Re: [tor-relays] Tor exit nodes attacking SSH?

On 9 Aug 2017, at 10:48, Steven Chamberlain steven@pyro.eu.org wrote:

Hi,

...

I could be wrong, but I think this "dropbear" service is most likely something malicious, running on one or more Tor exit nodes, attempting to collect passwords of people logging in this way.

If you can find the exit fingerprints or IP addresses, please email them to bad-relays@lists.torproject.org. They will BadExit them.

T

-- Tim Wilson-Brown (teor)

teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------