[tor-relays] Relays spamming my OR port
Toralf Förster
toralf.foerster at gmx.de
Thu Aug 18 17:22:44 UTC 2022
On 8/18/22 18:19, lists at for-privacy.net wrote:
>> D767979FE4C99D310A46EC49037E9FE7E3F64E9D is a particularly frequent
>> naughty boy.
> ;-) It is very, very unlikely that there is a naughty relay in AS680.
> That relay most likely does DNS-, BW- or network healing test in the Tor network.
> https://metrics.torproject.org/rs.html#search/as:AS680
> (German university or research institutes)
>
Do you know more about those tests ? That relay produces many wrong
ORStatus.CLOSED events:
$> grep D767979FE4C99 /tmp/orstatus.9051 | uniq -c
896 TLS_ERROR D767979FE4C99D310A46EC49037E9FE7E3F64E9D
141.20.103.33 443 v4 0.4.5.10
$> grep D767979FE4C99 /tmp/orstatus.29051 | uniq -c
965 TLS_ERROR D767979FE4C99D310A46EC49037E9FE7E3F64E9D
141.20.103.33 443 v4 0.4.5.10
The data were collected using [1] over the past 20 hours at [2].
[1] D767979FE4C99D310A46EC49037E9FE7E3F64E9D
[2] 65.21.94.13
--
Toralf
More information about the tor-relays
mailing list