[tor-relays] Strange BGP activity with my node

Subject: [tor-relays] Strange BGP activity with my node

From: Trevor Ellermann <trevor@xxxxxxxxxxxxx>

Date: Wed, 9 May 2018 12:06:12 -0600

Delivery-date: Wed, 09 May 2018 14:06:43 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:from:date:message-id:subject:to; bh=5p9176SSdLp1/cOUGbvg/fhxv8K/07Qxtbxmns4zYig=; b=iCdj1PgKA+KIXGI5yRhHbhHSactKPO6dXbKFPePFCYXKBriUqB85NvDqTUqCj/B1L8 CF2mJDyRtplKOOvcA4Bp5TPjmD3HqA/7OZeNakwAsRtN0JIPAAlsDipi3ODxLJRl/7ge qtwIVJeKjd40Jb+RaatjkSym6qwX2k9VLYiqfSpnkm5wF2XUB+viuyNsCb56aCM8QOHr OiLKc3SoYpIno/O6ko5DEofeZtvgYtRtzLIc4dwKYrlu9AdN8Qny8pQZ4J0FUNFU0uBJ T40Dk6/Wydynm1W5pqCN62TzVew0xXEQPj5WC2gCXk44+X3R8LvB58T1YcKdnIA6V8c8 h7gg==

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

Hi,

I just a notification from my data center that someone is trying to hijack the IP of my exit node. Seems like the sort of thing someone might do when trying to attack Tor. I'm in a very remote area with limited access but any suggestions on actions I should take?

====================================================================

Possible Prefix Hijack (Code: 10)

====================================================================

Your prefix: 204.17.32.0/19:

Prefix Description: GBLX-US-BGP

Update time: 2018-05-09 12:11 (UTC)

Detected by #peers: 1

Detected prefix: 204.17.56.42/32

Announced by: AS200005 (Asavie Technologies Limited)

Upstream AS: AS200005 (Asavie Technologies Limited)

ASpath: 200005

https://torstatus.blutmagie.de/router_detail.php?FP=383d6e34d9bea92e97092b134a708eef476df2e4

Thanks,

--Trevor

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays