIG-16904 (AS16904), VIDEOTRON (AS5769), 295CA-TOR-ASN (AS36493), Nos Comunicacoes, S.A. (AS2860), CABLE-NET-1 (AS6128), FLYNET SRL (AS207054), CONE (AS62), Sagitta ApS (AS29100), REDOUBT-NET (AS400304), 1&1 Versatel Deutschland GmbH (AS8881), Deutsche Telekom AG (AS3320), AMAZON-02 (AS16509), ASN-QUADRANET-GLOBAL (AS8100), Hrvatski Telekom d.d. (AS5391), IWEB-AS (AS32613), TENET Scientific Production Enterprise LLC (AS6876), UCLOUD INFORMATION TECHNOLOGY HK LIMITED (AS135377), Adamo Telecom Iberia S.A. (AS35699), Scalaxy B.V. (AS58061), Hostkey B.v. (AS57043), Telemach Hrvatska d.o.o. (AS34594), TIER-NET (AS397423), Alibaba US Technology Co., Ltd. (AS45102), AS-SONICTELECOM (AS46375), green.ch AG (AS1836), Xtra Telecom S.A. (AS15704), TM TECHNOLOGY SERVICES SDN. BHD. (AS4788), Tele2 SWIPnet (AS1257), PEG-LA (AS398823), China Unicom Global (AS10099), TERASWITCH (AS20326), Partner Communications Ltd. (AS12400), Bredband2 AB (AS29518), MARK-TWAIN (AS10750), Akenes SA (AS61098), TOTAL PLAY TELECOMUNICACIONES SA DE CV (AS17072), SASKTEL (AS803), Triple T Broadband Public Company Limited (AS45758), BIZNESSHOSTING-DBA-VOLICO (AS33724), Hong Kong Broadband Network Ltd. (AS9269), VNET a.s. (AS29405), dataforest GmbH (AS58212), SOPRADO GmbH (AS20546), AS-GLOBALTELEHOST (AS62563), IOFLOOD (AS53755), WEBNX (AS18450), AS-GLOBALTELEHOST (AS63023), Free SAS (AS12322), AS-WHOLESAIL (AS20055), Scaleway S.a.s. (AS12876), TPG Telecom Limited (AS7545), Hetzner Online GmbH (AS213230), RCS & RDS (AS8708), M247 Europe SRL (AS9009), Croatian Academic and Research Network (AS2108), Virtual Systems LLC (AS6698), Leaseweb Deutschland GmbH (AS28753), Chinanet (AS4134), Spitfire Network Services Limited (AS16082), Cyprus Telecommunications Authority (AS6866), WIZ K.K. (AS54415), MAIN Sp. z o.o. (AS205671), UUNET (AS701), RADIOKOMUNIKACE a.s. (AS25248), Coreix Ltd (AS31708), Revolution Provider Srl (AS41720), OVH SAS (AS16276), Hohl IT e.U. (AS40994), INFINITUM S.A. (AS265684), Salt Mobile SA (AS15796), MULTA-ASN1 (AS35916), VSE NET GmbH (AS9063), Hytron Network Services Limited (AS202662), Euskaltel S.A. (AS12338), Colombia (AS19429), SUDDENLINK-COMMUNICATIONS (AS19108), Inovare-Prim SRL (AS60602), SKYBroadband SKYCable Corporation (AS23944), One New Zealand Group Limited (AS9500), HGC Global Communications Limited (AS9304), ENZUINC (AS18978), Rostelecom (AS12389), AMANAHA-NEW (AS32489), Serbia BroadBand-Srpske Kablovske mreze d.o.o. (AS31042), Cloudsigma Ag (AS50837), LATITUDE-SH (AS396356), i3D.net B.V (AS49544), PHMGMT-AS1 (AS22363), NL-811-40021 (AS40021), M1 NET LTD (AS17547), METROOPTIC (AS29909), SOLLUTIUM EU Sp z.o.o. (AS43641), netplus.ch SA (AS15547), Signet B.V. (AS20857), TELUS Communications (AS852), Privex Inc. (AS210083), ENET-2 (AS10297), HONG KONG Megalayer Technology Co.,Limited (AS139646), Melbikomas UAB (AS56630), FUSE-NET (AS6181), SHAW (AS6327), LIMESTONENETWORKS (AS46475), Liberty Global B.V. (AS6830), PLINQ BV (AS35224), Serverius Holding B.V. (AS50673), Mammoth Media Pty Ltd (AS133159), 24SHELLS (AS55081), Hybula B.V. (AS35133), TURNKEY-INTERNET (AS40244), Three (AS206067), CETIN a.s. (AS28725), TNNet Oy (AS30798), T-2, d.o.o. (AS34779), Bezeq- THE ISRAEL TELECOMMUNICATION CORP. LTD. (AS6810), CLOUDSINGULARITY (AS394256), CARINET (AS10439), Serverel Inc. (AS50245), Cellcom Fixed Line Communication L.P (AS1680), RouteLabel V.O.F. (AS198203), Belcloud LTD (AS44901), COMPLETEWEBNET (AS13706), MICROSOFT-CORP-MSN-AS-BLOCK (AS8075), SK Broadband Co Ltd (AS9318), Trabia SRL (AS43289), SERVERS-COM (AS7979), EOLO S.p.A. (AS35612), BACOM (AS577), Content Delivery Network Ltd (AS13188), AS-CMN (AS30600), GANDI SAS (AS29169), WII (AS32097), CC-3272 (AS11290), ROGERS-COMMUNICATIONS (AS812), ALGAR TELECOM SA (AS16735), Akamai Connected Cloud (AS63949), CANACA-210 (AS33139), Telecom Algeria (AS36947), inexio Informationstechnologie und Telekommunikation Gmbh (AS42652), VYVE-BROADBAND (AS35986), KAMATERA (AS36007), UAB Cherry Servers (AS59642), Serverd SAS (AS62000), KDDI CORPORATION (AS2516), WorldStream B.V. (AS49981), Daedalean AG (AS212323), Societe Francaise Du Radiotelephone - SFR SA (AS15557), AS-COLOCROSSING (AS36352), EDPNET Belgium BV (AS9031), Fastcom Broadband Limited (AS39449), Republican Unitary Telecommunication Enterprise Beltelecom (AS6697), Kyivstar PJSC (AS15895), Tiscali SpA (AS8612), Leaseweb Asia Pacific pte. ltd. (AS59253), Schlund Technologies GmbH (AS56813), AS-TING-BACKBONE (AS32133), LG DACOM Corporation (AS3786), Luxembourg House of Cybersecurity (AS197869), Latitude.sh LTDA (AS262287), TimeWeb Ltd. (AS9123), SERVER-MANIA (AS55286), EBOX (AS1403), PT Telekomunikasi Indonesia (AS7713), Eir Broadband (AS5466), Tencent Building, Kejizhongyi Avenue (AS132203), VOONAMI (AS30247), CLOUDFLARENET (AS13335), CETIN Ltd. Belgrade (AS15958), Korea Telecom (AS4766), AXCELX-NET (AS33083), Bahrain Telecommunications Company (BATELCO) B.S.C. (AS5416), Scaleway S.a.s. (AS29447), Aussie Broadband (AS4764), BEANFIELD (AS21949), MAJESTIC-HOSTING-01 (AS396073), Kamatera Inc (AS41436), MivoCloud SRL (AS39798), NAMECHEAP-NET (AS22612), WIA spol. s.r.o. (AS21430), InterneXt 2000, s.r.o. (AS25424), Odido Netherlands B.V. (AS50266), Bouygues Telecom SA (AS5410), Kaopu Cloud HK Limited (AS138915), ServerHouse Ltd (AS21472), NETACTUATE (AS36236), Verdina Ltd. (AS201133), Virtual Systems LLC (AS30860), KomMITT-Ratingen GmbH (AS60522), Datasource AG (AS51395), CLDIN B.V. (AS48635), UNIFIQUE TELECOMUNICACOES SA (AS28343), Bluewin (AS3303), Contabo Asia Private Limited (AS141995), BEN-LOMAND-TEL (AS21766), IMONC (AS393238)

TERMINOLOGY

Reachable ASNASN that contains at least 1 reachable Bitcoin node.
Latency 50%50th percentile (median) ping message round-trip time in milliseconds.
Uptime 50%50th percentile (median) uptime in hours from persistent connections.
Block 50%50th percentile (median) latest block inv propagation time in milliseconds.
Height 50%50th percentile (median) block height delta from consensus height.
IPv4 ROA %Percentage of IPv4 nodes covered by ROA (Route Origin Authorization) IPv4 prefixes for the ASN.
IPv6 ROA %Percentage of IPv6 nodes covered by ROA (Route Origin Authorization) IPv6 prefixes for the ASN.
Adjacent peersAdjacent peering ASNs that contain at least 1 reachable Bitcoin node.
BGP alertThis ASN is originating an IP prefix owned by another ASN during the past hour.
BGP alertAnother ASN is originating an IP prefix owned by this ASN during the past hour.


BGP ALERT METHODOLOGY

One threat to the Bitcoin peer-to-peer network's security that is often overlooked is Border Gateway Protocol (BGP) hijacking. In a BGP hijacking attack, an attacker manipulates BGP routes to redirect traffic intended for a Bitcoin node to a malicious node under the attacker's control. This can lead to the interception and manipulation of Bitcoin block or transaction messages, potentially resulting in financial losses. Adding to this risk, Bitcoin traffic is unencrypted by default, making it susceptible to interception and manipulation by attackers who gain access to the network traffic.

BGP hijacking attacks can occur anywhere along the path between a Bitcoin node and its peers, so it is important for Bitcoin node operators to be able to monitor for any suspicious routing changes, both within their own autonomous system (AS) and in the ASes of their peers.


A BGP hijack in the operator's own AS1 (Fig. 1) could redirect traffic away from the legitimate Bitcoin node ₿1 while a hijack in the destination AS2 (Fig. 2) could redirect traffic intended for the Bitcoin node ₿2 to a malicious node under the attacker's control.

To mitigate the risk of BGP hijacking attacks, it is important to have monitoring tools in place that can detect and alert network operators to any unusual routing changes. However, existing monitoring tools may not be suitable for Bitcoin node operators as they are primarily designed for general network operations. Hence, a specialized monitoring tool, such as Bitnodes BGP alert, is necessary in surfacing possible BGP hijacking attacks affecting the Bitcoin network.

Bitnodes uses rpki-client to periodically (hourly) fetch the latest Route Origin Authorizations (ROAs) from each of the five Regional Internet Registries (RIRs), i.e. AFRINIC, APNIC, ARIN, LACNIC, RIPE, and consolidate them into a single JSON file:

{
    "metadata": {.., "buildtime": "2023-01-01T00:00:00Z", ..},
    "roas": [
        {"asn": "AS14061", "prefix": "134.209.0.0/16", "maxLength": 24},
        ..
    ]
}

All IP prefixes from the JSON file are stored in a database and treated as Validated ROA Payload (VRP) for up to 24 hours. Bitnodes uses RIPE Routing Information Service Live (RIS Live) to receive live BGP announcement messages. For each announcement message:

{
    'peer': '27.111.230.35', 'peer_asn': '133210',
    'path': [133210, 9498, 14061],
    'announcements': [{'next_hop': '27.111.228.40', 'prefixes': ['134.209.144.0/20']}], ..
}

Bitnodes queries its VRP database to validate each of the prefixes in the message:

Query outputOutcome
Prefix in the message matches a VRP record. The match can be equal or prefix being more specific with its prefix length no greater than the matching VRP's max. length.VALID
Origin AS in the message did not match the matching VRP record or prefix in the message is more specific than the matching VRP's max. length.INVALID
No matching VRPs.UNKNOWN

If the validation outcome is marked as INVALID, the reachable ASN on the origin AS end will trigger an alert labeled as BGP alert, and the reachable ASN on the VRP's AS end will trigger an alert labeled as BGP alert, for a duration of up to one hour from the time of the last INVALID validation. It is important to note that the presence of these alerts should not automatically be interpreted as indicative of a BGP hijack. They could potentially result from temporary misconfigurations or other benign causes. Additional analysis is almost always warranted, including but not limited to monitoring for anomalous changes in ping latency, block propagation time, or an increase in block height delta from consensus height.


Join the Network

Be part of the Bitcoin network by running a Bitcoin full node, e.g. Bitcoin Core.

Use this tool to check if your Bitcoin client is currently accepting incoming connections from other nodes. Port must be between 1024 and 65535.