Re: [tor-relays] botnet? abusing/attacking guard nodes

On 12/20/2017 04:39 PM, x9p wrote:

...

My relay B33BFA9AA0005730C1C0E8F7E6F53CF3C5716BD6 is not currently tagged as Guard, and I am seeing more than twenty IPv4s with more than 10 connections, and one with 147. Should that be considered normal for a non-guard relay?

Cheers,

-- Santiago

147 is a bit high for a non-exit, non-guard, for a single IP. check https://atlas.torproject.org/ and see if this IP is part of Tor network.

? IMO relays don't open more than 1 connection to another relay.