[tor-relays] botnet? abusing/attacking guard nodes

[niftybunny]

Same shit here. It looks like this:

https://i.imgur.com/rokqahz.png <https://i.imgur.com/rokqahz.png>

Markus


“Cheery was aware that Commander Vimes didn't like the phrase 'The innocent have nothing to fear', believing the innocent had everything to fear, mostly from the guilty but in the longer term even more from those who say things like 'The innocent have nothing to fear'.”

― Terry Pratchett, Snuff

> On 20. Dec 2017, at 17:18, Toralf Förster <toralf.foerster at gmx.de> wrote:
> 
> On 12/20/2017 04:39 PM, x9p wrote:
>>> My relay B33BFA9AA0005730C1C0E8F7E6F53CF3C5716BD6 is not currently
>>> tagged as Guard, and I am seeing more than twenty IPv4s with more than
>>> 10 connections, and one with 147. Should that be considered normal for a
>>> non-guard relay?
>>> 
>>> Cheers,
>>> 
>>> -- Santiago
>> 147 is a bit high for a non-exit, non-guard, for a single IP. check
>> https://atlas.torproject.org/ and see if this IP is part of Tor network.
>> 
> 
> ? IMO relays don't open more than 1 connection to another relay.
> 
> -- 
> Toralf
> PGP C4EACDDE 0076E94E
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20171220/88f283b4/attachment-0001.html>