Hi,

a directory authority IP-address on the DFRI network was recently reported for hosting malware and abuse reports was sent out to several mail addresses. Not only to abuse@dfri.tld as one would hope.

The reason seems to have been malware using Tor connecting to the IP while analyzed in a sandbox.

With the introduction of fallback directories abuse reports may become an issue for non-exit nodes. Just a heads up.

Regards, Johan https://www.dfri.se