[tor-relays] relays possible sybil

nusenu nusenu at openmailbox.org
Tue Jan 19 19:28:10 UTC 2016


> just wondering whats the matter with these 66+ relays "cloudvps" ...
> guess they get vote, should we discard some iprages?

I wouldn't worry about these obvious spikes since they are easy to spot [1].

[1] http://article.gmane.org/gmane.network.onion-routing.ornetradar/854

I find less obvious groups more interesting, like in the last few days
at digital ocean [2][3][4], they stay well below DocTor's thresholds.


[2] http://article.gmane.org/gmane.network.onion-routing.ornetradar/865
[3] http://article.gmane.org/gmane.network.onion-routing.ornetradar/868
[4] http://article.gmane.org/gmane.network.onion-routing.ornetradar/898

+---------------------+-----+------+---------+-----------------+
| first_seen          | orp | dirp | ver     | IP              |
+---------------------+-----+------+---------+-----------------+
| 2016-01-08 17:00:00 | 443 |   80 | 0.2.7.6 | 159.203.74.205  |
| 2016-01-10 03:00:00 | 443 |   80 | 0.2.7.6 | 159.203.194.235 |
| 2016-01-10 08:00:00 | 443 |   80 | 0.2.7.6 | 46.101.140.239  |
| 2016-01-10 08:00:00 | 443 |   80 | 0.2.7.6 | 188.166.180.156 |
| 2016-01-10 08:00:00 | 443 |   80 | 0.2.7.6 | 46.101.83.50    |
| 2016-01-10 08:00:00 | 443 |   80 | 0.2.7.6 | 159.203.24.176  |
| 2016-01-10 08:00:00 | 443 |   80 | 0.2.7.6 | 128.199.46.89   |
| 2016-01-11 05:00:00 | 443 |   80 | 0.2.7.6 | 128.199.132.53  |
| 2016-01-11 05:00:00 | 443 |   80 | 0.2.7.6 | 46.101.151.46   |
| 2016-01-11 05:00:00 | 443 |   80 | 0.2.7.6 | 188.166.53.165  |
| 2016-01-11 05:00:00 | 443 |   80 | 0.2.7.6 | 159.203.244.104 |
| 2016-01-11 05:00:00 | 443 |   80 | 0.2.7.6 | 178.62.45.232   |
| 2016-01-11 05:00:00 | 443 |   80 | 0.2.7.6 | 45.55.164.46    |
| 2016-01-11 05:00:00 | 443 |   80 | 0.2.7.6 | 159.203.26.159  |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 107.170.250.249 |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 128.199.209.33  |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 128.199.224.143 |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 178.62.197.118  |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 46.101.245.50   |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 159.203.14.28   |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 104.236.62.134  |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 159.203.5.151   |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 104.236.118.103 |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 46.101.171.126  |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 178.62.231.184  |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 46.101.88.175   |
| 2016-01-18 08:00:00 | 443 |   80 | 0.2.7.6 | 46.101.82.239   |
| 2016-01-18 09:00:00 | 443 |   80 | 0.2.7.6 | 128.199.231.125 |
| 2016-01-18 09:00:00 | 443 |   80 | 0.2.7.6 | 162.243.141.7   |
| 2016-01-18 09:00:00 | 443 |   80 | 0.2.7.6 | 159.203.5.39    |
| 2016-01-18 09:00:00 | 443 |   80 | 0.2.7.6 | 192.241.223.236 |
| 2016-01-18 09:00:00 | 443 |   80 | 0.2.7.6 | 46.101.156.244  |
| 2016-01-18 09:00:00 | 443 |   80 | 0.2.7.6 | 178.62.225.189  |
| 2016-01-18 09:00:00 | 443 |   80 | 0.2.7.6 | 104.236.119.46  |
+---------------------+-----+------+---------+-----------------+

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20160119/1bb53edc/attachment.sig>


More information about the tor-relays mailing list