More than that. They look for outgoing connections that look like Tor, and then, few minutes later they actively scan it: https://idea.popcount.org/2013-07-11-

More than that. They look for outgoing connections that look like Tor, and then, few minutes later they actively scan it: https://idea.popcount.org/2013-07-11-fun-with-the-great-firewall/ https://idea.popcount.org/2013-07-11-fun-with-the-great-fire...