XMRLIST
home / tools / spy node checker

Monero spy node checker

Check an IP address against the Monero Research Lab ban list of suspected spy nodes. The check runs in your browser.

Updated

Type an IP address. Nothing is sent to us.

Entries on the list
431
417 addresses, 14 ranges
List version
Monero Research Lab spy node ban list version 2, 2025-12-10
from the list's header
Public nodes we list
1 of 179
resolve to a listed address
01

Listed public nodes

NodeResolves to
http://static.63.34.245.188.clients.your-server.de:18089188.245.34.63

These nodes from our remote node list currently resolve to an address on the ban list. Avoid them.

Source: Boog900/monero-ban-list (signed by Monero contributors). "Not listed" does not prove a node is honest. Background: remote nodes and privacy.

?

Questions people ask

What is a Monero spy node?
A node run to watch the network instead of serving it. By operating many nodes, an observer can try to link transactions to the IP address that first broadcast them. Spy nodes cannot see amounts or addresses, and they cannot take funds.
What is the MRL ban list?
A list of IP addresses and ranges that Monero Research Lab contributors identified as likely spy nodes. Node operators can load it so their node refuses to connect to those addresses. It is opt-in and signed by several Monero developers.
How do I use the ban list on my own node?
Download ban_list.txt and start monerod with --ban-list /path/to/ban_list.txt, or add enable-dns-blocklist=1 to use the DNS-based list. See our guide to running your own node.
An IP is not on the list. Is the node safe?
Not necessarily. The list only covers addresses that were identified, and operators can move. A remote node always sees your IP address and when you send. Use your own node, or connect through Tor, if that matters to you.
Do you log the IP I check?
No. The list is loaded with this page and the comparison runs in your browser, so the address you type is not sent to us.

The XMRList newsletter

New verified merchants, scam warnings and Monero tool updates. About once a month, nothing else.

Double opt-in. No tracking pixels, no ads, never shared. Unsubscribe in one click.