[metrics-team] How many exits exit from an IP address different than their OR address? (July 2016, 5.6%)
David Fifield
david at bamsoftware.com
Fri Jul 1 08:05:34 UTC 2016
The attached script shows which exit relays use a different IP address
to exit traffic than they do to receive connections from other relays.
Currently, 57/877=6.5% of running exit relays have this property (7.4%
by consensus weight).
I did something similar in January 2016 using exitmap. At that time I
found 109/1018=10.7% of exit relays.
https://lists.torproject.org/pipermail/tor-dev/2016-January/010172.html
It turns out that you don't have to do your own active measurement,
because Onionoo conveniently provides or_addresses and exit_addresses
fields.
The annotation like "...*" and "****" shows which octets differ in the
first or_address and the first exit_address.
As last time, we see many relays exiting traffic from subnets completely
different than their OR address. Several groups of relays are related
through their exit IP address:
TheTor ThisTor
DVMY XSYX
Maxux epcsjazz doyrov chm0 Bjard
PrivacyRepublic0001 PrivacyRepublic0002 PrivacyRepublic0003 PrivacyRepublic0004
torcasa huncastle
PurpleNet YellowNet
airport terminal
CriticalMass HaveHeart
5BC84FB70EDB218E33230308C069070969491004 thracia ...* 104.233.83.206 104.233.83.9
91824956DFA430C071BF6B94B623DF10931D1D40 timcinel **** 37.187.105.104 108.61.122.88
35449EB3D025CC24601FB43884F9699367D677CF GuruKopi ...* 118.163.74.157 118.163.74.161
DF286E034689DDBC132B3BED08A12D5686DD3D7F daUni ..** 120.56.160.15 120.56.172.20
37BF11510F51EB2ECDDEBE66AB3536205298E671 gpmr ..** 120.56.164.253 120.56.174.204,120.59.173.245,120.59.34.222
B0C87F0D98E16CAD143E649E4D7E27743B0A292D Blog1 ..** 120.59.165.209 120.59.36.0
36E77A805BBABF6B79ACFB75ABC688018C9C7CC6 tornado1 ..** 120.59.32.95 120.59.45.68
D9CBECBE61DFABF314F07128F486737F067E9206 hidemyassnetdotnet4 **** 217.37.19.116 136.0.0.66
43FEAA1603D34EDA04AF34D07133DC46FE8947D9 DVW ...* 148.163.73.86 148.163.73.85
0E209F4128C682F7902AD6D2F8081AF247B32209 Cobies ..** 165.255.220.113 165.255.105.22
27CE487BABE6C2128FB2D1A801C7CB715B48EC6B TheTor **** 153.92.126.19 178.162.209.232
C369EB6BFDFB996864746944544B82C9684C46EA ThisTor **** 153.92.126.19 178.162.209.232
A7E78D9880BB0793409D386D15E83B3B1236B19F Unnamed ...* 178.175.128.54 178.175.128.50
C78C07D266A1FD76C7264DC0371F1907FE6A299A courvoisier **** 94.51.158.26 178.46.110.133
82BBC61345F7AAD008728FBC90EB42D717E031EC confnode **** 177.98.198.213 187.114.120.54
C90CA3B7FE01A146B8268D56977DC4A2C024B9EA cowcat ...* 192.160.102.165,[2605:e200:d00c:c01d::2222] 192.160.102.164
01A9258A46E97FF8B2CAC7910577862C14F2C524 ins0 ...* 193.171.202.146 193.171.202.150
CF9D66045FED1A776E0E023B3215051CA4D2AD5C BSDNow2016 **** 158.69.218.78 195.154.8.111,84.251.91.165
074A243028FBCCB8F8404E83B3498ACB27F78954 Isoroku ...* 209.159.137.56 209.159.137.59
8BF22BEA5F854F2BB2E09C71260ADF590D355E36 Dontbleed2 ...* 213.61.149.125 213.61.149.100
80D73E75A30BEEF627604B7014753304764E0723 Dontbleed1 ...* 213.61.149.126,[2001:920:18c0:2:1001:101:0:1] 213.61.149.100
4F0003EAB0E8712B94B29A84BF8B8F34C95927BC DVMY ...* 217.23.14.190 217.23.14.168
C2C7796F98D22EAB910648FDD54951089E6233DE XSYX ...* 217.23.14.190 217.23.14.168
137AEDE28D9E0BBABE2A5B2F476096740EF1A226 Maxux ...* 217.23.7.99 217.23.7.25
26ABA62FBEE9A751790C31AA9EE9E5014439769C epcsjazz ...* 217.23.7.98 217.23.7.25
382248E9E99857109B14344CF2B88166B41297A3 doyrov ...* 217.23.7.98 217.23.7.25
4AF6CEC4351DE02BB5A7CBBC82607171832C687B chm0 ...* 217.23.7.79 217.23.7.25
69ABCEEE7117BBBBF74BA03C09963D28A4F7376F Bjard ...* 217.23.7.99 217.23.7.25
83C1449F1B6EC0B29C4BEAA8297EE7A31E00529D GhostAV ..** 2.242.225.152 2.242.221.229,2.242.44.20
5D263037FC175596B3A344132B0B755EB8FB1D1C anduinExit01 ...* 31.185.27.203 31.185.27.1
3028C8A2E9767A13CDBAD43EECD07FE99DECEBFE xiaoyu *.** 61.230.143.150 36.230.204.7
52924FD671D033C13415F7FD5346390FF985D6E3 33wessling824 **** 178.208.111.81 37.148.156.44
5CECC5C30ACC4B3DE462792323967087CC53D947 PrivacyRepublic0001 **** 178.32.181.96 37.187.129.166
65F9944338C684109EB975D0EC7489B30E191E87 PrivacyRepublic0002 **** 178.32.181.97 37.187.129.166
66AA1EB64AAFEDC1EA8E49A701F6C472102C5E1A PrivacyRepublic0003 **** 178.32.181.98 37.187.129.166
D86A960F886A64A3C807CE9EC7982A8FC76405B2 PrivacyRepublic0004 **** 178.32.181.99 37.187.129.166
46259C55A8A84F33B90306E9E3582A18E7697E0B torcasa **** 95.211.226.243 37.48.101.193
B00EF0681760D12AE141F06B1B8BD828E6B728FA huncastle **** 95.211.226.242 37.48.101.193
276A7ACA7515E90ABB2AB36D4F3421B1C7FB4501 PurpleNet ...* 37.48.124.117 37.48.124.116
5FEA88EFEDC5897F7094A1759CE25BA0D3DA87E7 YellowNet ...* 37.48.124.117 37.48.124.116
68F70BFCB2A5400ED6F98C8DB30C41A36743962D Hidemyassnetdotnet3 **** 217.37.19.115 37.48.86.160
2F270CA7AC30F4C3F243E785822A519C9793F4AE airport **** 185.61.138.124 46.166.190.216
BAD729D970BB21759E9A8BA655416C23CFF9535C terminal **** 185.61.138.124 46.166.190.216
170EC06D58E9094A027F4169514ADD98D30983A6 molybdenum ...* 46.235.226.27 46.235.226.226
CD406A3CBCF313B0B068690CC706C142484CE29C Somone ..** 46.246.44.214 46.246.61.49
62BEE61EB88D4A81C3BA3931D6FA999D706AC4D5 Radiolama ..** 62.149.13.57 62.149.12.153
06E123865C590189B3181114F23F0F13A7BC0E69 CriticalMass ...* 77.247.181.166 77.247.181.162
10E13E340651D0EF66B4DEBF610B3C0981168107 HaveHeart ...* 77.247.181.164 77.247.181.162
DF0668FD4CBDDF59527827F939EBCEEFC237C5A4 Binna **** 85.238.119.89 79.140.6.182
B51ACBF5B8C0B4AEE0549665A72EA5708C6F6F1D Unnamed ..** 79.211.36.69 79.211.39.184
87489E2799AB2CCA7D8BCAE90E50FE5FBB1E9655 Caro **** 91.51.233.147 79.219.251.204
EFE68EB2D54E657B5BBF4EB18627646F8DCF66C9 Pounet27TorRelay .*** 82.248.6.75 82.250.15.16
050661A87EEB5DE98DFF60C48F946ACEF50C4E9E node49a ..** 84.147.118.182 84.147.116.250
B6D4B2E44405512213FAB0F5CF45E0AD418822C4 rollmops .*** 88.77.200.231 88.76.70.235
410C286061266C562049178C6BF1E04060F51F7C SecretSquirrel ...* 94.103.175.85,[2a02:7a0:910::2329:1] 94.103.175.86
4553C1740A2C05045F9DDB0C9E73D691F4B79D49 wommelator ..** 94.222.255.81 94.222.247.133
BE98E4AB48D06D84C738963BB2A76362F54A8DEE alkazarix ..** 95.73.240.100 95.73.241.140
57/877=6.5% by count, 7.4% by consensus weight
-------------- next part --------------
A non-text attachment was scrubbed...
Name: or_exit_address.py
Type: text/x-python
Size: 2249 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/metrics-team/attachments/20160701/4364652f/attachment.py>
More information about the metrics-team
mailing list