[tor-talk] Who is 18.104.22.168? Tor check page lists it and says I'm not using Tor. Another user reported this, too.
torboxdev at yahoo.com
Thu Mar 8 14:29:19 UTC 2012
>Roger Dingledine wrote:
>>On Sun, Mar 04, 2012 at 02:22:22AM -0000, ming at tormail.net wrote:
>> Who is 22.214.171.124?
>> The Tor check page lists it and says I'm not using Tor. Another user
>> reported this, too.
>That's a false negative. In this case it happens because the Tor relay
>exits from a different IP address than it advertises in its descriptor.
>The relay in this case is "proxyleaks", and its descriptor says it's
>reachable at 126.96.36.199.
> "I got repeatedly displayed 188.8.131.52 which is not the exit nodes IP
>The relay is multi-homed in this case: it has multiple IP addresses.
>That's perfectly normal, especially for fast relays.
There needs to be some solution to this problem other than just telling
people about it. This exit node is pretty fast and gets chosen by my
Tor clients about once every 10 times as the initial exit node. I get
to see that scary warning pretty regularly. (It also makes me wonder
how random circuit selection is, but maybe that's just my bias because
it stands out).
One solution would be to patch Tor so exit nodes can declare if they
use mult-homing. The other would be to just patch Check.TPO and add
that information there.
More information about the tor-talk