- tor-relays - lists.torproject.org

bandwidth authority algorithm is cracked
by starlight.2014q1＠binnacle.cx 22 Jan '14

22 Jan '14

The bandwidth authorities assign all kinds of wildly incorrect capacities to the Tor node here. The Tor relay software has been up for 45 days and has not been down for more than five minutes for three or four months. Occasional outages from the ISP mucking with their network, but nothing more than ten or fifteen minutes in any week. The local node bandwidth calculation is consistently 490-495 Kbytes/sec. Very stable. Very consistent. The Tor bandwidth authorities assign values anywhere from 100 Kbytes/sec to almost 700 Kbytes/sec in an oscillating pattern with a period of about one week. Something is seriously wrong with that.

6 10

Trying Trusted Tor Traceroutes / Scoreboard bug
by Sebastian Urbach 21 Jan '14

21 Jan '14

Dear list members, We have seen a small amount of odd entries like "slash24-proxy" in the "phases completed" column at the scoreboard: http://128.174.241.211:443/relay_scoreboard It was a small script bug and Anupam is going to fix it today. No data is lost, please check back with the scoreboard in a few hours. Thank you for your patience. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

Legal implications of tor relays
by tor＠gmx.info 21 Jan '14

21 Jan '14

4 3

Need help to set up Tor + Router: ORPort and DirPort unreachable
by Christian Stadelmann 20 Jan '14

20 Jan '14

Hi I am running tor 0.2.4.20 from official RPM repositories on my local machine (Fedora 20). I can use it to surf the web and https://check.torproject.org/ (besides others) tells me that tor is running. I had the same problem with 0.2.3.25 from fedora's own repository. According to `netstat -tulpen` tor listens on 0.0.0.0:9001, 0.0.0.0:9030, and Control port + Socks port. I configured my Router to port-forward 9001 and 9030 for both TCP+UDP and IPv4+IPv6. How can I test that this worked? I am running a local firewall but it does not seem to matter whether it is enabled or disabled. Is there anything else I could be missing? Regards Chris

3 3

Re: [tor-relays] Trying Trusted Tor Traceroutes
by Sebastian Urbach 20 Jan '14

20 Jan '14

Hi Mick, Thanks for participating ! And another relay hits the road :-) -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman Am 20. Januar 2014 19:33:48 schrieb mick <mbm(a)rlogin.net>: > On Sun, 19 Jan 2014 20:57:07 -0600 > Anupam Das <anupam009(a)gmail.com> allegedly wrote: > > > Dear Tor relay operators, > > We have recently received a good > > rate of participation by relay operators to our measurement project. > > To give everyone an idea of the current participation rate we have > > hosted a live scoreboard of all our participants, available at > > http://128.174.241.211:443/relay_scoreboard > > The live scoreboard highlights all the IPs from which we received > > traceroute results along with the current status of the script > > running in their machine. The live scorebaord also summarizes the > > participation by the top Tor Families and the top guard and exit > > relays. > > We thank all the relay operators who have participated and hope more > > relay operators will participate soon. > > All > > Before starting this (given the Hetzner experiences), I checked with my > VPS provider (DigitalOcean) that they were happy. They have said that > they see no problem, and even if they do later spot an issue they will > take no precipitate action because of my prior alert to them. > > So. guard relay 0xbaddad now has the script running. > > Mick --------------------------------------------------------------------- > > Mick Morgan > gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 > http://baldric.net > > --------------------------------------------------------------------- > >

1 0

Re: [tor-relays] Trying Trusted Tor Traceroutes
by Sebastian Urbach 20 Jan '14

20 Jan '14

Hi elrippo, Thanks for participating ! Your logs are looking good. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman Hy dear mailing list Traceroute maintainers. At the moment three relays are doing the traceroutescript with scamper. All of them started yesterday evening, somewhat 24hours ago. Listed down in below you find some outputs, maybe these are helpful. NODE 1 /Traceroute-results$ ls -la total 9532 drwxrwxr-x 2 user user 4096 Jan 20 15:49 . drwxr-xr-x 5 user user 4096 Jan 19 14:51 .. -rw-rw-r-- 1 user user 702271 Jan 20 15:49 slash24-1390154252-node-60.ips -rw-rw-r-- 1 user user 9043968 Jan 20 16:02 slash24-1390154252-node-60.scamper ~/Traceroute-results$ ps ax | grep scamper 10058 ? S 1:11 scamper -c trace -p 1000 -f slash24-1390154252- node-60.ips 10059 ? S 0:00 scamper -c trace -p 1000 -f slash24-1390154252- node-60.ips NODE 2 /Traceroute-results$ ls -la insgesamt 4216 drwxr-xr-x 2 user user 4096 Jän 20 16:53 . drwxr-xr-x 5 user user 4096 Jän 19 15:33 .. -rw-r--r-- 1 user user 702272 Jän 20 16:53 slash24-1390154992-node-54.ips -rw-r--r-- 1 user user 3604480 Jän 20 17:00 slash24-1390154992-node-54.scamper ~/Traceroute-results$ ps ax | grep scamper 22758 ? S 1:47 scamper -c trace -p 1000 -f slash24-1390154992- node-54.ips 22759 ? S 0:00 scamper -c trace -p 1000 -f slash24-1390154992- node-54.ips NODE 3 /Traceroute-results$ ls -la insgesamt 3796 drwxrwxr-x 2 user user 4096 Jän 20 16:55 . drwxr-xr-x 5 user user 4096 Jän 19 15:44 .. -rw-rw-r-- 1 user user 702223 Jän 20 16:55 slash24-1390156006-node-48.ips -rw-rw-r-- 1 user user 3174400 Jän 20 17:01 slash24-1390156006-node-48.scamper ~/Traceroute-results$ ps ax | grep scamper 20212 ? S 0:58 scamper -c trace -p 1000 -f slash24-1390156006- node-48.ips 20215 ? S 0:00 scamper -c trace -p 1000 -f slash24-1390156006- node-48.ips Kind regards, elrippo Dear Tor relay operators, We have recently received a good rate of participation by relay operators to our measurement project. To give everyone an idea of the current participation rate we have hosted a live scoreboard of all our participants, available at http://128.174.241.211:443/relay_scoreboard The live scoreboard highlights all the IPs from which we received traceroute results along with the current status of the script running in their machine. The live scorebaord also summarizes the participation by the top Tor Families and the top guard and exit relays. We thank all the relay operators who have participated and hope more relay operators will participate soon. Thanks Anupam -- We don't bubble you, we don't spoof you ;) Keep your data encrypted! Log you soon, your Admin elrippo(a)elrippoisland.net Encrypted messages are welcome. 0x84DF1F7E6AE03644 -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.11 (GNU/Linux) mQINBFH797MBEAC0Y0NeI7lmDR9szTEcWuHuRe0r/WjSRC0Nr5nXsghuMcxpJ3Dd BOBimi4hdMMK4iqPVMwNw6GpKYR3A9LHHjbYRXHUKrJmB+BaJVyzJXN5H6XvxTTb UfX+DaXAGJW/G+3cBB3qm/QaU8QGkBKfXq0DLTaTGPkGKxEAldj/8onGZhawdJs+ B92JrW+S2HDh15pIuXzSqe7eCcIOdvvwfWe0fJi2AraA7LYGpxP6GcC/b9JJpbq5 Y6DfE2Aun9ZK3iHqURyrms0Whbv1CgmUahL2MVYCsTsXwe0GwlAxxKvjXAiXuo+R 9wO5wsXvVVSVNqsk9Yqi+wYzdPKndTU0GyxSApQHroF+cxaZ8Lk0xloj18+LdCSs e5IiTSXH0MMsDdWWdHlrgk+bgDG+0Gu3ne4vMwGdKO7AhYgQW/ueMy4RnkG/nsV9 jry5BO4gGAI1Ij8KvqUzEnvJFGE3ptJogU+zazWWDUWmL3ecKb3aDRlJFnZ3kJ5h q8GolZVjpk99V+4B5WVRPXdej/p5J19tXycK/jdNmr4oC8NyUhIpe8xHELnfoB4z +rxiTx+KMnW0rY8EQg8O2ixEYt5my90IwQkxcxIxextVrqjJjYn8extc2/v8yGzI KmTEJxdADB5v/Jx4HiLHNDSfBUb8gfONCkNSTYvTcSwTjWzHOkXeE/9ZbQARAQAB tD5lbHJpcHBvIChrZWVwIHlvdXIgZGF0YSBlbmNyeXB0ZWQpIDxlbHJpcHBvQGVs cmlwcG9pc2xhbmQubmV0PokCOAQTAQIAIgUCUfv3swIbLwYLCQgHAwIGFQgCCQoL BBYCAwECHgECF4AACgkQhN8ffmrgNkT8+BAAoAXBqu4/O2Cs5FSWWZpzgScNEgq7 uHhOKeYmRfgKlOUPoYlPB1DBqdOAXSKb9OvsmyOvpoGnqijB7aAJBoyQYW/OCQgd U8L4eTCf4yRZnfFLdgskcPfN1p0Rs/yinGEooBJFtYa7mT6J0UTW2JjCLZK2AFCW oF+KBu5JICXGBXigb2ZbX1jWjxP5H1RidQw6HF5z4z34SjLWAOOeZ8B/Xfz6Fs0s IAuLu2O4HE4DI8Qu196LhSVHHgr3uMTkvN1t5nKwyjrRQztwXXk9qIomII3ydNYb BYAGdWNNMfLb1kmDwC5wQHAFvSP1aiMF3aKAY+gl2wXSGO6JqM0SteJS3dytIljI kzu0atc9HuGs/HDQgdmpAS4WU2YefEr/WieltSiAKlwuC+3wg+CONJ6TE1vgNDU/ axerttb0jq7UQb/nAp05bsrB7XH1Vs+1ON9lUPEfWRmwQcrVK5JUrUWa/4tA/UeM XvFcPFtFluGTlLewgJIqcvjPXFwpbDZprXJsMkwew/A6B6n3+0sbgf7p3QSGkVbi dwQAymTbHdYqLnbcnKZhjto3Wjw1J5QB2wuiRYlpjV3i7AWTGlqoSTOWCCV+HamQ qeFYNYAWNFx3+J/oi7xDi8t9bHVNA205equ+y2sj3G5uGJ6LSHQ8AXp9uOipUUvU 1MJN0yLXr9PIwvi5Ag0EUfv3swEQAL0+MnxHGrTjSYdfdua4SBpmytDONM1EngeY s+WyaC/760MughKbaysI/nK2LB1vnwEY7f3NM4fxBx8u2T7VBm6Ez6Fs23Bb8Rkz f97bPSdxCmg64GPHfLA9uwTIXcYS+MpI86WOf6eWY0rRpf7Y9Nl7YoUNvzOyUPqc ggdcnHce8zYv7A/WS8flZDm8tVFPsHrQDEwNMws7ZhiNnHkeZeRJrvCuB7oEVich O/ROYoA5o6NozWYQbjxe1f6Yur4Q10qgVcxVnyLFJSbg6vZSzL7KYh3Z5iBOzPHt 7cwEDrW8W4Kl2Qj8rhJ4Wxs94CAtua7IXK44sVZWQbyHcOXRikgGMZKkEZzVCQa5 KD1u1ZrcBCyuMAir0hsmS3jhCUwpiE2c3SRk8O8CgixhTcBk0X/k9ZFu3Hbi1JMB FLzs/Nq3tYAYvVivhPloSxmYBPsafYHCZM83yBNNsralXh5zjB+di90G+AMXt2PN LTcdovZuWtC0s8/jrx+zv/AA4FAGYU9OVl+YL9ybFX8gSdMEcixyzQcKfiFBjpWv 5iFrwIuDlaXMcheyrhc9aGOxfx44OXc505+VjO/1Q/8EOWlJ6UwOi6GMkj5T+RFJ MDyP0UixS7dt6wTuD5t6PRuyWWxZswgrbL9hjwGFr154Z19TWeNWc23pWtUvQJos UCxl2nFHABEBAAGJBD4EGAECAAkFAlH797MCGy4CKQkQhN8ffmrgNkTBXSAEGQEC AAYFAlH797MACgkQJEPd69lQ0evA+Q/+M7lSFlrQWiRsFqDjh+kTJc+0OEBCvnfo N2KPyXXbfc//qup55PfEygE6C60zvrlv3WE33GZ5GS5MLuDMP82b+a5Yt16NQU7L WtAg1g0S0BvazW+28TgnfO8bhbGaFeE9ccw3xLmlbwZQ3f3LtMKdwFIROiG6hvAs 9U54QYti3tv9DowRYYWpdr0Ga8RqeGNtCKc0v2opy51MpzKWjwUW0i3XlSlyY8Lj 1KT8PyznNPw32nYpmDizz+0OUJNnn/kT+GnFoR3DJnFosTOrnxFJp+N+nejMp/gW r9NM0/E7H+P53IiytBOt5/0vsOaCFGdYGhKEjmJi3dHS4Xk1ObD1mjdD1YDOlWWU 3Md6BDHd4W7Q8gT7oQfTIMLd3HzV+WNPIdocPLBaeA/tRD8Pg5CCmncAmSub4F5T An7FlnACtSOv3cIWQ0TymS42DihDaJ5d1RvNzKw+zHYdPvf471JFZR3TDhkPbLIr 9czR7kbpnXRwchgwXQn306NVWf37TgA8wpbnFTazZ38iOeqcb9oKprqnbgEdr3PN OhKSlMTkzAqf3MEi2Fyua4BADMhS3oBwCRgDTlt6wquEytpNSlZaHnyiyIgOpekF Uy5K3w8NhHqeifRPrNb/UcCbXtXz+puqIEZHMenpv6FRlTTKpdoHoVXSkp1TPMGN /VaCiLbP4Z3xEw/9EbAJJkhmmx1Qw3ueoqc4h1MmhUtIdxSZ/oA9SjwlnY++zvaZ 6w1wTS4P+OUkETNDtItdpxXMJ9qfSy9voAQc2K43WMZCCmpPJYSdqaZZNPFj+Ne8 6FNtNKuUkXREybpHwlVAXnHzInmFOOM9RAmF70r3zEmKt77W1ztBLo2o9X79gPgL u9ThgrH6Oc2k46n+9nc3joccr7miiX/bp976DNWcWdOYThiSSOCb8Zw9/Zs935i1 wUVkYTj24tmBH4H5ov9ib7RPmU21ru458RbUKG0ONAqBtAHNyXHzUnXsrke+D4VW MI06YcXSk8YeYgQ8GxgHQc+W2bb8LIbKN1hEYJ0wzM62vKR2/Oiwuf8lXutIKTuz +v7Vj1PQd66DGHsxtWRaWnr1c54JTL2wICHJYKFH4grp7864+GL/uQ1O/Z/XxVku E1JQ/AnwBGU1M1S6otwWGWVRjzEzQtxsfcCEPvV/9td3FIFQAbGTPb+48XFU+TY9 8AlcXBlDzXq7c5f8Evn/oSIsZDt63K4HNTmMGqOTl/p1aA0e4eyX76LczY06rDP5 GMSNs+AHmYgZiS4RYhRUIvS9uLXMnnDAMYst0SDl2orDUUeHBTzu0rchyknBZMGP p5wQuWQ9CFlV+dj3UYbrBwC1lTkAMXRG2vlhA0V0TZqos7A5D4VHgSUQQjE= =otlL -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: [tor-relays] Legal implications of tor relays
by Lars Kumbier 20 Jan '14

20 Jan '14

(Copy to the list) Hi there, runing a non-exit relay is usually deemed safe, a separate abuse-handling is not necessary (because no exit-connections happen, that might infringe laws, but only connections to other tor nodes). You should however check the terms of service of your provider to make sure, that running an anonymization service is covered and allowed - some providers are calculating their prices and traffic allowances with very small profit margins and might suspend your account, if you produce too much traffic or use too much VPS resources. You can find several lists online[1][2] for some TL;DR-Shortcuts. If you still do need assistance, feel free to contact me on the mailaddress lars+tor(a)kumbier.it. You might also want to check out Zwiebelfreunde e.V. or other local tor groups like the Torrorists e.V.[3]. Best Regards, Lars _________________________________________________________ [1] https://www.torservers.net/wiki/hoster/experience [2] https://wiki.raumzeitlabor.de/wiki/Torrorists/Hoster [3] http://torrorists.de Am 20.01.2014 17:08, schrieb tor(a)gmx.info: > Hi list, > > I have set up a tor relay with no exit functionality yet. Having read > through the documentation and general legal hints, I am still unsure > of the legal situation in Germany. Are there some of you guys who > had contact with hosting providers because of abuse claims? > Is there anything you can share? Are pure relays safe to use or > are the hosting providers still clueless? > > Thanks and best regards. > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] Trying Trusted Tor Traceroutes
by Sebastian Urbach 20 Jan '14

20 Jan '14

Hi Konrad, Please check if your files looks like this: slash24-220.ips slash24-220.scamper It would be a lower value than 220 though, just an example. You could check if there is a scamper and or traceroute process running. The speed and the filename documented on the site are indicating that you are running traceroute and not scamper. If we need to dig deeper i would suggest that we do this via private mail and inform the list if there is something relevant. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

Re: [tor-relays] System Time
by Sebastian Urbach 20 Jan '14

20 Jan '14

Good Morning, I really tried very hard to stay calm but at least someone has to say it. I think operating relays / bridges can be described as a cutting edge job or experience. It seems that everybody wants to be an node operator these days but sadly enough there is absolutely no test or qualification that proves that one has at least something like minimum admin skills or other capabilities to do the job. Anybody who wants to drive a car needs a license though. Honestly, its great that it is getting a little bit easier to operate a tor node but when there are discussions over a period of days on how to adjust a VPS clock or basic lectures about udp / tcp ports, 100 % cpu load and so on then there is only so much to say: If you don't know what you are doing, then be honest to yourself and stop doing it ! Neither is this mailing list nor the tor project in general the right place to make first steps as an admin. This project needs serious people with serious skills in this serious time which are capable to operate reliable, stable and when possible of course fast systems. There is a reason why most operators are it professionals with years and years of experience in operating different systems all over the world. And further, i strongly disagree with the text Robert wrote today that the project should provide more material for newbies because there is already more than enough material. And if you feel that this is insufficient then thats just proving my point that you and others are way out of your depth and i seriously doubt that flooding the relay list with "linux for dummies" questions is helping the project with its limited personal and technical resources in any way. I would like to propose a new list which may or may not be called "tor-relays-new" or so. New operators should start there for a certain period of time and if everything seems to be in order they may be transferred to tor-relays. Of course this is just a very rough proposal, there may should be other criteria involved, like uptime, received flags etc. Im sure that there could be a reasonable list of achievements for new relay operators. I expect a bit of resistance and a bit of a shitstorm right now. Please feel free to direct this straight to me and not to the list. I also would like a discussion regarding the facts of the matter to take place on this list very much. Keep in mind that i'm just the messenger and probably just saying out loud what a lot of people are thinking ... -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ------------------------------------ In time of war, the first casualty is always truth. ------------------------------------ Hiram Warren Johnson (1866-1945) US Senator, California Moritz and Jeroen, Thank you both. I tried both your ideas but the system is set to prevent the time being changed as you thought. Another plea to the VPS controllers and it was corrected. So the lesson there is presume it is the VPS set-up first and foremost. You both should know that the concise and clear advice like yours is what this list needs rather than mysterious jargon and code. Anyone finding the instructions you gave would also see the complete explanation with them. I don't know how but it would be good to facilitate the search for or extract such advice for keen newboys. The subject line isn't always the best label as I demonstrated. Robert _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

7 9

privoxy, port 8118 scans
by Mateusz Błaszczyk 20 Jan '14

20 Jan '14

Hey I am wondering if this is a coincidence but since I started the tor relay, I see a lot of TCP/8118 connections attempts on my relay's external IP. I run the offending source IPs (aggregated to /24s) through cymru's ip-to-asn decoder and here are results of only today: Bulk mode; whois.cymru.com [2014-01-19 15:16:19 +0000] 15003 | 108.177.181.0 | 108.177.180.0/22 | US | arin | 2012-03-15 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 142.91.245.0 | 142.91.240.0/21 | US | arin | 2012-06-08 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 172.240.255.0 | 172.240.0.0/16 | US | arin | 2013-04-08 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.16.0 | 173.208.16.0/21 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.57.0 | 173.208.56.0/22 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.85.0 | 173.208.80.0/21 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.12.0 | 173.234.12.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.153.0 | 173.234.152.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.235.0 | 173.234.232.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.247.0 | 173.234.244.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.33.0 | 173.234.32.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.41.0 | 173.234.40.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.60.0 | 173.234.56.0/21 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.130.0 | 23.19.128.0/22 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.50.0 | 23.19.50.0/23 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.54.0 | 23.19.52.0/22 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.67.0 | 23.19.64.0/20 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.75.0 | 23.19.64.0/20 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.89.0 | 23.19.88.0/21 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 70.32.43.0 | 70.32.43.0/24 | US | arin | 2008-07-25 | NOBIS-TECH - Nobis Technology Group, LLC 18450 | 173.231.54.0 | 173.231.0.0/18 | US | arin | 2010-03-19 | WEBNX - WebNX, Inc. 20248 | 74.82.191.0 | 74.82.176.0/20 | US | arin | 2010-01-26 | TAKE2 - Take 2 Hosting, Inc. 40676 | 216.24.204.0 | 216.24.192.0/20 | US | arin | 2010-10-14 | AS40676 - Psychz Networks 46475 | 192.169.84.0 | 192.169.80.0/20 | US | arin | 2012-11-02 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 192.169.86.0 | 192.169.80.0/20 | US | arin | 2012-11-02 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 208.115.203.0 | 208.115.192.0/18 | US | arin | 2010-01-06 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 208.115.228.0 | 208.115.192.0/18 | US | arin | 2010-01-06 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 216.245.222.0 | 216.245.192.0/19 | US | arin | 2008-01-28 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.33.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.36.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.52.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 64.31.43.0 | 64.31.0.0/18 | US | arin | 2010-12-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 69.162.116.0 | 69.162.64.0/18 | US | arin | 2008-06-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 69.162.74.0 | 69.162.64.0/18 | US | arin | 2008-06-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 74.63.226.0 | 74.63.192.0/18 | US | arin | 2008-08-29 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 74.63.249.0 | 74.63.192.0/18 | US | arin | 2008-08-29 | LIMESTONENETWORKS - Limestone Networks, Inc. There were almost 200k SYN packets sent for the last 15h from the 228 unique IP addresses. Would that be part of tor project? I have never run privoxy on my network and I am not really sure what the relation between tor and privoxy is? Can somebody shine some light on that? [0] https://www.team-cymru.org/Services/ip-to-asn.html Thanks, -mateusz

2 1