Re: [tor-relays] UbuntuCore (botnet?)

Paul Templeton:

These nodes are popping up everywhere - is this some sort of malware being deployed on systems around the globe?

I wrote about them in April 2017: https://medium.com/@nusenu/is-this-a-ubuntu-based-botnet-deploying-tor-relay...

I assume they are not setup by humans.

Since back then the overall CW fraction of these relays increased about x4 (currently 92 concurrently running relays).

That is about position #69 on the list of biggest operators by CW fraction https://nusenu.github.io/OrNetStats/maincwfamilies