Tor Exit Nodes Mapped and Located

#1

Post by the_wanderer » Thu, Feb 28, 2013, 1:24 PM UTC

Tor Exit Nodes Mapped and Located
hackertarget.com

Re: Tor Exit Nodes Mapped and Located

#2

Post by dgesang » Thu, Feb 28, 2013, 1:57 PM UTC

15 exit nodes in the kyrgyz republic hospital area alone? Can that be correct?

Re: Tor Exit Nodes Mapped and Located

#3

Post by wfn » Thu, Feb 28, 2013, 2:05 PM UTC

dgesang wrote: post #2

15 exit nodes in the kyrgyz republic hospital area alone? Can that be correct?

Perhaps simply multiple network interfaces / assigned IP addresses - all could actually reside in the same physical machine. (That's probably not good practice Tor-wise, of course - the nodes should be as dispersed as possible..)

edit now that I think about it, placing Tor exits in a hospital area might be a clever tactic to avoid them being raided (e.g. to freeze memory and attempt to extract some data about other nodes etc)..

Re: Tor Exit Nodes Mapped and Located

#4

Post by wfn » Thu, Feb 28, 2013, 2:07 PM UTC

Just as I thought, the Kimsufi line is really popular (at least for these kinds of things)! :)

Re: Tor Exit Nodes Mapped and Located

#5

Post by codesuela » Thu, Feb 28, 2013, 2:11 PM UTC

dgesang wrote: post #2

15 exit nodes in the kyrgyz republic hospital area alone? Can that be correct?

Thats just an error, if you check the IPs they all belong to EuroVPS who in turn seem to lease their lines from Leaseweb(Netherlands). Maybe Eurovps office used to be in Kyrgyzstan and the whois data was stale at the time this was mapped. (e.g. http://whois.domaintools.com/77.235.32.0) Same thing for the one in Almaty, Kazakhstan which is actually located in Belgium (http://whois.domaintools.com/89.106.244.21). Another example 46.37.160.114 maps to Vladivostok, but it actually belongs to BurstNET London.

Re: Tor Exit Nodes Mapped and Located

#6

Post by Wilya » Thu, Feb 28, 2013, 2:18 PM UTC

Any background on who "Conformal Systems" are and why they would operate exit nodes ? I'm not really familiar with who they are and what they do, but they seem to be the only one in the top-25 that isn't either a hosting company or a residential ISP.

(apart from Formless Networking, but that one is a bit more well known)

Not that it's not nice of them, but it seems a bit out of place.

Re: Tor Exit Nodes Mapped and Located

#7

Post by bergie » Thu, Feb 28, 2013, 2:22 PM UTC

Interesting, all the Berlin exit nodes are in a place that is a huge construction area on the Museum Island. Based on this I suppose they were only able to do city-level positioning (GeoIP or something similar).

Re: Tor Exit Nodes Mapped and Located

#8

Post by nwh » Thu, Feb 28, 2013, 2:22 PM UTC

There's nothing new here. The exit nodes are public knowledge.

Re: Tor Exit Nodes Mapped and Located

#9

Post by ffffruit » Thu, Feb 28, 2013, 2:24 PM UTC

bergie wrote: post #7

Interesting, all the Berlin exit nodes are in a place that is a huge construction area on the Museum Island. Based on this I suppose they were only able to do city-level positioning (GeoIP or something similar).

I agree. Majority of Central London ones are right in the middle of the financial district.

Re: Tor Exit Nodes Mapped and Located

#10

Post by anonymfus » Thu, Feb 28, 2013, 2:25 PM UTC

wfn wrote: post #3

dgesang wrote: post #2

15 exit nodes in the kyrgyz republic hospital area alone? Can that be correct?

Perhaps simply multiple network interfaces / assigned IP addresses - all could actually reside in the same physical machine. (That's probably not good practice Tor-wise, of course - the nodes should be as dispersed as possible..) edit now that I think about it, placing Tor exits in a hospital area might be a clever tactic to avoid them being raided (e.g. to freeze memory and attempt to extract some data about other n…

And just by coincidence they are placed at the center of the capital.