Re: [tor] Re: Hidden Services Hosting and DMCA

2010-06-14 Thread Moritz Bartl
Hi, On 13.06.2010 23:43, andrew wrote: Then of course he already mentioned a couple of times that he's not in the USA, so even if you were a lawyer he shouldn't take your advice ;) Right. I read the thread too. He is not, but his service and the underlying provider are in the USA. Thank

shadowserver.org

2010-06-14 Thread alex-tor
Hi I am running the exit-node tor-readme.spamt.net. My provider, server4you, keeps getting abuse reports from shadowserver.org. According to the abuse service they are running honeynets which record activity comming from my exit-node's IP. I have tried to communicate directly with

Re: shadowserver.org

2010-06-14 Thread Al MailingList
I am running the exit-node tor-readme.spamt.net. My provider, server4you, keeps getting abuse reports from shadowserver.org. According to the abuse service they are running honeynets which record activity comming from my exit-node's IP. I have tried to communicate directly with

Re: shadowserver.org

2010-06-14 Thread Damian Johnson
Probably because your exit node is being used to do something that warrants an abuse report. Maybe, but if this shadowserver site is being incommunicado then I wouldn't put much confidence in their findings. Stop the activity on your exit node that is causing them to lodge reports? Very

Re: shadowserver.org

2010-06-14 Thread kuhkatz
Am 14.06.2010 16:02, schrieb alex-...@copton.net: Hi I am running the exit-node tor-readme.spamt.net. My provider, server4you, keeps getting abuse reports from shadowserver.org. According to the abuse service they are running honeynets which record activity comming from my exit-node's IP. I

Re: shadowserver.org

2010-06-14 Thread Al MailingList
On Mon, Jun 14, 2010 at 7:03 PM, Damian Johnson atag...@gmail.com wrote: Probably because your exit node is being used to do something that warrants an abuse report. Maybe, but if this shadowserver site is being incommunicado then I wouldn't put much confidence in their findings. FWIW,

Re: shadowserver.org

2010-06-14 Thread Al MailingList
On Mon, Jun 14, 2010 at 10:03 PM, alex-...@copton.net wrote: On Mon, Jun 14, 2010 at 09:01:53PM +0200, kuhkatz wrote: i assume you might block these server via the exit-rules of your server. Maybe I am wrong, but if the servers' IP addresses where publicly known, they would not be honeypots,

Re: shadowserver.org

2010-06-14 Thread 7v5w7go9ub0o
On 06/14/10 10:02, alex-...@copton.net wrote: I am running the exit-node tor-readme.spamt.net. Thank You tor-readme.spamt.net, for your generous contribution to tor!!! My provider, server4you, keeps getting abuse reports from shadowserver.org. According to the abuse service they are running

Re: shadowserver.org

2010-06-14 Thread Roger Dingledine
On Mon, Jun 14, 2010 at 10:26:59PM +0100, Al MailingList wrote: How would you block connections to Shadowserver's honeypots? Why would you want to do that? The point is someone is using an exit node for abuse. If you just prevent abuse to a honey pot, you are just covering up the problem -

Re: shadowserver.org

2010-06-14 Thread alex-tor
On Mon, Jun 14, 2010 at 05:36:02PM -0400, 7v5w7go9ub0o wrote: What, specifically, are they tracking to your IP? This unspecific complaint could be anything from an innocent series of pings, to an out and out stream from metasploit!? I don't really know. I have no direct communication, only my

Re: shadowserver.org

2010-06-14 Thread John Brooks
On Mon, Jun 14, 2010 at 4:27 PM, alex-...@copton.net wrote: Last thing was that their honeypots recorded access of an IRC-Bot to a Command Control Server from which it got orders to launch a DDos-attack. First, I wonder why this bot contacts their honeypots and gets new commands from them.

Re: shadowserver.org

2010-06-14 Thread 7v5w7go9ub0o
On 06/14/10 18:52, John Brooks wrote: [] And second, the exit policy of my node does not allow IRC. For me this makes no sense at all. From my experience, shadowserver has a habit of being overzealous like this. I've never dealt with them in the context of Tor, but I had an