<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Hi Keith and all,<br>
<br>
as stated here <a class="moz-txt-link-freetext" href="https://hamaward.cloud/wwa">https://hamaward.cloud/wwa</a> all that stuff will be
repeated form June 30 to July 6 this year, and next year (!!!) from
January 1 to January 31 and from June 29 to July 5... So it's not
finished!<br>
<br>
73 Luigi IK5ZUK<br>
<br>
<br>
<div class="moz-cite-prefix">Il 29/01/2025 14:58, Keith, G6NHU via
Dxspider-support ha scritto:<br>
</div>
<blockquote type="cite"
cite="mid:e93a4640-5a31-4d8a-b284-66721197909a@Spark">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<div name="messageBodySection">
<div dir="auto">Shouldn’t that all be baddx, not badnode?<br>
<br>
I’m inclined to agree with Kin here, if these are being
generated and fed into the network in the way he’s describing
it then it’s fraudulent and we should be blocking it.<br>
<br>
This award thing is due to end in a couple of days, it’s been
almost double the size this year compared to last year and I’d
love to see an analysis of how many ‘WWA’ spots have been
posted this month. They appear to run events all throughout
the year (which people pay for), but this is the biggest.<br>
<br>
The technology behind it all looks impressive but they do
appear to be abusing the cluster network. The handful of
hours of potential self-spotting pales into insignificance
compared to this.<br>
<br>
With the WWA thing ending in two days, there’s a chance this
gets forgotten about until it happens again next year.<br>
<br>
73 Keith.</div>
</div>
<div name="messageReplySection">On 29 Jan 2025 at 13:38 +0000, Kin
via Dxspider-support <a class="moz-txt-link-rfc2396E" href="mailto:dxspider-support@tobit.co.uk"><dxspider-support@tobit.co.uk></a>,
wrote:<br>
<blockquote type="cite"
style="border-left-color: grey; border-left-width: thin; border-left-style: solid; margin: 5px 5px;padding-left: 10px;">I
have been analysing the logs, and I can see that the same
thing is<br>
happening to every node I check.<br>
It seems that a list of all active nodes has been generated
and is being<br>
used as a pool to create spots with fake IPs, and probably
with spoofed<br>
spotters.<br>
<br>
So far, I have gathered the following:<br>
<br>
set/badword WWA<br>
set/badnode 8E3R BY8GA BY4DX HB9WWA CR6WWA<br>
set/badnode II0WWA II1WWA II2WWA II3WWA II4WWA II5WWA II6WWA
II7WWA II8WWA<br>
II9WWA<br>
set/badnode EG4WWA II0WWA E7W CQ7WWA GB2WWA DA0WWA EN0U OL5WWA
SN4WWA<br>
set/badnode WWA 3WWA UP7WWA CR6WWA GB2WWA PA25WWA DA0WWA
S53WWA OL5WWA<br>
A43WWA<br>
set/badnode EG2WWA EG4WWA EG6WWA EG5WWA EG7WWA EG8WWA EG9WWA
SN4WWA HZ1WWA<br>
<br>
<br>
Kin<br>
<br>
<br>
-----Mensaje original-----<br>
De: Dxspider-support
<a class="moz-txt-link-rfc2396E" href="mailto:dxspider-support-bounces@tobit.co.uk"><dxspider-support-bounces@tobit.co.uk></a> En nombre de Kin<br>
via Dxspider-support<br>
Enviado el: miércoles, 29 de enero de 2025 14:12<br>
Para: 'The DXSpider Support list'
<a class="moz-txt-link-rfc2396E" href="mailto:dxspider-support@tobit.co.uk"><dxspider-support@tobit.co.uk></a><br>
CC: Kin <a class="moz-txt-link-rfc2396E" href="mailto:ea3cv@cronux.net"><ea3cv@cronux.net></a><br>
Asunto: [Dxspider-support] Spot with False Origin Nodes<br>
<br>
Hi,<br>
<br>
Since the 27th, I have started seeing spots appearing from my
EA3CV-3 node.<br>
<br>
It is impossible for these spots to have originated from my
node, as it is<br>
password-protected.<br>
I fear that other nodes may be experiencing the same issue.<br>
This started after we raised concerns about a node that
couldn't identify<br>
its connection and used a time string in the comment
field-remember? Well,<br>
now that node is no longer visible, and the spots no longer
contain that<br>
string, yet multiple spots are still being sent.<br>
<br>
1737969291^(chan) <- I PI4CC
PC61^18104.0^II5WWA^27-Jan-2025^0914Z^FT4 award<br>
Worldwide^IK5FKE^EA3CV-3^54.7.76.202^H30^~<br>
1737985919^(chan) <- I PI4CC
PC61^21031.0^8E3R^27-Jan-2025^1351Z^CW WWA25<br>
ham.cm/wwa^YB1CDA^EA3CV-3^24.89.103.72^H30^~<br>
1738058541^(chan) <- I PI4CC
PC61^21074.0^8E3R^28-Jan-2025^1002Z^2025 WWA<br>
ft8^YB3CUG^EA3CV-3^159.16.127.210^H30^~<br>
1738061474^(chan) <- I PI4CC
PC61^14034.0^II4WWA^28-Jan-2025^1051Z^cw thanks<br>
wwa^I4GAD^EA3CV-3^185.120.124.165^H30^~<br>
1738135942^(chan) <- I PI4CC
PC61^7162.0^II2WWA^29-Jan-2025^0732Z^<br>
^IK2YCW^EA3CV-3^131.4.148.117^H30^~<br>
1738154649^(chan) <- I PI4CC
PC61^28023.0^II3WWA^29-Jan-2025^1244Z^tu<br>
wwa^IV3ZXQ^EA3CV-3^218.41.168.166^H30^~<br>
<br>
I am going to block EVERYTHING related to the event these
spots carry,<br>
including the DX stations.<br>
<br>
Kin EA3CV<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
Dxspider-support mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:Dxspider-support@tobit.co.uk">Dxspider-support@tobit.co.uk</a><br>
<a class="moz-txt-link-freetext" href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
<br>
<br>
_______________________________________________<br>
Dxspider-support mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:Dxspider-support@tobit.co.uk">Dxspider-support@tobit.co.uk</a><br>
<a class="moz-txt-link-freetext" href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
</blockquote>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre wrap="" class="moz-quote-pre">_______________________________________________
Dxspider-support mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Dxspider-support@tobit.co.uk">Dxspider-support@tobit.co.uk</a>
<a class="moz-txt-link-freetext" href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a>
</pre>
</blockquote>
<br>
</body>
</html>