So my relay is apparently being attacked
Hi, So twice this week I've gotten this email from OVH: Dear Customer, We have just detected an attack on IP address 51.68.197.220. In order to protect your infrastructure, we vacuumed up your traffic onto our mitigation infrastructure. The entire attack will thus be filtered by our infrastructure, and only legitimate traffic will reach your servers. At the end of the attack, your infrastructure will be immediately withdrawn from the mitigation. For more information on the OVH mitigation infrastructure: http://www.ovh.com/world/anti-ddos/ Regarding the relay at https://metrics.torproject.org/rs.html#details/79E3B585803DE805CCBC00C1EF36B... I am wondering, are relays being ddosed a normal thing? Thank you. --Keifer
I have had the same today. Once I left it in this state and next day got bad exit flag, so not sure what hoovering up actually does, the embarrassing flag took a long time to go. So when I get those notices I shut tor down as soon as I can, that seems to stop what they see as an attack in short order, you get a nice email message in minutes that you are out of mitigation, and restart. Gerry From: tor-relays <tor-relays-bounces@lists.torproject.org> On Behalf Of Keifer Bly Sent: 12 November 2020 18:53 To: tor-relays@lists.torproject.org Subject: [tor-relays] So my relay is apparently being attacked Hi, So twice this week I've gotten this email from OVH: Dear Customer, We have just detected an attack on IP address 51.68.197.220. In order to protect your infrastructure, we vacuumed up your traffic onto our mitigation infrastructure. The entire attack will thus be filtered by our infrastructure, and only legitimate traffic will reach your servers. At the end of the attack, your infrastructure will be immediately withdrawn from the mitigation. For more information on the OVH mitigation infrastructure: http://www.ovh.com/world/anti-ddos/ Regarding the relay at https://metrics.torproject.org/rs.html#details/79E3B585803DE805CCBC00C1EF36B... I am wondering, are relays being ddosed a normal thing? Thank you. --Keifer
On Thu, 12 Nov 2020 10:52:47 -0800 Keifer Bly <keifer.bly@gmail.com> wrote:
I am wondering, are relays being ddosed a normal thing? Thank you. --Keifer
DDoS'ing opponents in an argument is common on some IRC networks, so it could have to do with the IRC exiting that you allow. I don't remember relays on their own getting DDoS'ed in years, but could remember a couple of cases of DDoS which could be correlated to IRC discussions I participated in right prior to that. -- With respect, Roman
My non-exit relays are being DDoS'ed too - I've received similar emails from my hosting provider. https://metrics.torproject.org/rs.html#search/family:B42C797CC8CD63C60FB643E... -Will On Thu, 12 Nov 2020, at 7:09 PM, Roman Mamedov wrote:
On Thu, 12 Nov 2020 10:52:47 -0800 Keifer Bly <keifer.bly@gmail.com> wrote:
I am wondering, are relays being ddosed a normal thing? Thank you. --Keifer
DDoS'ing opponents in an argument is common on some IRC networks, so it could have to do with the IRC exiting that you allow.
I don't remember relays on their own getting DDoS'ed in years, but could remember a couple of cases of DDoS which could be correlated to IRC discussions I participated in right prior to that.
-- With respect, Roman _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Thanks all. --Keifer On Thu, Nov 12, 2020 at 11:56 AM Will Shackleton <w.shackleton@gmail.com> wrote:
My non-exit relays are being DDoS'ed too - I've received similar emails from my hosting provider.
https://metrics.torproject.org/rs.html#search/family:B42C797CC8CD63C60FB643E...
-Will
On Thu, 12 Nov 2020, at 7:09 PM, Roman Mamedov wrote:
On Thu, 12 Nov 2020 10:52:47 -0800 Keifer Bly <keifer.bly@gmail.com> wrote:
I am wondering, are relays being ddosed a normal thing? Thank you. --Keifer
DDoS'ing opponents in an argument is common on some IRC networks, so it could have to do with the IRC exiting that you allow.
I don't remember relays on their own getting DDoS'ed in years, but could remember a couple of cases of DDoS which could be correlated to IRC discussions I participated in right prior to that.
-- With respect, Roman _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Last week, my 3 relays recieved 8 DDOS attacls in total. Thank you. Everything is normal. /anders Til fre., nov. 13, 2020 kl. 02:26, Keifer Bly <keifer.bly@gmail.com> skrev:
Thanks all.
--Keifer
On Thu, Nov 12, 2020 at 11:56 AM Will Shackleton <w.shackleton@gmail.com> wrote:
My non-exit relays are being DDoS'ed too - I've received similar emails from my hosting provider.
https://metrics.torproject.org/rs.html#search/family:B42C797CC8CD63C60FB643E...
-Will
On Thu, 12 Nov 2020, at 7:09 PM, Roman Mamedov wrote:
On Thu, 12 Nov 2020 10:52:47 -0800 Keifer Bly <keifer.bly@gmail.com> wrote:
I am wondering, are relays being ddosed a normal thing? Thank you. --Keifer
DDoS'ing opponents in an argument is common on some IRC networks, so it could have to do with the IRC exiting that you allow.
I don't remember relays on their own getting DDoS'ed in years, but could remember a couple of cases of DDoS which could be correlated to IRC discussions I participated in right prior to that.
-- With respect, Roman _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Thanks very much. --Keifer On Thu, Nov 12, 2020 at 11:21 AM <tor-operator@urdn.com.ua> wrote:
Keifer Bly <keifer.bly@gmail.com> wrote:
I am wondering, are relays being ddosed a normal thing? Thank you.
Yes it's common. We have many users operating Tor relays on our network and we see this on a daily basis.
participants (6)
-
Anders Burmeister -
Dr Gerard Bulger -
Keifer Bly -
Roman Mamedov -
tor-operator＠urdn.com.ua -
Will Shackleton