[tor-relays] Should I worry about sudden swings in connection numbers to my relay?
Dear List, One of my exits, which has been up for 6 months now with an average of 2000 to 4000 connections, since yesterday has been jumping up to 10,000, 8,000, then back to 3500 or so. My history is a simple test file of date and connection numbers taken every 5 minutes: Sun Jan 3 07:20:00 MSK 2021 3233 Sun Jan 3 07:25:00 MSK 2021 3342 Sun Jan 3 07:30:00 MSK 2021 9679 Sun Jan 3 07:35:00 MSK 2021 3455 Sun Jan 3 07:40:00 MSK 2021 6800 Sun Jan 3 07:45:00 MSK 2021 3402 Sun Jan 3 07:50:00 MSK 2021 3346 Sun Jan 3 07:55:00 MSK 2021 3355 Sun Jan 3 08:00:00 MSK 2021 3358 Sun Jan 3 08:05:00 MSK 2021 10067 Sun Jan 3 08:10:00 MSK 2021 3343 - TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Info from my ISP about investigation of tor exits
Olaf Grimm wrote: Here is the original of mail (in copy) from my provider Mail copy: "Hello, Unfortunately your traffic type is full of unwanted events not compatible with our company ethic. Since the first date of activity we've received many abuse reports regarding bruteforce, layer7 attacks, hacking and many others. Currently there is a police investigation regarding one of the 2 servers related to hacking activity against an european country security. The access and content is in interpol custody and we have a restriction on reactivation. Kind regards, George Oprea 24/7 Technical Support Zetservers.com /Romania" --> My answer: Thank you for your information. Good luck. I change my other servers to less trouble. (Change Exits to Relay) Olaf Is there anyone left in the interpol that doesn't know what Tor is and how it works? Seriously, it's year 2021. This Technical support person appears to have no clue that the traffic is only blindly forwarded, there's nothing on the server itself that generates the "abusive traffic". Nothing illegal can be found on them (if it's just Tor installed and configured as an exit relay). To be honest, I don't get these hosting providers that are so scared of brute force and layer 7 attacks. These small hosting companies behave like back in the 2000's when everything was so scary, when an IP address usually meant one person or one physical address to bust the door. Rather than changing from Exits to middles, try to explain to this small hosting company what Tor is and how it works. There are plenty of Tor exits in Romania, because it has very good internet, show them some AS number examples from the same country so they will grow some courage that they are not the only ones. Also tell them that there are many thousands of servers worldwide, most of them within the European Union which RO is part of. And leave the Exits to Exits ;) OpenPGP_signature Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Info from my ISP about investigation of tor exits - Update
On Sat, Jan 02, 2021 at 01:31:12PM +0100, Olaf Grimm wrote: > Exit-IPs: Please block these Exits /Relays > > 89.34.27.149, active > 89.34.27.43 , "supended" in panel, but active. Warning! > 89.34.27.48, active > 89.34.27.49, active > (89.34.27.59 since some days terminated) > (89.34.27.37 since some week terminated) Thanks. (Olaf mailed this info to bad-relays@ too, and we've started the process of making sure the relays won't be able to come back into the network, just in case.) --Roger ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
[tor-relays] Info from my ISP about investigation of tor exits - Update
Exit-IPs: Please block these Exits /Relays 89.34.27.149, active 89.34.27.43 , "supended" in panel, but active. Warning! 89.34.27.48, active 89.34.27.49, active (89.34.27.59 since some days terminated) (89.34.27.37 since some week terminated) ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
[tor-relays] Info from my ISP about investigation of tor exits
Here is the original of mail (in copy) from my provider Mail copy: "Hello, Unfortunately your traffic type is full of unwanted events not compatible with our company ethic. Since the first date of activity we've received many abuse reports regarding bruteforce, layer7 attacks, hacking and many others. Currently there is a police investigation regarding one of the 2 servers related to hacking activity against an european country security. The access and content is in interpol custody and we have a restriction on reactivation. Kind regards, George Oprea 24/7 Technical Support Zetservers.com /Romania" --> My answer: Thank you for your information. Good luck. I change my other servers to less trouble. (Change Exits to Relay) Olaf ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
