<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 02/04/2025 09:22, Keith, G6NHU via
Dxspider-support wrote:<br>
</div>
<blockquote type="cite"
cite="mid:ea610857-c142-42d8-83fe-814fd43b184a@Spark">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<div name="messageBodySection">
<div dir="auto"><span
style="font-family:Arial;font-size: medium">I wrote a whole
wall of text but I’ve deleted it as there are just two
steps.</span><span style="font-size: medium"><br>
</span><span style="font-size: medium"><br>
</span><span style="font-family:Arial;font-size: medium">Set
dxspider to reject all spots without IP addresses (can this
currently be done?)</span><span style="font-size: medium"><br>
</span><span style="font-size: medium"><br>
</span></div>
</div>
</blockquote>
<p>Yes, but probably needs a little bit of work from me to make
easier to do. I'm not certain it will help because it does cut off
a sizeable chunk of US spots. And then there are all those pesky
unupdated nodes. <br>
</p>
<blockquote type="cite"
cite="mid:ea610857-c142-42d8-83fe-814fd43b184a@Spark">
<div name="messageBodySection">
<div dir="auto"><span
style="font-family:Arial;font-size: medium">Disconnect all
links to the highly vulnerable and out of date AR Cluster
nodes.</span><span style="font-size: medium"><br>
</span><span style="font-size: medium"><br>
</span></div>
</div>
</blockquote>
<p>There are very few connections and those are all up to date
nodes.</p>
<blockquote type="cite"
cite="mid:ea610857-c142-42d8-83fe-814fd43b184a@Spark">
<div name="messageBodySection">
<div dir="auto"><span
style="font-family:Arial;font-size: medium">73 Keith.</span><span
style="font-size: medium"><br>
</span><span style="font-size: medium"><br>
</span><span style="font-size: medium"><br>
</span><span style="font-size: medium"><br>
</span><span style="font-size: medium"><br>
</span>On 1 Apr 2025 at 18:56 +0100, Michael Carper, Ph.D. via
Dxspider-support <a class="moz-txt-link-rfc2396E" href="mailto:dxspider-support@tobit.co.uk"><dxspider-support@tobit.co.uk></a>, wrote:</div>
<blockquote
style="border-left-color: rgb(26, 188, 156); margin: 5px; padding-left: 10px; border-left-width: thin; border-left-style: solid;"><span
style="font-family:arial, helvetica, sans-serif">Good point,
Keith.</span><br>
<span style="font-family:arial, helvetica, sans-serif">What
are the steps for doing that?</span><br>
<span style="font-family:arial, helvetica, sans-serif">Has
anyone made any gains on identifying the offender(s)?</span><br>
<span style="font-family:arial, helvetica, sans-serif">Mike,
WA9PIE</span><br>
On Tue, Apr 1, 2025 at 12:46 PM Keith, G6NHU via
Dxspider-support <<a
href="https://mailto:dxspider-support@tobit.co.uk"
target="_blank" moz-do-not-send="true">dxspider-support@tobit.co.uk</a>>
wrote:<br>
<blockquote
style="border-left-color: rgb(230, 126, 34); margin: 5px; padding-left: 10px; border-left-width: thin; border-left-style: solid;"><span
style="font-family:Arial;font-size: 16px">I read that
thread a few minutes ago and Lee is making interesting
comments, some I agree with but I think that some others
are simply wrong. For those who want to read it, it’s
here: </span><a style="font-family:Arial;font-size: 16px"
href="https://groups.io/g/CC-User/topic/bogus_dx_spot_attacks_on/112020247"
target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">https://groups.io/g/CC-User/topic/bogus_dx_spot_attacks_on/112020247</a><br>
<span style="font-family:Arial;font-size: 16px">However, he
raises a very important point, one which Dirk has also
touched on (and that I’ve mentioned a couple of times)
regarding AR Clusters.</span><br>
<span
style="color:#333333;font-family:Arial;font-size: 16px">"Other
types of software such as AR Cluster simply pass
everything they get. Since AR Cluster doesn't give IP
addresses with their spots it makes it difficult to
determine whether these spots are bogus or not. A simple
solution that is used by some sysops it to drop all AR
Cluster originated spots!"</span><br>
<span
style="color:#333333;font-family:Arial;font-size: 16px">And:</span><br>
<span
style="color:#333333;font-family:Arial;font-size: 16px">"I
am now blocking all spots without IP addresses. This
includes all spots from AR Clusters etc."</span><br>
<span
style="color:#333333;font-family:Arial;font-size: 16px">It’s
been proven and demonstrated that AR Cluster nodes are a
weak spot on the network and as the creator is SK, no
further development will happen. For the good of the
network, we need to be removing links to AR Cluster nodes.</span><br>
<span
style="color:#333333;font-family:Arial;font-size: 16px">Hopefully
Jim will be updating his dxcluster telnet list very soon
which will give an idea of how many AR Cluster nodes are
still active but the sooner these are all isolated or the
owner changes them to something else, either CC Cluster or
DXSpider, the better for everyone.</span><br>
<span
style="color:#333333;font-family:Arial;font-size: 16px">73
Keith.</span><br>
On 1 Apr 2025 at 18:19 +0100, Michael Carper, Ph.D. via
Dxspider-support <<a
href="https://mailto:dxspider-support@tobit.co.uk"
target="_blank" moz-do-not-send="true">dxspider-support@tobit.co.uk</a>>,
wrote:<br>
<blockquote
style="border-left-color: rgb(52, 152, 219); margin: 5px; padding-left: 10px; border-left-width: thin; border-left-style: solid;"><span
style="font-family:arial, helvetica, sans-serif">On a
related note, did anyone see this?</span><br>
<span style="font-family:arial, helvetica, sans-serif">Mike,
WA9PIE</span><br>
<span style="font-family:arial, helvetica, sans-serif">===========</span><br>
<span style="font-family:Arial, Helvetica, sans-serif">From: </span><a
style="font-family:Arial, Helvetica, sans-serif"
href="https://mailto:CC-User@groups.io" target="_blank"
moz-do-not-send="true">CC-User@groups.io</a><span
style="font-family:Arial, Helvetica, sans-serif"> [mailto:</span><a
style="font-family:Arial, Helvetica, sans-serif"
href="https://mailto:CC-User@groups.io" target="_blank"
moz-do-not-send="true">CC-User@groups.io</a><span
style="font-family:Arial, Helvetica, sans-serif">] On
Behalf Of Lee Sawkins via </span><a
style="font-family:Arial, Helvetica, sans-serif"
href="http://groups.io/" target="_blank"
moz-do-not-send="true">groups.io</a><span
style="font-family:Arial, Helvetica, sans-serif">Sent:
Tuesday, April 01, 2025 10:25 AM</span><span
style="font-family:Arial, Helvetica, sans-serif">To: </span><a
style="font-family:Arial, Helvetica, sans-serif"
href="https://mailto:CC-User@groups.io" target="_blank"
moz-do-not-send="true">CC-User@groups.io</a><span
style="font-family:Arial, Helvetica, sans-serif">Subject:
Re: [CC-User] Bogus DX Spot Attacks on Clusters</span><br>
<span style="font-family:Arial, Helvetica, sans-serif">What
happened this weekend was that tens of thousands of
bogus spots were entered into the cluster system. These
spots were all for SSB. Since there are no SSB
skimmers available yet, all of these spots appeared to
be manually entered, but in fact they were generated by
a computer.</span><br>
<span style="font-family:Arial, Helvetica, sans-serif">Normally
the human entered spots never are more than 60 per
minute. During the weekend spots that were bogus were
entered at many thousands per minute. These spots were
targeting specific active calls. These spots were
giving different frequencies on all contest bands for
each bogus spot. These spots had same DX call and a
different spotter call and different originating cluster
call. This caused many nodes to get bogged down trying
to process all this data. Some crashed. Others got
hopelessly behind and continued sending data to my
cluster which dropped the spots because they were too
old. Millions of spots were being dropped.</span><br>
<span style="font-family:Arial, Helvetica, sans-serif">My
cluster limits the number of spots to 60 per
minute. This limited bogus spots but also good spots in
each minute. When bogus spots stopped, then all the new
good ones got through.</span><br>
<span style="font-family:Arial, Helvetica, sans-serif">Lee
VE7CC</span><br>
_______________________________________________<br>
Dxspider-support mailing list<br>
<a href="https://mailto:Dxspider-support@tobit.co.uk"
target="_blank" moz-do-not-send="true">Dxspider-support@tobit.co.uk</a><a
href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support"
target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a></blockquote>
_______________________________________________<br>
Dxspider-support mailing list<br>
<a href="https://mailto:Dxspider-support@tobit.co.uk"
target="_blank" moz-do-not-send="true">Dxspider-support@tobit.co.uk</a><a
href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support"
target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a></blockquote>
_______________________________________________<br>
Dxspider-support mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:Dxspider-support@tobit.co.uk">Dxspider-support@tobit.co.uk</a><br>
<a class="moz-txt-link-freetext" href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a></blockquote>
</div>
<div name="messageReplySection">
<div dir="ltr" class="gmail_attr">On Tue, Apr 1, 2025 at 8:45 AM
Kin via Dxspider-support <<a
href="mailto:dxspider-support@tobit.co.uk" target="_blank"
moz-do-not-send="true" class="moz-txt-link-freetext">dxspider-support@tobit.co.uk</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote"
style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div lang="ES" xml:lang="ES">
<div>
<p class="MsoNormal"><span><span
style="font-family:Calibri,sans-serif">Absolutely</span></span>
<span style="font-family:Calibri,sans-serif"><span>brilliant</span></span>
<span
style="font-family:"Segoe UI Emoji",sans-serif">🤣🤣🤣</span></p>
<p class="MsoNormal"><span
style="font-family:"Segoe UI Emoji",sans-serif"> </span></p>
<p class="MsoNormal"><span
style="font-family:"Segoe UI Emoji",sans-serif">Kin EA3CV</span><span
style="font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal"><span
style="font-family:Calibri,sans-serif"> </span></p>
<div>
<div
style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span
style="font-size:11pt;font-family:Calibri,sans-serif">De:</span></b> <span
style="font-size:11pt;font-family:Calibri,sans-serif">Dxspider-support
<<a
href="mailto:dxspider-support-bounces@tobit.co.uk" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">dxspider-support-bounces@tobit.co.uk</a>>
<b>En nombre de</b> Danilo Brelih via
Dxspider-support<br>
<b>Enviado el:</b> lunes, 31 de marzo de 2025
22:47<br>
<b>Para:</b> Keith, G6NHU via Dxspider-support
<<a
href="mailto:dxspider-support@tobit.co.uk"
target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">dxspider-support@tobit.co.uk</a>><br>
<b>CC:</b> Danilo Brelih <<a
href="mailto:s50u@s50e.si" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">s50u@s50e.si</a>><br>
<b>Asunto:</b> Re: [Dxspider-support] Weekend
data</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p>…<span style="font-family:Calibri,sans-serif"></span></p>
<p><span>This</span> <span>is</span> Linux <span>land</span>.<br>
In silent nights you can hear the Windows machines
rebooting.<br>
<a href="https://s50clx.infrax.si" target="_blank"
moz-do-not-send="true" class="moz-txt-link-freetext">https://s50clx.infrax.si</a></p>
<p>GL Dan</p>
</div>
</div>
_______________________________________________<br>
Dxspider-support mailing list<br>
<a href="mailto:Dxspider-support@tobit.co.uk"
target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">Dxspider-support@tobit.co.uk</a><br>
<a
href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support"
rel="noreferrer" target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
</div>
</blockquote>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre wrap="" class="moz-quote-pre">_______________________________________________
Dxspider-support mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Dxspider-support@tobit.co.uk">Dxspider-support@tobit.co.uk</a>
<a class="moz-txt-link-freetext" href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a>
</pre>
</blockquote>
</body>
</html>