[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: another unusual connection

To: bennett@xxxxxxxxxx
Subject: Re: another unusual connection
From: "Paul Ferguson" <fergdawg@xxxxxxxxxxx>
Date: Sun, 10 Feb 2008 07:54:06 GMT
Cc: or-talk@xxxxxxxxxxxxx
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Sun, 10 Feb 2008 02:55:08 -0500
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Scott Bennett <bennett@xxxxxxxxxx> wrote:
 
>
>  $ telnet 212.112.242.159 80
>  Trying 212.112.242.159...
>  Connected to 212.112.242.159.
>  Escape character is '^]'.
>  GET /tor/ HTTP/1.0
>

For what it's worth, we (Trend Micro) have identified several Tor
nodes which have malicious intent -- this one among them.

Be very careful.

Tor is being actively exploited.

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFHrq2aq1pz9mNUZTMRAg+wAKD2UGj0ERDIXRkErBextOu+1jujmACeIaIc
Nq3OTLTbdWw373H12ds+7dg=
=NnJN
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/

Follow-Ups:
- Re: another unusual connection
  - From: Andrew
- Re: another unusual connection
  - From: Dominik Schaefer
- Re: another unusual connection
  - From: phobos

Prev by Author: Re: The use of malicious botnets to disrupt The Onion Router
Next by Author: Re: another unusual connection
Previous by thread: Re: another unusual connection
Next by thread: Re: another unusual connection
Index(es):
- Author
- Thread