[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Attacker IP database

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Attacker IP database
From: Tom McLoughlin <tom@xxxxxxxxxxxx>
Date: Fri, 02 Aug 2013 20:31:44 +0100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Fri, 02 Aug 2013 15:38:16 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dropfuse.com; s=mail; t=1375471908; bh=IF+8Zxblj7jjsOhPgmp61bq3kw6zBe5NDfd65NKnCbo=; h=Date:From:To:Subject:References:In-Reply-To; b=DAkyio9sxR9dwVLSKIK3tpbmBGrrZ4vpG6f8nVeDUILDcPng72Bc7DAjSYsKduBDt 5awQ5WqLHr764zszuIKoH9nRqyqZNGgoSXkRsF+pZ1eFEwSZUKxWGgmNMhilpnNHpx eLmPz+aFSaGtSLrYPf8JRtcNd0fYtt+1F4P5QKPo=
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dropfuse.com; s=mail; t=1375471908; bh=IF+8Zxblj7jjsOhPgmp61bq3kw6zBe5NDfd65NKnCbo=; h=Date:From:To:Subject:References:In-Reply-To; b=DAkyio9sxR9dwVLSKIK3tpbmBGrrZ4vpG6f8nVeDUILDcPng72Bc7DAjSYsKduBDt 5awQ5WqLHr764zszuIKoH9nRqyqZNGgoSXkRsF+pZ1eFEwSZUKxWGgmNMhilpnNHpx eLmPz+aFSaGtSLrYPf8JRtcNd0fYtt+1F4P5QKPo=
In-reply-to: <CA+zTX6+2v0GBP6aUcTb8WqJhaDZKhRJEz92WcrBRqL9b4mg4pw@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <CA+zTX6+2v0GBP6aUcTb8WqJhaDZKhRJEz92WcrBRqL9b4mg4pw@xxxxxxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130620 Thunderbird/17.0.7

I wouldn't think such a database would exist because of the way Tor works.

Regards,
Tom McLoughlin

On 02/08/2013 20:18, Bryan Carey wrote:
> Is there any kind of compiled list of IPs that relay operators can
> refer to that are known bad IPs (sources of brute force SSH
> attempts, etc.)? Is there a reason to NOT block (drop) traffic from
> these IPs?
> 
> Here are some that I have seen recently trying to brute force
> common user accounts and root password attempts: 198.50.197.98 
> 220.161.148.178 223.4.217.47 199.187.125.250 175.99.95.252 
> 62.64.83.38 125.209.110.234 37.235.53.172
> 
> Also, in general what are some good security practices to keep in
> mind while running a Tor relay?
> 
> Thanks, Bryan
> 
> 
> _______________________________________________ tor-relays mailing
> list tor-relays@xxxxxxxxxxxxxxxxxxxx 
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

References:
- [tor-relays] Attacker IP database
  - From: Bryan Carey

Prev by Author: Re: [tor-relays] Raspberry Pi Relay Node Performance and future Plans on Documentation and more
Next by Author: [tor-relays] VPS
Previous by thread: [tor-relays] Attacker IP database
Next by thread: Re: [tor-relays] Attacker IP database
Index(es):
- Author
- Thread