Re: [tor] Re: Hidden Services Hosting and DMCA

2010-06-14 Thread Moritz Bartl
Hi, On 13.06.2010 23:43, andrew wrote: >> Then of course he already mentioned a couple of times that he's not in >> the USA, so even if you were a lawyer he shouldn't take your advice ;) > Right. I read the thread too. He is not, but his service and the > underlying provider are in the USA. Tha

shadowserver.org

2010-06-14 Thread alex-tor
Hi I am running the exit-node tor-readme.spamt.net. My provider, server4you, keeps getting abuse reports from shadowserver.org. According to the abuse service they are running honeynets which record activity comming from my exit-node's IP. I have tried to communicate directly with shadowserver.or

Re: shadowserver.org

2010-06-14 Thread Al MailingList
> I am running the exit-node tor-readme.spamt.net. My provider, > server4you, keeps getting abuse reports from shadowserver.org. According > to the abuse service they are running honeynets which record activity > comming from my exit-node's IP. > > I have tried to communicate directly with shadowse

Re: shadowserver.org

2010-06-14 Thread Damian Johnson
> > Probably because your exit node is being used to do something that > warrants an abuse report. > Maybe, but if this shadowserver site is being incommunicado then I wouldn't put much confidence in their findings. Stop the activity on your exit node that is causing them to lodge reports? > Ver

Re: shadowserver.org

2010-06-14 Thread kuhkatz
Am 14.06.2010 16:02, schrieb alex-...@copton.net: Hi I am running the exit-node tor-readme.spamt.net. My provider, server4you, keeps getting abuse reports from shadowserver.org. According to the abuse service they are running honeynets which record activity comming from my exit-node's IP. I hav

Re: shadowserver.org

2010-06-14 Thread Al MailingList
On Mon, Jun 14, 2010 at 7:03 PM, Damian Johnson wrote: >> Probably because your exit node is being used to do something that >> warrants an abuse report. > > Maybe, but if this shadowserver site is being incommunicado then I wouldn't > put much confidence in their findings. FWIW, Shadowserver hav

Re: shadowserver.org

2010-06-14 Thread alex-tor
On Mon, Jun 14, 2010 at 09:01:53PM +0200, kuhkatz wrote: > i assume you might block these server via the exit-rules of your server. Maybe I am wrong, but if the servers' IP addresses where publicly known, they would not be honeypots, would they? How would you block connections to Shadowserver's

Re: shadowserver.org

2010-06-14 Thread Al MailingList
On Mon, Jun 14, 2010 at 10:03 PM, wrote: > On Mon, Jun 14, 2010 at 09:01:53PM +0200, kuhkatz wrote: >> i assume you might block these server via the exit-rules of your server. > > Maybe I am wrong, but if the servers' IP addresses where publicly known, > they would not be honeypots, would they? >

Re: shadowserver.org

2010-06-14 Thread 7v5w7go9ub0o
On 06/14/10 10:02, alex-...@copton.net wrote: > I am running the exit-node tor-readme.spamt.net. Thank You tor-readme.spamt.net, for your generous contribution to tor!!! > My provider, server4you, keeps getting abuse reports from > shadowserver.org. According to the abuse service they are runni

Re: shadowserver.org

2010-06-14 Thread Roger Dingledine
On Mon, Jun 14, 2010 at 10:26:59PM +0100, Al MailingList wrote: > > How would you block connections to Shadowserver's honeypots? > > Why would you want to do that? The point is someone is using an exit > node for abuse. If you just prevent abuse to a honey pot, you are just > covering up the probl

Re: shadowserver.org

2010-06-14 Thread alex-tor
On Mon, Jun 14, 2010 at 05:36:02PM -0400, 7v5w7go9ub0o wrote: > What, specifically, are they tracking to your IP? This unspecific > complaint could be anything from an innocent series of pings, to an out > and out stream from metasploit!? I don't really know. I have no direct communication, only m

Re: shadowserver.org

2010-06-14 Thread John Brooks
On Mon, Jun 14, 2010 at 4:27 PM, wrote: > Last thing was that their honeypots recorded access of an IRC-Bot to a > "Command & Control Server" from which it got orders to launch a > DDos-attack. First, I wonder why this bot contacts their honeypots and > gets new commands from them. And second, th

Re: shadowserver.org

2010-06-14 Thread 7v5w7go9ub0o
On 06/14/10 18:52, John Brooks wrote: [] >> And second, the exit policy of my node does not allow >> IRC. >> >> For me this makes no sense at all. >> > > From my experience, shadowserver has a habit of being overzealous > like this. I've never dealt with them in the context of Tor, but I >