jp@ezoom.net is apparently W2XX.
73 de Lee, AA4GA
On Wed, Oct 30, 2024 at 7:09 AM Ed W0YK <ed@w0yk.com> wrote:
> Are you willing to ID yourself?73,Ed W0YK
> -------- Original message --------From: JP <jp@ezoom.net> Date: 10/29/24
> 21:13 (GMT-08:00) To: CQ-CONTEST@contesting.com Subject: Re:
> [CQ-Contest] AA3B Fake Spots Gee I wonder what would have prompted this
> behavior. > On Oct 29, 2024, at 7:43 PM, aa3b.bud@gmail.com wrote:> >
> Here are the forensics on the fake spots sent to the DX Cluster during
> 2024> CQ WW SSB contest by someone using the callsign AA3B. I am sharing
> this> information so that DX Cluster node owners are aware of the attack
> signature> and can hopefully take actions to prevent future occurrences.> >
> > > Period: 10/26/2024 20:34 UTC to 10/27/2024 02:29 UTC> > Duration: 5.9
> hours> > Quantity of fake spots: 969> > Rate of fake spots: 164 spots /
> hour or 2.7 spots / minute> > > > The rate of fake spots indicates they
> were created by an automated system.> The automated system ingested real
> spots, corrupted them, and then sent the> bogus spot to the DX cluster.
> Here are examples of the typical sequence:> > > >
> QRG Call Time> Spotter> > Real: 21347
> P40W 10/26/2024 2050 N8FRJ> > Bogus: 21347
> P4OW 10/26/2024 2050 AA3B> > > > Real: 14290.3
> 8P5A 10/26/2024 2052 DL5JS> > Bogus: 14290.3
> AP5A 10/26/2024 2052 AA3B> > > > The first fake spot
> was of 9N3L which was a busted version of the call I> used during the
> contest - NN3L. This initial spot came from IP address> 101.37.12.43.
> The remaining 968 spots all came from IP address> 31.170.22.127. An
> internet search of these two IP addresses indicates that> they are known to
> the be source of SPAM and brute force attacks.> > > > I have no doubt that
> the attack was orchestrated by the same individual that> harassed me during
> the 2024 WPX CW and WAE CW contests.> > > > 73,> > > > Bud AA3B> > > >
> _______________________________________________> CQ-Contest mailing list>
> CQ-Contest@contesting.com>
> http://lists.contesting.com/mailman/listinfo/cq-contest_______________________________________________CQ-Contest
> mailing listCQ-Contest@contesting.comhttp://
> lists.contesting.com/mailman/listinfo/cq-contest
> _______________________________________________
> CQ-Contest mailing list
> CQ-Contest@contesting.com
> http://lists.contesting.com/mailman/listinfo/cq-contest
>
_______________________________________________
CQ-Contest mailing list
CQ-Contest@contesting.com
http://lists.contesting.com/mailman/listinfo/cq-contest
|