[tor-relays] Reading check.torproject

[Tim Wilson-Brown - teor]

> On 18 Apr 2016, at 14:14, eliaz <eliaz at riseup.net> wrote:
> 
> In looking at the check.torproject.org page on the browser/machine that
> runs my bridge, I'm used to seeing the same IP address a.b.c.d on the
> check page ("Your IP address appears to be: a.b.c.d") as in the exit on
> the path drop-down. But today for several hours a.b.c.d showed on the
> drop-down but a different address w.x.y.z appeared on the page. Opening
> up atlas gave a "no results" error until I entered a.b.c.d manually; and
> w.x.y.z was no tor node; it turned out to belong to a VPN provider which
> was also poking my ports. Is this discrepancy normal? Should be worried
> about it? - eliaz

This sounds like it could be a bad exit redirecting all your traffic through a VPN, while trying to attack you.
It's somewhat less likely to be a misconfiguration of the proxy settings on your bridge.

It's normal for tor to change exits occasionally.
Do you know which exit your tor client was actually using during that time?
If so, report it to bad-relays at lists.torproject.org

Tim

Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP 968F094B
ricochet:ekmygaiu4rzgsk6n



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20160418/650b8518/attachment.sig>