Noticeable Increase in Abuse Traffic
All, I'm getting about 4x the abuse traffic that I normally get from running exits. Anyone else noticing this trend? John Ricketts Quintex Alliance Consulting
How do you define abusive traffic? Do analyze dumps of your network traffic? Is your ISP sending more abuse letters than usual? If the latter, then it might just be a fluke - when I ran exits, the same thing happened - one month 17 abuse reports, the other month 193.. nothing you can do about it except to limit commonly abused ports but that's not a long term solution and I will refrain from doing so, even if the port is mostly abused - I am strictly against censorship, and all the exits I used to own ran under my own IP range and abuse contact, so abuse mails just went directly to spam unless it was actual GOVT requests. 2020-07-19 0:36 GMT, John Ricketts <john@quintex.com>:
All,
I'm getting about 4x the abuse traffic that I normally get from running exits. Anyone else noticing this trend?
John Ricketts Quintex Alliance Consulting _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
See below.
On Jul 18, 2020, at 23:19, William Kane <ttallink@googlemail.com> wrote:
How do you define abusive traffic? Letters of abuse from companies and other ISPs demonstrating hacking attempts. I am not talking about or including DMCA requests.
Do analyze dumps of your network traffic? No, that is not done on the subnet that I put my 100 exit routers on.
Is your ISP sending more abuse letters than usual? I am the ISP. I am getting about 4x more abuse complaints than normal.
If the latter, then it might just be a fluke - when I ran exits, the same thing happened - one month 17 abuse reports, the other month 193.. nothing you can do about it except to limit commonly abused ports but that's not a long term solution and I will refrain from doing so, even if the port is mostly abused - I am strictly against censorship, and all the exits I used to own ran under my own IP range and abuse contact, so abuse mails just went directly to spam unless it was actual GOVT requests. I have received more subpoena than regular in the last two months.
2020-07-19 0:36 GMT, John Ricketts <john@quintex.com>:
All,
I'm getting about 4x the abuse traffic that I normally get from running exits. Anyone else noticing this trend?
John Ricketts Quintex Alliance Consulting _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Which you can answer with a template document, stating that you are not responsible for the traffic and that you, as the ISP / network provider are protected by law, and can not be held responsible for data passing through your routers. 2020-07-19 4:41 GMT, John Ricketts <john@quintex.com>:
I have received more subpoena than regular in the last two months.
I am as well constantly getting emails about it from my ISP. As well as a few companies... not sure why there ramping up. For now I setup a mail rule to forward them to a different mailbox inside my email. Thanks, John Csuti
On Jul 18, 2020, at 8:43 PM, John Ricketts <john@quintex.com> wrote:
All,
I'm getting about 4x the abuse traffic that I normally get from running exits. Anyone else noticing this trend?
John Ricketts Quintex Alliance Consulting _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
I have considered changing my abuse email at ARIN as well. Thanks for letting me know that it is also happening to you.
On Jul 18, 2020, at 23:20, John Csuti <postmaster@coolcomputers.info> wrote:
I am as well constantly getting emails about it from my ISP. As well as a few companies... not sure why there ramping up. For now I setup a mail rule to forward them to a different mailbox inside my email.
Thanks, John Csuti
On Jul 18, 2020, at 8:43 PM, John Ricketts <john@quintex.com> wrote:
All,
I'm getting about 4x the abuse traffic that I normally get from running exits. Anyone else noticing this trend?
John Ricketts Quintex Alliance Consulting _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Low three-figures right now HIgh would be in the low four-figures Shit got real is middle four-figures per day nifty
On 19. Jul 2020, at 02:36, John Ricketts <john@quintex.com> wrote:
All,
I'm getting about 4x the abuse traffic that I normally get from running exits. Anyone else noticing this trend?
John Ricketts Quintex Alliance Consulting _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
participants (4)
-
John Csuti -
John Ricketts -
niftybunny -
William Kane