[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] OrNetRadar spots botnet joining the tor network? (79 relays, 38 countries, 67 ASes)

To: tor-relays@xxxxxxxxxxxxxxxxxxxx, xtorshit@xxxxxxxxxx
Subject: [tor-relays] OrNetRadar spots botnet joining the tor network? (79 relays, 38 countries, 67 ASes)
From: nusenu <nusenu@xxxxxxxxxxxxxxx>
Date: Tue, 8 Mar 2016 00:56:06 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Mon, 07 Mar 2016 19:56:38 -0500
Dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org; s=openmailbox; t=1457398587; bh=7arnZn3o6G5FwE/pkYxBh00zaFSzUF93JVkKRfEZH6s=; h=To:From:Subject:Date:From; b=NEGz8T9ixUIVnk0xWlU5l7js6/0hLlpoJQgPLcKqbVkXTX59yMwg8oOId0ECuIR/Y qblxX5cU68AtuyO2A73oN3TnbKhZRa+w/RRvjs2na6CXj3Ub+cfzQ/eRr9LN6/SiKO dx2pN4YwBBDG9NrlksUA1cTqkCabcB6nZxA/swcc=
Dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org; s=openmailbox; t=1457398577; bh=7arnZn3o6G5FwE/pkYxBh00zaFSzUF93JVkKRfEZH6s=; h=To:From:Subject:Date:From; b=FLXC/VnrXhaqyqNhJU2YhJIgq3+meu3LTCwld4rdtLB4fQojhRysfurtDrR1itVWt /2SuYS8qF4CD7PkSDnzTxZsh0C/UfqY3IMmQAL1bqmcNTO20+n3AcJeJK9vnG/Tgzv TzL3lIh/EvSA/Krxwsw/tJx8MaDpbX7UA3CLPX4I=
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

Hi,

this smells like a botnet to me:

http://article.gmane.org/gmane.network.onion-routing.ornetradar/1073
http://article.gmane.org/gmane.network.onion-routing.ornetradar/1074

all relays with that bitcoin adress:

https://gist.githubusercontent.com/nusenu/fb19034a7860dba6c203/raw/5531768e75928970ad37517dfd3bbfed4698eaca/2016-03-07_79relays.txt

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- [tor-relays] potentially compromised Linux servers running a tor exit relay without consent of the owner?
  - From: nusenu
- Re: [tor-relays] OrNetRadar spots botnet joining the tor network? (79 relays, 38 countries, 67 ASes)
  - From: nusenu
- Re: [tor-relays] OrNetRadar spots botnet joining the tor network? (79 relays, 38 countries, 67 ASes)
  - From: nusenu
- Re: [tor-relays] OrNetRadar spots botnet joining the tor network? (79 relays, 38 countries, 67 ASes)
  - From: Roger Dingledine

Prev by Author: [tor-relays] Running 5000 relays...
Next by Author: Re: [tor-relays] Northeastern University Relays
Previous by thread: Re: [tor-relays] Exit relay funding
Next by thread: Re: [tor-relays] OrNetRadar spots botnet joining the tor network? (79 relays, 38 countries, 67 ASes)
Index(es):
- Author
- Thread