Re: [tor-relays] DoS attacks on multiple relays

Subject: Re: [tor-relays] DoS attacks on multiple relays

From: Aneesh Dogra <lionaneesh@xxxxxxxxx>

Date: Tue, 5 Dec 2017 17:07:47 +0530

Delivery-date: Tue, 05 Dec 2017 06:38:03 -0500

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=egfRkcTeu4Phv4KXg8jDSf5ly8qUh5mQ1B503eX8WKw=; b=BDrVoH785J6v/fzy30/yMl8r/AFBM2iE2lB0kArMSxz96AMjerwoHq3OBfjvmiRwjx MHi0JCjx3Of7VsduabtpIOe8ggztI/V3WNfVvXG//MdmOC1KDDowtGRN2FFZVsioFbm4 ReaWtVZ4xJdAt8jyVQnpRF5O9pt8KzKndmME3QmqYMsSHbgv9EEustnWqiMY0mpStHk4 6mZf5aY95B2U7KRLbmBJuIvmf5Gi+DeUlyy8qMe3b40p8BKRuXTcm64bziSNdignydt+ KwxhDxcW0GzEYbs//Vh8CsxHkl5GA9IeYNEXYry0nSfuJY6WCuNhkRodOY/PIn6mXWWf qn8g==

In-reply-to: <5a26845a.44acdf0a.4fba3.5a4aSMTPIN_ADDED_BROKEN@mx.google.com>

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

References: <CAMsVPocKpkmsoF2ys400GKrh93qxg1Cfka68YCEKS+rGm9TY9Q@mail.gmail.com> <5A25ADB5.20501@quantentunnel.de> <5a25cf0d.ca6f1c0a.a51df.eb81SMTPIN_ADDED_BROKEN@mx.google.com> <CAMsVPodOKdDDDSAV11S=MSAsPcCQXFv=VPVEFzjL+nzZs=bNPA@mail.gmail.com> <5a267bc1.84991c0a.51c5.1cf0SMTPIN_ADDED_BROKEN@mx.google.com> <CAALzzuLf9mUrFkv21Uem20Jok0bD+sc_23ECDj7FDj6mS3fJVA@mail.gmail.com> <5a26845a.44acdf0a.4fba3.5a4aSMTPIN_ADDED_BROKEN@mx.google.com>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On Tue, Dec 5, 2017 at 5:04 PM, x9p <tor@xxxxxxx> wrote:

Actually this also caught my attention on this 10 nodes from 188.214.30/24:

https://atlas.torproject.org/#search/188.214.30

All from Romania, relays, ports 443/9030, good bandwidth 17-26MiB, uptime
almost identical, and no family member set. One is even named CIA :)

Contact is set to none also.

welcome!

Looks scary. Interesting to see they all have high guard probabilities. :-?

Regardless, I hope you're well and happy -
Aneesh

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays