Bitcoin · Who is knocking?
5,822 connections. 82 names. One address.
BitcornPleb’s report from one node gives a reason to look more closely at its neighbours. Two Umbrel apps turn those connections into something an operator can inspect.
The address kept returning; the wallet names kept changing. BitcornPleb reports that one address associated with LinkingLion opened 5,822 connections to their node under eighty-two fake wallet names. It is a measurement from one operator, not a count of the whole Bitcoin network.
The observation accompanies two apps built for that operator’s own Umbrel and now offered through a community store. Bitcoin Lab records which peer delivers each new block first and ranks peers by that measure. For solo miners, it also times how quickly the pool turns a block into work, with automatic discovery of pool apps on the Umbrel.
Peer Map puts connections on a world map and classifies them as nodes, wallets, crawlers or peers presenting themselves as Bitcoin Core. The author says it also counts LinkingLion connections and raises the possibility of transactions being linked to IP addresses. That attribution and the reported connection count come from the developer; they are not an independent identification by this paper.
The tools’ stated scope stays close to home: Both run on your own node: no account, no tracking.
The useful question behind them is concrete: which peers deliver blocks, and which ones repeatedly turn up under different names?

