[Dxspider-support] Duplicity
Kin
ea3cv at cronux.net
Mon Jul 1 17:35:10 BST 2024
Hi Dan,
I think it was an attack.
I’ve tried to contact the user, but to no avail.
The rate at which the commands were coming in (approx 20/s) before the disconnection occurred, I don't think it originated from any client sw.
Also, the information associated with the user (name and qth) were insults.
Now the IP is blocked and I have set up a mechanism so that when it happens again, send me a Telegram with the info. I will also block it automatically.
73 de Kin
De: Dxspider-support <dxspider-support-bounces at tobit.co.uk> En nombre de Danilo Brelih via Dxspider-support
Enviado el: viernes, 28 de junio de 2024 11:42
Para: The DXSpider Support list <dxspider-support at tobit.co.uk>
CC: Danilo Brelih <s50u at s50e.si>
Asunto: Re: [Dxspider-support] Duplicity
Kin
Please ask the client which program does this I doubt a bit that it would press sh/dx 100 so many times on its own. 🤔😃
CU Dan S50U
Dne, 28. junij 2024 11:13:44 GMT+02:00, Kin via Dxspider-support <dxspider-support at tobit.co.uk> sporoča:
I know what is happening:
1719521175^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521176^(chan) <- I EA5CRC sh/dx/100
1719521177^(chan) <- I EA5CRC sh/dx/100
grep -i "ea5crc" 179.dat | grep "sh/dx" | wc -l
30632
crazy :(
I'm sorry.
Kin
-----Mensaje original-----
De: Dxspider-support <dxspider-support-bounces at tobit.co.uk> En nombre de Kin
via Dxspider-support
Enviado el: viernes, 28 de junio de 2024 10:59
Para: 'The DXSpider Support list' <dxspider-support at tobit.co.uk>
CC: Kin <ea3cv at cronux.net>
Asunto: [Dxspider-support] Duplicity
Hi,
Something strange is happening with the traffic on the EA4URE-2 node.
>From 1719514871 to 1719515462:
grep -i "EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB MANY THANKS FOR
THE CONTAC<PY1LV>" 179.dat | wc -l
2763
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
...
1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719514958^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719514958^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719514958^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
grep -i "D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>" 179.dat | wc -l
8755
grep -i "D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB MANY THANKS
FOR THE CONTAC<PY1LV>" 179.dat | wc -l
2763
...
1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
FER DX NEW BAND FB CPY <PY1LV>
1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
FER DX NEW BAND FB CPY <PY1LV>
1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
FER DX NEW BAND FB CPY <PY1LV>
1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
FER DX NEW BAND FB CPY <PY1LV>
1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
FER DX NEW BAND FB CPY <PY1LV>
1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>
1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
MANY THANKS FOR THE CONTAC<PY1LV>
...
grep -i "D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU FER DX NEW
BAND FB CPY <PY1LV>" 179.dat | wc -l
10892
grep -i "D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
<PY1LV>" 179.dat | wc -l
8755
grep -i "<PY1LV>" 179.dat | wc -l
26001
These are some snapshots of the 26001 packets that day.
On nodes EA4URE-3 and EA4URE-5 it is also happening but in smaller
quantities.
DXSpider v1.57 (build 524 git: mojo/f43ac256[r]) using perl v5.30.3 on Linux
Any idea what is going on?
73 de Kin EA3CV
_____
Dxspider-support mailing list
Dxspider-support at tobit.co.uk
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
_____
Dxspider-support mailing list
Dxspider-support at tobit.co.uk
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
--
https://s50e.si/gorje.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20240701/c322b002/attachment-0001.htm>
More information about the Dxspider-support
mailing list