undefined | Better HN

0 pointstalmand12y ago0 comments

How did they know the something was done by someone using TOR on their network?

0 comments

4 comments · 3 top-level

dijit12y ago· 1 in thread

tor exit nodes are easy to identify, if they had the co-operation of site.com then they'd not see the location, but they'd see the exit node.

talmandOP12y ago

I can understand they can the attack was done through Tor, what I don't understand is how they understood the attack originated on their own network through Tor.

rickyc09112y ago

There's a list of IPs that TOR networks run on, so they could just cross reference that.

srl12y ago

It came from a TOR ip.

j / k navigate · click thread line to collapse