[Dxspider-support] Bad IP

[Kin]

I was on my phone, and between the autocorrect and not being able to test the regex, well...
But as Dan said, or to fine-tune it a bit more:
 
grep PC92 spider/local_data/debug/2025/033.dat | grep -E "A\^\^1(IU[0-9]AZC)"
 
And if you want to see the summary by callsign:
 
grep PC92 spider/local_data/debug/2025/033.dat | grep -E "A\^\^1(IU[0-9]AZC)" | sed -E 's/.*A\^\^1(IU[0-9]AZC).*/\1/' | sort | uniq -c
 
Kin EA3CV
 
 
 
De: ea3cv at cronux.net <ea3cv at cronux.net> 
Enviado el: lunes, 3 de febrero de 2025 11:09
Para: The DXSpider Support list <dxspider-support at tobit.co.uk>
CC: Keith, G6NHU <g6nhu at me.com>
Asunto: Re: [Dxspider-support] Bad IP
 
Hi,
I think it must still be blocked because it is identifying itself with several different callsigns.
Just do:
 
grep -E "(IU\dAZC)" spider/local_data/debug/2025/033.dat
 
Kin EA3CV
 
 
Enviado desde Outlook para Android <https://aka.ms/AAb9ysg> 
 
  _____  

De: Dxspider-support <dxspider-support-bounces at tobit.co.uk <mailto:dxspider-support-bounces at tobit.co.uk> > en nombre de Keith, G6NHU via Dxspider-support <dxspider-support at tobit.co.uk <mailto:dxspider-support at tobit.co.uk> >
Enviado: lunes, febrero 3, 2025 10:38:45 a. m.
Para: The DXSpider Support list <dxspider-support at tobit.co.uk <mailto:dxspider-support at tobit.co.uk> >
CC: Keith, G6NHU <g6nhu at me.com <mailto:g6nhu at me.com> >
Asunto: Re: [Dxspider-support] Bad IP
 
I did this yesterday and have just received an email.

I’ve removed his IP from my bad list now.

73 Keith G6NHU 

"I'm Enrico IU4AZC and I'm a ham radio operator with a recent interest in understanding the behaviour of the DX Cluster network.
To grab a few statistics, I've created a basic software that opens a TCP connection to a few nodes and stores the received spots in a database. I've noticed that in the past hours your node started rejecting my connection and I suspect it's because some bug in my code made it behave in some "abusive" way. If that's the case, I apologise and I don't ask you to remove my ip from the blacklist sooner than the usual policy - I'll wait and use other clusters in the meantime.
But if it's not the case (maybe your software does a GeoIP lookup and the location doesn't match? I moved to London a few years ago), may I ask you to check in the logs the reason of my connections being rejected?
I'm currently connecting over IPv4 from 140.228.74.170."
On 1 Feb 2025 at 20:37 +0000, Kin via Dxspider-support <dxspider-support at tobit.co.uk <mailto:dxspider-support at tobit.co.uk> >, wrote:


Hi,

This IP 140.228.74.170 is being used to try to access different nodes on the
network, using different callsigns, with different SSIDs.
That pattern: IUxAZC-x
Advised: set/badip 140.228.74.170

Kin



_______________________________________________
Dxspider-support mailing list
Dxspider-support at tobit.co.uk <mailto:Dxspider-support at tobit.co.uk> 
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20250203/8948dc07/attachment-0001.htm>