Scanned I2P network identifying unique routers and analyzing behavior in China, indicating possible coordinated provisioning.
We scanned the I2P anonymity network using five i2pd 2.60.0 floodfill instances across multiple collection rounds, discovering 20,701 unique routers. Chinese I2P routers exhibit a 2-3x elevated explicit floodfill-flag rate versus the global baseline. In the June 30 snapshot, 82.8% of matched CN routers share a high-bandwidth XfR/XRG caps template; 32.8% explicitly carry the floodfill flag via XfR, yet zero participated as floodfills. The matched CN cluster remains concentrated on self-reported RouterInfo version field 0.9.66 (73-93% vs. 1.8% globally) — a 43x enrichment. Cross-referencing independent vantage points reveals four China-vantage-only routers with TCP RST behavior consistent with geographically selective reachability filtering. Combined with concentrated Alibaba Cloud hosting, zero knownRouters or family declarations, and IP churn, the observations are consistent with template-based i2pd deployment exhibiting a uniform RouterCaps pattern. We do not attribute this cluster to any specific actor; the evidence supports coordinated or template-based provisioning. Open-source scanner tools are released under MIT License; raw data is available upon request.
No takes yet. Share an insight, caveat, or question.
Chen et al. (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: