<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>I said most not 100%. My exits were in a Datacenter yet they
      showed up at my home. Actually it depends who it is. The local
      police here was very friendly and send me a invitation to visit
      them in cases with computer fraud that were made over the exits,
      the BKA just gave zero fucks and showed up at 06:00 at my home.
      And took anything looking like tech.</p>
    <p>The exits had this.is.a.tor.exit.node as reverse dns and
      displayed on port 80 what tor is, how it works and why i don't
      have any usefull data for them. So if they would have done any
      kind of more than asking the provider who pays for that IP they
      could have get a hint that they won't find anything useful for
      their case at my home or on the servers....<br>
    </p>
    <div class="moz-cite-prefix">On 16.04.2020 20:18, Volker Mink wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:trinity-3316ff9e-186b-4021-8327-21b566098662-1587061096500@3c-app-gmx-bs58">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div style="font-family: Verdana;font-size: 12.0px;">
        <div>Not 100% accurate.</div>
        <div>I was running an exit at my home connection for close to
          one year. I removed it because normal internet usage became
          absolutely anoying. Capchas and DOS-Protections nearly
          everywhere. No streaming-portal was running. And lots of
          complaints from my provider.</div>
        <div>But no Cop action!</div>
        <div> </div>
        <div>And now i am running 2 exits hosted in datacenters, one in
          germany, one in malaysia. No problems by now.</div>
        <div> </div>
        <div> </div>
        <div>br,</div>
        <div>volker</div>
        <div> 
          <div> 
            <div name="quote" style="margin:10px 5px 5px 10px; padding:
              10px 0 10px 10px; border-left:2px solid #C3D9E5;
              word-wrap: break-word; -webkit-nbsp-mode: space;
              -webkit-line-break: after-white-space;">
              <div style="margin:0 0 10px 0;"><b>Gesendet:</b> Donnerstag,
                16. April 2020 um 13:32 Uhr<br>
                <b>Von:</b> "NOC" <a class="moz-txt-link-rfc2396E" href="mailto:tor@afo-tm.org"><tor@afo-tm.org></a><br>
                <b>An:</b> <a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br>
                <b>Betreff:</b> Re: [tor-relays] Got my first abuse</div>
              <div name="quoted-content">They raid your home even if the
                Tor node is run in a datacenter. Sadly<br>
                the police in germany is still stuck in the 90s and most
                of them don't<br>
                know and/or care what Tor is and how it works.<br>
                <br>
                On 16.04.2020 12:45, Mario Costa wrote:<br>
                > Where you running an exit from home? It’s really
                discouraged because of what happened to you.<br>
                ><br>
                > -m<br>
                ><br>
                >> Il giorno 16 apr 2020, alle ore 04:50, Kolja
                Sagorski <a class="moz-txt-link-rfc2396E" href="mailto:hallo@koljasagorski.de"><hallo@koljasagorski.de></a> ha scritto:<br>
                >><br>
                >> I had a police house search for my exit...<br>
                >> I hate the stupid German police.<br>
                >><br>
                >>> Am 15.04.2020 um 22:53 schrieb
                <a class="moz-txt-link-rfc2396E" href="mailto:lists@for-privacy.net">"lists@for-privacy.net"</a> <a class="moz-txt-link-rfc2396E" href="mailto:lists@for-privacy.net"><lists@for-privacy.net></a>:<br>
                >>><br>
                >>> Hi,<br>
                >>><br>
                >>> my Family¹ has had an exit for 2 weeks and
                today the first abuse mail has arrived.<br>
                >>><br>
                >>> First of all, thanks for the templates:<br>
                >>><br>
                >>> <a
                  href="https://www.torservers.net/wiki/abuse/templates"
                  target="_blank" moz-do-not-send="true">https://www.torservers.net/wiki/abuse/templates</a><br>
                >>><br>
                >>> <a
href="https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates"
                  target="_blank" moz-do-not-send="true">https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates</a><br>
                >>><br>
                >>><br>
                >>> I linked these two from the Tor-project:<br>
                >>><br>
                >>> - Common Boilerplate (Tor Intro)<br>
                >>><br>
                >>> - SSH Bruteforce Attempts<br>
                >>><br>
                >>> and wrote the following myself:<br>
                >>> --------------------------------------<br>
                >>> Another good option that we use ourselves
                is: fail2ban<br>
                >>> And report to blacklists, which can then be
                loaded into the router firewalls:<br>
                >>> <a
                  href="https://www.abuseipdb.com/user/33280"
                  target="_blank" moz-do-not-send="true">https://www.abuseipdb.com/user/33280</a><br>
                >>><br>
                >>> Hope this helps!<br>
                >>> --------------------------------------<br>
                >>><br>
                >>> I actually wanted to add that the SSH login
                attempts can be limited. (3-6)<br>
                >>> Because the logs from the abuse mail showed
                100 attempts pro IP. ;-)<br>
                >>><br>
                >>> _Are such notes useful or do such
                instructions cause even more problems?_<br>
                >>><br>
                >>><br>
                >>><br>
                >>>
                ¹<a class="moz-txt-link-freetext" href="https://metrics.torproject.org/rs.html#search/TorOrDie4privacyNET">https://metrics.torproject.org/rs.html#search/TorOrDie4privacyNET</a><br>
                >>><br>
                >>> --<br>
                >>> ╰_╯ Ciao Marco!<br>
                >>><br>
                >>> Debian GNU/Linux<br>
                >>><br>
                >>> It's free software and it gives you
                freedom!<br>
                >>>
                _______________________________________________<br>
                >>> tor-relays mailing list<br>
                >>> <a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br>
                >>> <a
                  href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays"
                  target="_blank" moz-do-not-send="true">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a><br>
                >> _______________________________________________<br>
                >> tor-relays mailing list<br>
                >> <a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br>
                >> <a
                  href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays"
                  target="_blank" moz-do-not-send="true">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a><br>
                > _______________________________________________<br>
                > tor-relays mailing list<br>
                > <a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br>
                > <a
                  href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays"
                  target="_blank" moz-do-not-send="true">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a><br>
                _______________________________________________<br>
                tor-relays mailing list<br>
                <a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br>
                <a
                  href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays"
                  target="_blank" moz-do-not-send="true">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a></div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
tor-relays mailing list
<a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a>
<a class="moz-txt-link-freetext" href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a>
</pre>
    </blockquote>
  </body>
</html>