On 08/08/2017 01:48 PM, Steven Chamberlain wrote:
Further investigation shows that this happens for any destination IP address, even where there's no SSH service running:
Make a "trap" ssh server (for example on virtualbox machine without any sensitive data) and log in into it through tsocks. After that check from which ip it was logged in. This probably would be ip of the exit node.