[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] Warning: ISP resurrected old tor node



Hey guys,

Just a heads-up on a weird issue:

I notice some of the tor directories are showing my old server as being online and routing traffic. That server:

*Router Name:* 	00routin0packets
*Fingerprint:* 	DD03 46F6 56DA 5F0E C9F6 5D7B FE56 38DA F3FB 2F6B


IP: 95.211.153.115

I lost control of that server over a month ago when the ISP (Seedmonster) forced me offline for forum spam abuse complaints from the tor traffic. I initially thought this was just some kind of weird statistics-ghost, but it looks like it really is still routing traffic. The tor config the server is using still has me listed as the administrative contact (even though I can't log in and it was previously offline), so it's clear that it's my old VPS at that ISP.

You can see it's been offline (from when it got shutdown), but tor users mysteriously started spamming away from it again a few days ago:

http://www.stopforumspam.com/ipcheck/95.211.153.115

Now, I don't know for certain that this is in any way nefarious -- maybe the host accidentally reactivated the VM it was running on or something (I had everything configured to autostart on boot). However, I've never heard of an ISP giving out "free" service like this, so I wanted to put out a notice that this server isn't being controlled by a tor operator, so it could plausibly be up to no good.

It just seems a little weird that they would restart the server of a customer they kicked out and let it keep running for over a week without noticing.

On the up side, hey, free bandwidth for the swarm.


(P.S. If anyone ever has problems with stopforumspam.com, the admin is VERY pro-tor and will try to help you out. He even wrote special extensions for people to exclude published tor exits from the spam reporting after I told him about the ISP problems.)


_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk