Re: [tor-bugs] #13287 [Tor]: Investigate mysterious 24-hour lump in hsdir desc fetches

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#13287: Investigate mysterious 24-hour lump in hsdir desc fetches
------------------------+------------------------------
     Reporter:  arma    |      Owner:
         Type:  task    |     Status:  new
     Priority:  normal  |  Milestone:  Tor: 0.2.???
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  SponsorR, tor-hs
Actual Points:          |  Parent ID:
       Points:          |
------------------------+------------------------------

Comment (by dgoulet):

 Ok so I added a quick patch to log the desc_id that are being fetched
 (obfuscated using siphash24g()) and it appears that it is the same desc_id
 that is being fetched again and again.

 {{{
  10:45:48 [NOTICE] Attempt on 17195692294194523357 [16117 duplicates
 hidden]
 }}}

 And each period gets a huge number for the same desc_id. We'll see if in
 like 24 hours, this address will change. Sounds more and more like a dead
 C&C a botnet is trying to reach....

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13287#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs