[tor-relays] botnet? abusing/attacking guard nodes

Wed Dec 20 16:18:37 UTC 2017

On 12/20/2017 04:39 PM, x9p wrote:
>> My relay B33BFA9AA0005730C1C0E8F7E6F53CF3C5716BD6 is not currently
>> tagged as Guard, and I am seeing more than twenty IPv4s with more than
>> 10 connections, and one with 147. Should that be considered normal for a
>> non-guard relay?
>>
>> Cheers,
>>
>>  -- Santiago
> 147 is a bit high for a non-exit, non-guard, for a single IP. check
> https://atlas.torproject.org/ and see if this IP is part of Tor network.
> 

? IMO relays don't open more than 1 connection to another relay.

-- 
Toralf
PGP C4EACDDE 0076E94E

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20171220/5084bc43/attachment.sig>