[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Dos attack against my tor node?

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Dos attack against my tor node?
From: Shawn Chisholm <shawnch@xxxxxxxx>
Date: Fri, 25 Aug 2006 19:09:32 -0400
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Fri, 25 Aug 2006 19:09:45 -0400
In-reply-to: <1156488278.23964.18.camel@localhost.localdomain>
References: <1156488278.23964.18.camel@localhost.localdomain>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

Another data point: according to my mrtg graphs (ie. traffic rates) a similar thing may have happened to me yesterday between 12:30 and 12:45 pm EST. Downstream suddenly saturated for what looks like 10-15 minutes when there was nobody using the network.

Unfortunately I don't have logging turned on at my firewall so I can't be sure it was a dos; I have only been running tor for a few months but that hasn't happened before.

On 25-Aug-06, at 2:44 AM, Freemor wrote:

Hi All

   I  was examining my system logs tonight and noticed something
interesting.. What appears to be an attempt to DoS my tor node. 3
separate attempts spaced about 2 hours apart all from IP's in the same
ISP (From "Pacific Internet Thailand"). I've been running the Tor node
(middleman node) for a while now and this is the first time I've seen
this.

So my questions is:

  is this common have others seen this type of behaviour?


Thanks in advance
Freemor


------

Freemor <freemor@xxxxxxxx>
Freemor <freemor@xxxxxxxxxx>

This e-mail has been digitally signed with GnuPG

References:
- Dos attack against my tor node?
  - From: Freemor

Prev by Author: Re: Could i use tor to login Paypal?
Next by Author: dns-proxy-tor / freecap
Previous by thread: Dos attack against my tor node?
Next by thread: Re: Dos attack against my tor node?
Index(es):
- Author
- Thread