Skip to content

Incorrect Exit IP shown after New Circuit request

An incorrect IP is sometimes shown as an exit IP after a New Circuit request from the Tor Browser UI.

Steps to reproduce:

  1. use Tor Browser 9.5.3
  2. go to https://www.tunnelbear.com/blog/
  3. if the website loads correctly, hit [New Circuit for this Site] button
  4. if you got the Cloudflare blockpage, take a note of the IP address that Cloudflare reports
  5. take a look at the Exit Node IP of the current circuit

That's the blockpage I got, it has 185.220.100.247 as an Exit Node IP:

tbb-strange-exit_2020-08-04_12-24-07

That's the circuit, I expected it to show the same IP, but it shows a different Exit Node IP — 217.79.190.25:

tbb-strange-exit_2020-08-04_12-24-21

While I was clicking "New Circuit" button once, I've noticed that 185.220.100.247 was shown for a brief time in the displayed circuit and it quickly (within a second or two) changed to 217.79.190.25. So, the UI suggests that the New Circuit was created twice, although the button was clicked once. Maybe this issue is connected to #33063 (closed).

The issue reproduces for me every time I hit a Cloudflare blockpage using these steps.

I was unable to reproduce the issue with a simple whoami webservice https://stat.ripe.net/data/whats-my-ip/data.json Maybe it is something CF-specific that is triggering the erratic behavior.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information