[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Tor exit nodes attacking SSH?

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Tor exit nodes attacking SSH?
From: me@xxxxxxxxxxxxxxxx
Date: Wed, 09 Aug 2017 11:38:54 +0500
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 09 Aug 2017 02:47:30 -0400
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On 08/08/2017 01:48 PM, Steven Chamberlain wrote:
> Further investigation shows that this happens for any destination IP
> address, even where there's no SSH service running:

Make a "trap" ssh server (for example on virtualbox machine without any sensitive data) and log in into it through tsocks. After that check from which ip it was logged in. This probably would be ip of the exit node.
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] Tor exit nodes attacking SSH?
  - From: Alexander Nasonov

Prev by Author: Re: [tor-relays] ORSN DNS servers vs OpenNic
Next by Author: Re: [tor-relays] Tor exit nodes attacking SSH?
Previous by thread: Re: [tor-relays] Tor exit nodes attacking SSH?
Next by thread: Re: [tor-relays] Tor exit nodes attacking SSH?
Index(es):
- Author
- Thread