<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto"><span style="font-family:Arial;font-size: medium">I wrote a whole wall of text but I’ve deleted it as there are just two steps.</span><span style="font-size: medium"><br /></span><span style="font-size: medium"><br /></span><span style="font-family:Arial;font-size: medium">Set dxspider to reject all spots without IP addresses (can this currently be done?)</span><span style="font-size: medium"><br /></span><span style="font-size: medium"><br /></span><span style="font-family:Arial;font-size: medium">Disconnect all links to the highly vulnerable and out of date AR Cluster nodes.</span><span style="font-size: medium"><br /></span><span style="font-size: medium"><br /></span><span style="font-family:Arial;font-size: medium">73 Keith.</span><span style="font-size: medium"><br /></span><span style="font-size: medium"><br /></span><span style="font-size: medium"><br /></span><span style="font-size: medium"><br /></span><span style="font-size: medium"><br /></span>On 1 Apr 2025 at 18:56 +0100, Michael Carper, Ph.D. via Dxspider-support <dxspider-support@tobit.co.uk>, wrote:</div>
<blockquote style="border-left-color: rgb(26, 188, 156); margin: 5px; padding-left: 10px; border-left-width: thin; border-left-style: solid;"><span style="font-family:arial, helvetica, sans-serif">Good point, Keith.</span><br />
<span style="font-family:arial, helvetica, sans-serif">What are the steps for doing that?</span><br />
<span style="font-family:arial, helvetica, sans-serif">Has anyone made any gains on identifying the offender(s)?</span><br />
<span style="font-family:arial, helvetica, sans-serif">Mike, WA9PIE</span><br />
On Tue, Apr 1, 2025 at 12:46 PM Keith, G6NHU via Dxspider-support <<a href="https://mailto:dxspider-support@tobit.co.uk" target="_blank">dxspider-support@tobit.co.uk</a>> wrote:<br />
<blockquote style="border-left-color: rgb(230, 126, 34); margin: 5px; padding-left: 10px; border-left-width: thin; border-left-style: solid;"><span style="font-family:Arial;font-size: 16px">I read that thread a few minutes ago and Lee is making interesting comments, some I agree with but I think that some others are simply wrong. For those who want to read it, it’s here: </span><a style="font-family:Arial;font-size: 16px" href="https://groups.io/g/CC-User/topic/bogus_dx_spot_attacks_on/112020247" target="_blank">https://groups.io/g/CC-User/topic/bogus_dx_spot_attacks_on/112020247</a><br />
<span style="font-family:Arial;font-size: 16px">However, he raises a very important point, one which Dirk has also touched on (and that I’ve mentioned a couple of times) regarding AR Clusters.</span><br />
<span style="color:#333333;font-family:Arial;font-size: 16px">"Other types of software such as AR Cluster simply pass everything they get. Since AR Cluster doesn't give IP addresses with their spots it makes it difficult to determine whether these spots are bogus or not. A simple solution that is used by some sysops it to drop all AR Cluster originated spots!"</span><br />
<span style="color:#333333;font-family:Arial;font-size: 16px">And:</span><br />
<span style="color:#333333;font-family:Arial;font-size: 16px">"I am now blocking all spots without IP addresses. This includes all spots from AR Clusters etc."</span><br />
<span style="color:#333333;font-family:Arial;font-size: 16px">It’s been proven and demonstrated that AR Cluster nodes are a weak spot on the network and as the creator is SK, no further development will happen. For the good of the network, we need to be removing links to AR Cluster nodes.</span><br />
<span style="color:#333333;font-family:Arial;font-size: 16px">Hopefully Jim will be updating his dxcluster telnet list very soon which will give an idea of how many AR Cluster nodes are still active but the sooner these are all isolated or the owner changes them to something else, either CC Cluster or DXSpider, the better for everyone.</span><br />
<span style="color:#333333;font-family:Arial;font-size: 16px">73 Keith.</span><br />
On 1 Apr 2025 at 18:19 +0100, Michael Carper, Ph.D. via Dxspider-support <<a href="https://mailto:dxspider-support@tobit.co.uk" target="_blank">dxspider-support@tobit.co.uk</a>>, wrote:<br />
<blockquote style="border-left-color: rgb(52, 152, 219); margin: 5px; padding-left: 10px; border-left-width: thin; border-left-style: solid;"><span style="font-family:arial, helvetica, sans-serif">On a related note, did anyone see this?</span><br />
<span style="font-family:arial, helvetica, sans-serif">Mike, WA9PIE</span><br />
<span style="font-family:arial, helvetica, sans-serif">===========</span><br />
<span style="font-family:Arial, Helvetica, sans-serif">From: </span><a style="font-family:Arial, Helvetica, sans-serif" href="https://mailto:CC-User@groups.io" target="_blank">CC-User@groups.io</a><span style="font-family:Arial, Helvetica, sans-serif"> [mailto:</span><a style="font-family:Arial, Helvetica, sans-serif" href="https://mailto:CC-User@groups.io" target="_blank">CC-User@groups.io</a><span style="font-family:Arial, Helvetica, sans-serif">] On Behalf Of Lee Sawkins via </span><a style="font-family:Arial, Helvetica, sans-serif" href="http://groups.io/" target="_blank">groups.io</a><span style="font-family:Arial, Helvetica, sans-serif">Sent: Tuesday, April 01, 2025 10:25 AM</span><span style="font-family:Arial, Helvetica, sans-serif">To: </span><a style="font-family:Arial, Helvetica, sans-serif" href="https://mailto:CC-User@groups.io" target="_blank">CC-User@groups.io</a><span style="font-family:Arial, Helvetica, sans-serif">Subject: Re: [CC-User] Bogus DX Spot Attacks on Clusters</span><br />
<span style="font-family:Arial, Helvetica, sans-serif">What happened this weekend was that tens of thousands of bogus spots were entered into the cluster system. These spots were all for SSB. Since there are no SSB skimmers available yet, all of these spots appeared to be manually entered, but in fact they were generated by a computer.</span><br />
<span style="font-family:Arial, Helvetica, sans-serif">Normally the human entered spots never are more than 60 per minute. During the weekend spots that were bogus were entered at many thousands per minute. These spots were targeting specific active calls. These spots were giving different frequencies on all contest bands for each bogus spot. These spots had same DX call and a different spotter call and different originating cluster call. This caused many nodes to get bogged down trying to process all this data. Some crashed. Others got hopelessly behind and continued sending data to my cluster which dropped the spots because they were too old. Millions of spots were being dropped.</span><br />
<span style="font-family:Arial, Helvetica, sans-serif">My cluster limits the number of spots to 60 per minute. This limited bogus spots but also good spots in each minute. When bogus spots stopped, then all the new good ones got through.</span><br />
<span style="font-family:Arial, Helvetica, sans-serif">Lee VE7CC</span><br />
_______________________________________________<br />
Dxspider-support mailing list<br />
<a href="https://mailto:Dxspider-support@tobit.co.uk" target="_blank">Dxspider-support@tobit.co.uk</a><a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support" target="_blank">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a></blockquote>
_______________________________________________<br />
Dxspider-support mailing list<br />
<a href="https://mailto:Dxspider-support@tobit.co.uk" target="_blank">Dxspider-support@tobit.co.uk</a><a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support" target="_blank">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a></blockquote>
_______________________________________________<br />
Dxspider-support mailing list<br />
Dxspider-support@tobit.co.uk<br />
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</blockquote>
</div>
<div name="messageReplySection">
<div dir="ltr" class="gmail_attr">On Tue, Apr 1, 2025 at 8:45 AM Kin via Dxspider-support <<a href="mailto:dxspider-support@tobit.co.uk" target="_blank">dxspider-support@tobit.co.uk</a>> wrote:<br /></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div lang="ES" xml:lang="ES">
<div>
<p class="MsoNormal"><span><span style="font-family:Calibri,sans-serif">Absolutely</span></span> <span style="font-family:Calibri,sans-serif"><span>brilliant</span></span> <span style="font-family:"Segoe UI Emoji",sans-serif">🤣🤣🤣<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI Emoji",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI Emoji",sans-serif">Kin EA3CV</span><span style="font-family:Calibri,sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif"><u></u> <u></u></span></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">De:</span></b> <span style="font-size:11pt;font-family:Calibri,sans-serif">Dxspider-support <<a href="mailto:dxspider-support-bounces@tobit.co.uk" target="_blank">dxspider-support-bounces@tobit.co.uk</a>> <b>En nombre de</b> Danilo Brelih via Dxspider-support<br />
<b>Enviado el:</b> lunes, 31 de marzo de 2025 22:47<br />
<b>Para:</b> Keith, G6NHU via Dxspider-support <<a href="mailto:dxspider-support@tobit.co.uk" target="_blank">dxspider-support@tobit.co.uk</a>><br />
<b>CC:</b> Danilo Brelih <<a href="mailto:s50u@s50e.si" target="_blank">s50u@s50e.si</a>><br />
<b>Asunto:</b> Re: [Dxspider-support] Weekend data<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p>…<span style="font-family:Calibri,sans-serif"><u></u><u></u></span></p>
<p><span>This</span> <span>is</span> Linux <span>land</span>.<br />
In silent nights you can hear the Windows machines rebooting.<br />
<a href="https://s50clx.infrax.si" target="_blank">https://s50clx.infrax.si</a><u></u><u></u></p>
<p>GL Dan<u></u><u></u></p>
</div>
</div>
_______________________________________________<br />
Dxspider-support mailing list<br />
<a href="mailto:Dxspider-support@tobit.co.uk" target="_blank">Dxspider-support@tobit.co.uk</a><br />
<a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support" rel="noreferrer" target="_blank">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br /></div>
</blockquote>
</div>
</body>
</html>