Are you suggesting that the IP's making the connections are potentially exit nodes (they're not, I've checked) or that abuse email volume in general should be lowered regardless of the nature? Just trying to understand your sentiment here :)

Thanks,
Greg


On Fri, Feb 28, 2014 at 9:29 AM, Roger Dingledine <arma@mit.edu> wrote:
On Fri, Feb 28, 2014 at 09:22:10AM -0600, Greg W wrote:
> Roger,
>
> You've confirmed my thoughts. I suspected that some people were bulk
> scanning relays/exits looking for open proxies too which is why I was
> curious if any other operators were seeing this. Thus far today I've got
> 175,000 connection attempts from 220 distinct IP addresses. I think I'll be
> sending some abuse emails and writing a new fail2ban rule!

Great! Except, please hesitate before sending those abuse mails --
isn't that exactly the sort of thing that makes it hard for people to
run Tor exits? :) We've only got this one Internet.

--Roger

_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays