[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] Hits against GFC hex-string fingerprint in IPTables yesterday



Wanted to point out to the list that we got 3 hits to our "Libero2" relay on port 9001 from chinese IP address 210.72.9.44 to a "GFC" reject line in the relay's iptables. I think this is the first time we've seen hits to this type of rule.

The packets were dropped via this iptables detection:

-A INPUT -p tcp -m string --hex-string
"|00002800390038008800870035008400160013000a00330032009a009900450044002f00960041000500ff020100000400230000|"
--algo kmp

The packets came through at approximately these times EST:

Jun 29 15:36:10
Jun 29 15:36:38
Jun 29 15:37:15




_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays