[Dxspider-support] Duplicity
IZ2LSC
iz2lsc.andrea at gmail.com
Tue Jul 2 10:24:32 BST 2024
If you are running recent code, there should be already this limit in place:
Added cmd entry rate limiting. If a user sends X commmands in Y secs then
they are disconnected without notice. The defaults are X
($DXCommandmode::maxcmdcount) = 16 and Y ($DXCommandmode::cmdinterval) = 9.
These can be changed by the startup script.
These default values are set generously deliberately to allow certain user
programs to get with the program and reduce the number of cmds that they
issue on connection down to something reasonable. For instance, I cannot
see why things like name, qth, lat/long/QRA (amongst several other sticky
user attributes that only need to be entered once) are sent on every login.
These default values WILL reduce over time.
73
andrea iz2lsc
-->
Il giorno lun 1 lug 2024 alle ore 18:35 Kin via Dxspider-support
<dxspider-support at tobit.co.uk> ha scritto:
>
> Hi Dan,
>
>
>
> I think it was an attack.
>
> I’ve tried to contact the user, but to no avail.
>
> The rate at which the commands were coming in (approx 20/s) before the disconnection occurred, I don't think it originated from any client sw.
>
> Also, the information associated with the user (name and qth) were insults.
>
> Now the IP is blocked and I have set up a mechanism so that when it happens again, send me a Telegram with the info. I will also block it automatically.
>
>
>
> 73 de Kin
>
>
>
>
>
> De: Dxspider-support <dxspider-support-bounces at tobit.co.uk> En nombre de Danilo Brelih via Dxspider-support
> Enviado el: viernes, 28 de junio de 2024 11:42
> Para: The DXSpider Support list <dxspider-support at tobit.co.uk>
> CC: Danilo Brelih <s50u at s50e.si>
> Asunto: Re: [Dxspider-support] Duplicity
>
>
>
> Kin
>
> Please ask the client which program does this I doubt a bit that it would press sh/dx 100 so many times on its own. 🤔😃
>
> CU Dan S50U
>
>
>
> Dne, 28. junij 2024 11:13:44 GMT+02:00, Kin via Dxspider-support <dxspider-support at tobit.co.uk> sporoča:
>
> I know what is happening:
>
> 1719521175^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521176^(chan) <- I EA5CRC sh/dx/100
> 1719521177^(chan) <- I EA5CRC sh/dx/100
>
> grep -i "ea5crc" 179.dat | grep "sh/dx" | wc -l
> 30632
>
> crazy :(
>
> I'm sorry.
>
> Kin
>
> -----Mensaje original-----
> De: Dxspider-support <dxspider-support-bounces at tobit.co.uk> En nombre de Kin
> via Dxspider-support
> Enviado el: viernes, 28 de junio de 2024 10:59
> Para: 'The DXSpider Support list' <dxspider-support at tobit.co.uk>
> CC: Kin <ea3cv at cronux.net>
> Asunto: [Dxspider-support] Duplicity
>
> Hi,
>
> Something strange is happening with the traffic on the EA4URE-2 node.
>
> From 1719514871 to 1719515462:
>
> grep -i "EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB MANY THANKS FOR
> THE CONTAC<PY1LV>" 179.dat | wc -l
> 2763
>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514871^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514872^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> ...
>
>
> 1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514957^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719514957^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719514958^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719514958^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719514958^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719514958^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
>
> grep -i "D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>" 179.dat | wc -l
> 8755
> grep -i "D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB MANY THANKS
> FOR THE CONTAC<PY1LV>" 179.dat | wc -l
> 2763
>
> ...
>
> 1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
> FER DX NEW BAND FB CPY <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
> FER DX NEW BAND FB CPY <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
> FER DX NEW BAND FB CPY <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
> FER DX NEW BAND FB CPY <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> 1719515403^(chan) -> D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU
> FER DX NEW BAND FB CPY <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>
> 1719515403^(chan) -> D EA5CRC 21273.0 OE8ANK 27-Jun-2024 1854Z SSB
> MANY THANKS FOR THE CONTAC<PY1LV>
> ...
>
> grep -i "D EA5CRC 21016.5 EA8TL 27-Jun-2024 1910Z CW TU FER DX NEW
> BAND FB CPY <PY1LV>" 179.dat | wc -l
> 10892
> grep -i "D EA5CRC 21275.0 OH6AC 27-Jun-2024 1902Z SSB
> <PY1LV>" 179.dat | wc -l
> 8755
>
> grep -i "<PY1LV>" 179.dat | wc -l
> 26001
>
> These are some snapshots of the 26001 packets that day.
> On nodes EA4URE-3 and EA4URE-5 it is also happening but in smaller
> quantities.
>
> DXSpider v1.57 (build 524 git: mojo/f43ac256[r]) using perl v5.30.3 on Linux
>
> Any idea what is going on?
>
> 73 de Kin EA3CV
>
> ________________________________
>
> Dxspider-support mailing list
> Dxspider-support at tobit.co.uk
> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>
> ________________________________
>
> Dxspider-support mailing list
> Dxspider-support at tobit.co.uk
> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>
> --
> https://s50e.si/gorje.html
>
> _______________________________________________
> Dxspider-support mailing list
> Dxspider-support at tobit.co.uk
> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
More information about the Dxspider-support
mailing list