« Tor network status now available | Main | Desync ok »

June 09, 2008

Webdvdr and desync now excluded

We have now excluded 2 more proxies from our service: Webdvdr and desync.

Webdvdr is currently the fastest computer in the entire Tor network by a considerable margin, and the operator of this computer continues to regularly change their "exit policy", indicating some sort of experimentation and possibly analysis of traffic flowing through it. Located geographically in Paris, France at dedibox.fr, the operator has also not identified themself with a Tor Contact name, the IP address 88.191.79.196 does not have a DNS host name, is listed on spamhaus.org's XBL composite block list, and is listed on uceprotect.net Level 1 spam list. We think all this warrants protecting our users from this proxy, and so are adding it to our "ExcludeNodes" list effective immediately until further notice.  The operator of this proxy is certainly welcome to contact us at any time.

Desync is currently the second fastest in the Tor network, geographically located in Placentia, California, USA, with Contact name Ben Wilber, and the only computer in the Tor network using ISP Neucom and owned by Reliable Web Services.  It's IP address 66.230.230.230 likewise does not have a DNS host name, and although it is not an obvious candidate for our ExcludeNodes list, we are being cautious in doing this, and in addition we will be attempting email contact with the operator to learn more about him and his intentions with this proxy.

Further to our May 22 blog posting, Paranoia part 1, the names of the 5 proxy servers owned and operated by PSI in Washington, DC, USA are bettyboop, croeso, jalopy, myrnaloy, and nixnix.

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00e008d9de20883400e5532b5b5b8833

Listed below are links to weblogs that reference Webdvdr and desync now excluded:

Comments

Good morning,

I am the administrator of Webdvdr. There is no collection of data on Webdvdr. The exit policy change because I made test. And my email address has always been indicated. So before you say anything, made a search.
The exit policy may change again, I'll probably spend a simple relay because many hacker uses Tor.
Made a search on google with any IP Tor leaving port 80 open.
My email adress is http://torstatus.blutmagie.de/router_detail.php?FP=e56feabe3e7d822931f768a7a0f18e7bea901ebd

Re
Sorry for my English, I'm french.

Thank you, Fugitif, for this contribution. We will reconsider exclusion of Webdvdr at some future time. For the short term, we remain suspicious of very fast Tor nodes because of the perception - rightly or wrongly - that they are more capable of being used for monitoring. Fast Tor nodes tend to attract a greater percentage of overall Tor network traffic.

Good morning,
Monitoring what ? I monitor the bandwidth in order not to overload the server, that's all.
If you have any other question, you have my email.

Webdvdr is closed forever.
Some pirate used them to attack ssh on port 22. I received an abuse of my host.

Verify your Comment

Previewing your Comment

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been posted. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment