[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?

To: <tor-relays@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
From: mick <mbm@xxxxxxxxxx>
Date: Thu, 31 Oct 2024 15:58:07 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Thu, 31 Oct 2024 13:04:18 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=rlogin.net; s=mail; t=1730390289; bh=exj3sw224/HSG+xN/iw5Ld64KzcvLFrDK8AZY0WZx1g=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=WKVl7InY/18zBvFpQss3cSiAQejsXzOuLHntMcUeOb1Myq4rlMQ7m2nFMfJiBzp9I msmJIKqDrgx1pMSiZbxXTCXwGhLqe2Mjaia4w5Xp/xA6yfkjd1Yju79WWFDpgVCELf zPDIfgblAJ48pYKAUId/REOsditgyHo9h3K3K1jdQYxjaWHH6cnr3imC3vGlNr8f+c EUbTV73xlGYImOv2M8NEioQe11YWVBBMK5/AaBgySgO9qvDj/dwge/aAoz/El/Pb7N LWQT1fsb3PMYXuLo+aFCTV4rX2738juOpLHXXVz4922jHZc42rqzS2q/KokjJJURzQ giBIbWlPVfX4w==
In-reply-to: <5270fe4b-d22e-4e90-9587-60fadc0557ee@stinpriza.org>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <CA+V6dmizGEo4Y=3tCFmK_xNm7W=d7zh4W=0aypyyzVR+Hn4uoA@mail.gmail.com> <D5820VWCTMJZ.3DZ0C1VS96GKW@ml.seichter.de> <20241029074753.7d783593.mbm@rlogin.net> <20241029132317.1b8d4c28.mbm@rlogin.net> <5270fe4b-d22e-4e90-9587-60fadc0557ee@stinpriza.org>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On Thu, 31 Oct 2024 11:25:30 +0200
"Dimitris T. via tor-relays" <tor-relays@xxxxxxxxxxxxxxxxxxxx>
allegedly wrote:

> similar situation here with hetzner.. got a first report 2 days ago,
> and just a while ago got another abuse report, by the same 
> watchdogcyberdefence.... with more alleged activity from our ip...
> 
> like everybody else, there's nothing coming out from our relay ip, so
> we strongly believe "Theory three"[1] .
> 
Agree.

I have just received another "abuse" report. Hetzner have yet to
respond to my last reply to them.

Mick

---------------------------------------------------------------------
Mick Morgan 
gpg fingerprint: FC23 3338 F664 5E66 876B  72C0 0A1F E60B 5BAD D312
blog: baldric.net
---------------------------------------------------------------------

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
  - From: tor

References:
- [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
  - From: Pierre Bourdon
- Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
  - From: Ralph Seichter via tor-relays
- Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
  - From: mick
- Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
  - From: mick
- Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
  - From: Dimitris T. via tor-relays

Prev by Author: Re: [tor-relays] Docker Snowflake Proxy Multiple IPs
Next by Author: Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
Previous by thread: Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
Next by thread: Re: [tor-relays] Tor relays source IPs spoofed to mass-scan port 22?
Index(es):
- Author
- Thread