Dear Adam & Paul,
There have been a quite unusual traffic here in Denmark too, I am situated on the island of Als running on STOFA A/S and TDC Yousee A/S networks, which are being redirecting as if the relays were under DDoS attack, by taking over the link and be a man in the middle?
Relays, bridges and exits have been not trustable and many certificates are wrong, so do a double, trible check even if you are connected to tor networks!
Regards
David
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Sunday, October 25, 2020 8:15 PM, Paul Geurts <paulus@pollekeg.com> wrote:
hi y'all,
one of my relays got suspended today, because of heavy ddos traffic.
Hello,
Today your VPS IP address was
heavily attacked by a large DDoS, so we were forced to suspend the VPS
and null the IP for the time being, since it had overloaded our upstream
provider. We are keeping an eye on the situation, however in the
meantime you will want to get your site behind a DDoS filter such as
CloudFlare.
Let us know if you have any further questions.
has any of you see this behauvior? I think there is no use in putting a relay behind a ddos filter, or is there? In that case I'll just spin up another one.
relay in question is this one, almost 7 months with no interuption what so ever, no indication in the (munin) monitoring for high or higher traffic... because the vps is suspended I don't have the latest syslog so I don't know for sure whether anything has shown up there, but I am quite sure that yesterday there were no abnormal logging entries on this server.