[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] attack on my Finland exit/backup directory [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]

To: "tor-relays@xxxxxxxxxxxxxxxxxxxx" <tor-relays@xxxxxxxxxxxxxxxxxxxx>
Subject: [tor-relays] attack on my Finland exit/backup directory [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]
From: potlatch <potlatch@xxxxxxxxxxxxxx>
Date: Wed, 28 Aug 2019 04:34:40 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 28 Aug 2019 00:35:00 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=default; t=1566966885; bh=F8oryvJzZL/BKYfLVAaCPsNCOIvN/ObT2H7y1l5qZvI=; h=Date:To:From:Reply-To:Subject:Feedback-ID:From; b=vlPv1aXviT1gpdCla7dXTnmzRfh3guenvjaQI8jEDAQc0s311VXaNQglQsfP5Ym09 CwVd/SCJrEdMtxgihhlaoVETNn4N63wwva7GyQ616Aa8LEFsGbYCGCtj/IaCezg6JI G40xFUIsU2VMMp+iKZ8khVly2Eh7gVKK16YsBQmA=
Feedback-id: JCf3d0soAttaB_OpNPJ20ohR2llANMLwzqA_A6HtVytqRrobPzyTJ7oqmKBf_nxRTtXIC9lwlIwkWthaPBUkDQ==:Ext:ProtonMail
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

I still haven't been able to rid myself of the Iranian servers revealed on the NYX connections page. I don't know their purpose but they slow the relay by about 85%. I have dropped them in the iptable input chain, restarted the VPS, but they show up after a day or two in spite. Today there were 121 of them with a large range of IPs. There have been as many as 1400 in a single day. None have identifiable hashed fingerprints.

I've enclosed a couple attachments of my input table (partial) and the NYX connection page (also partial).

Can anyone enlighten me regarding this situation? I will probably dump the exit relay if I can't fix this intrusion. Thanks people!!

-potlatch

Sent with ProtonMail Secure Email.

ï»¿ Copy/paste from NYX connection page:


  5.58.172.86:36094 (ua)      -->  185.100.86.128:9001    F99AC266F27B4DE798AD35E0507E92CC2B2D37CC  snap269                                                                 
 â?? 5.62.197.249:30167 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.74.53.239:53198 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.74.134.131:35586 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.74.201.30:49994 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.78.85.136:16886 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.79.68.161:42070 (nl)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.79.68.161:42249 (nl)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.79.79.133:58878 (nl)      -->  185.100.86.128:9001    D079D6818926684C5979C18171FB18862A4A5792  beerbox                                                                 
 â?? 5.106.15.187:34071 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.106.19.20:59146 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.106.42.80:35670 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.106.60.101:44159 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.106.102.99:41222 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.106.104.39:51174 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.106.121.163:50244 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.106.137.101:48599 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.106.223.36:33400 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.115.47.135:42094 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.115.58.244:25599 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.115.60.187:38099 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.115.70.18:44016 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.115.133.149:30367 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.115.151.171:3110 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.115.205.178:33559 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.116.28.216:15491 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.116.81.38:28165 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.116.92.46:43411 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.116.112.97:64909 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.116.123.252:5376 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.116.136.78:13462 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.116.193.108:65080 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.116.193.108:65080 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.116.202.164:20701 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.117.2.83:17665 (ir)       -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN         
   5.117.25.207:37088 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.117.30.228:36524 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.117.38.178:58650 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.117.126.171:13659 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.117.200.16:19100 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.117.221.63:58761 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.119.73.26:39732 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.119.135.22:44430 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.119.171.41:6465 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.119.241.85:24096 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.119.248.54:34956 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.120.65.237:7748 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.120.244.233:48305 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.2.100:46109 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.16.205:58936 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.42.211:21244 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.56.238:39780 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.74.84:49375 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.74.84:49376 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.88.110:30637 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.93.101:32092 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.111.125:22774 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.115.210:53991 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.147.198:38561 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.161.55:9026 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.169.202:54918 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.202.234:46493 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.211.85:16703 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.211.85:16704 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.214.130:10835 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.121.236.249:63555 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.122.46.96:20817 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.122.150.117:16554 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.122.155.244:14928 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.122.175.35:28519 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.60.83:25328 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.72.176:3256 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.155.5:28214 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.175.74:57955 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.193.251:6150 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.219.203:35103 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.227.139:24290 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.244.144:49535 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.253.252:35171 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN      
   5.123.156.28:52866 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.161.6:18551 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.219.203:35103 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.227.139:24290 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.244.144:49535 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.123.253.252:35171 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.11.146:27662 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.87.25:23610 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.106.170:56785 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.135.198:30300 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.137.234:64151 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.150.228:41262 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.154.153:42248 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.166.91:46185 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.124.169.249:62505 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.12.46:58438 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.19.208:19578 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.41.111:51844 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.65.245:44590 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.68.33:61640 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.68.236:34840 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.87.9:59493 (ir)       -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.90.153:55373 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.95.235:22756 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.105.12:4378 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.114.7:61188 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 | 5.125.145.0:13770 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
   5.125.149.99:46172 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.151.134:60252 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.158.4:37097 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.158.167:54159 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.125.172.207:42706 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.125.177.65:5500 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.125.189.53:42851 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.125.194.71:33788 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.17.48:46326 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.29.85:4207 (ir)       -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.73.238:58895 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.78.133:9649 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.91.122:13545 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.91.122:13545 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.92.162:56350 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.122.123:30532 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.133.103:22467 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.144.108:12430 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.153.235:32551 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.166.6:8449 (ir)       -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.166.15:14050 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.167.88:37244 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.183.160:17248 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.185.176:25244 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.189.44:19937 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.203.61:25516 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.210.133:55302 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.211.222:16774 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.214.89:12152 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.221.250:24180 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.225.161:54025 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.227.145:18072 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.241.157:57720 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.242.208:19938 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.243.76:37478 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.126.246.126:15799 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.126.248.169:52590 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.127.82.69:8862 (ir)       -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.127.119.20:34028 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 5.127.146.1:11939 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 5.135.0.26:58970 (cz)       -->  185.100.86.128:9001    32E6CC6C6B428B2043F0B3E78F7332F1016D73E1  loiu92  


   1.42.255.148:36984 (au)     -->  185.100.86.128:9001    0D8877392F2FF5AD8D8E5BC438087F02EF97B904  Starlight                                                               
 â?? 2.7.112.45:41650 (fr)       -->  185.100.86.128:9001    B1C4A49AC0E2FDF2F2B8343B25257FCA55715926          CodingUnicornRelay                                                       
 â?? 2.176.163.0:27932 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 2.177.51.33:60524 (ir)      -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 2.179.118.211:35545 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 2.179.118.211:35545 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 2.185.141.202:10075 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 2.186.99.169:11792 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 2.186.198.198:46677 (ir)    -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                 
 â?? 2.191.188.21:53486 (ir)     -->  185.100.86.128:9001    UNKNOWN                                   UNKNOWN                                                                  
 â?? 2.205.64.19:37834 (de)      -->  185.100.86.128:9001    E624C66EA3C8CB103D42F9AB0CDD2BEEDA3D7EA2  morgrelay                










iptable showing dropped Iranian IP addresses:

         
Chain ufw-user-input (1 references)
target     prot opt source               destination         
DROP       all  --  5.112.0.0/16         anywhere            
DROP       all  --  5.113.0.0/16         anywhere            
DROP       all  --  5.114.0.0/16         anywhere            
DROP       all  --  5.115.0.0/16         anywhere            
DROP       all  --  5.116.0.0/16         anywhere            
DROP       all  --  5.117.0.0/16         anywhere            
DROP       all  --  5.118.0.0/16         anywhere            
DROP       all  --  5.119.0.0/16         anywhere            
DROP       all  --  5.120.0.0/16         anywhere            
DROP       all  --  5.121.0.0/16         anywhere            
DROP       all  --  5.122.0.0/16         anywhere            
DROP       all  --  5.123.0.0/16         anywhere            
DROP       all  --  5.124.0.0/16         anywhere            
DROP       all  --  5.125.0.0/16         anywhere            
DROP       all  --  5.126.0.0/16         anywhere            
DROP       all  --  5.127.0.0/16         anywhere            
DROP       all  --  5.62.0.0/16          anywhere            
DROP       all  --  5.74.0.0/16          anywhere            
DROP       all  --  5.78.0.0/16          anywhere            
DROP       all  --  5.79.0.0/16          anywhere            
DROP       all  --  5.106.0.0/16         anywhere            
DROP       all  --  2.176.0.0/16         anywhere            
DROP       all  --  2.177.0.0/16         anywhere            
DROP       all  --  2.179.0.0/16         anywhere            
DROP       all  --  2.185.0.0/16         anywhere

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] attack on my Finland exit/backup directory [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]
  - From: teor

Prev by Author: [tor-relays] Attack on Tor exit and back-up directory server
Next by Author: Re: [tor-relays] DoS attack on Tor exit relay
Previous by thread: Re: [tor-relays] Why is my Tor bridge relay not getting any traffic?
Next by thread: Re: [tor-relays] attack on my Finland exit/backup directory [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]
Index(es):
- Author
- Thread