netscan from exit-node
Niels Laakmann
propell at gmx.de
Mon Oct 1 14:15:29 UTC 2007
Hey folks!
I set up a tor-server with an Exit-Policy. A few weeks ago, my
Server-Hoster shut down, my IP-Subnet because the Tor-Server
has done some IP-scans. These scans are sequentiell followed to not
existing hosts.
For me, these scans aren't very evil. But, if I want to enable the
Exit-Node again, I ought to stop these scans.
This was now the third time, they deactivate my Subnet and I don't want
a fourth. After the second time, I updated the Tor-Version to
v0.1.2.17, but the problem wasn't resolved.
I googled for that problem, but didn't find anything.
Can anyone help?
Thanks.
Niels.
Here is the Log from my hoster:
###################################################################
# Netscan detected from host xx.xxx.180.61 #
###################################################################
time src_ip dest_ip dest_port
-------------------------------------------------------------------
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.162: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.163: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.175: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.176: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.176: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.177: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.178: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.179: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.180: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.181: 80
17:27:47 2007: xx.xxx.180.61 => xx.xxx.166.182: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.43: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.44: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.45: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.47: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.48: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.49: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.49: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.50: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.51: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.52: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.54: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.55: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.58: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.59: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.60: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.61: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.62: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.63: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.64: 80
17:27:47 2007: xx.xxx.180.61 => xx.xx.22.65: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.100: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.100: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.101: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.102: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.103: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.104: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.105: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.106: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.107: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.108: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.109: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.110: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.112: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.113: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.114: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.115: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.116: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.60: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.61: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.66: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.67: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.68: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.69: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.70: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.71: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.71: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.72: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.72: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.73: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.73: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.73: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.74: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.75: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.76: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.77: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.78: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.78: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.78: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.79: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.80: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.81: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.82: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.83: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.84: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.85: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.86: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.86: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.87: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.88: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.89: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.90: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.91: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.92: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.93: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.93: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.93: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.93: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.94: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.95: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.96: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.97: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.98: 80
17:27:48 2007: xx.xxx.180.61 => xx.xx.22.99: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.132: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.132: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.133: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.133: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.134: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.135: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.136: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.137: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.138: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.139: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.139: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.140: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.141: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.142: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.143: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.144: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.145: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.146: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.162: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.162: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.163: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.163: 80
17:27:49 2007: xx.xxx.180.61 => xx.xxx.166.175: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.115: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.116: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.117: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.118: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.119: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.120: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.121: 80
17:27:49 2007: xx.xxx.180.61 => xx.xx.22.122: 80
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20071001/20406eb8/attachment.pgp>
More information about the tor-talk
mailing list