Bad exit node: freeMe69

downie - downgeoff2 at hotmail.com
Fri Aug 21 00:28:09 UTC 2009




 
> On 8/20/09, Tom Hek <tor at tomhek.nl> wrote:
> > On Aug 20, 2009, at 23:02 PM, KT wrote:
> >
> >> Exit node freeMe69 [1] is injecting the following snippet to
> >> response body:
> >>
> >> <script type="text/javascript"
> >> src="http://s.tobban.com/solver/cpt.php"></script>
> >>
> >> [1] http://tinyurl.com/mz9d7e
> >
> > It's actually injected by it's ISP, Comcast.
> 
> Excuse my ignorance...I can imagine it might be injected upstream but
> you know this how?
> 
> > The IP which s.tobban.com
> > resolves to is assigned to Comcast. I don't think the exit node admin
> > can't do anything about it.
> 
> s.tobban.com resolves to the *IP address of the exit node* which is on Comcast.
> 
> regards
> KT
More strangeness: resolver error page.
<h1>Charles Error Report</h1>
<h2>Name lookup failed for remote host</h2>
<p>Charles failed to resolve the name of the remote host into an IP address. Check that the URL is correct.</p>
<p>The actual exception reported was:</p>
<pre>
java.net.UnknownHostException: washingtonpost.com
</pre>

<p>
<i>Charles Proxy, <a href="http://www.xk72.com/charles/">http://www.xk72.com/charles/</a></i>

_________________________________________________________________
With Windows Live, you can organize, edit, and share your photos.
http://www.windowslive.com/Desktop/PhotoGallery
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20090820/8ee515d6/attachment.htm>


More information about the tor-talk mailing list