HFU HF Underground

General Category => General Radio Discussion => Topic started by: ChrisSmolinski on December 20, 2021, 2119 UTC

Title: Online KiwiSDRs Under Attack
Post by: ChrisSmolinski on December 20, 2021, 2119 UTC
Someone seems to be attacking online KiwiSDR receivers, making them restart. As a precaution I have taken all of the KiwiSDRs hosted here offline until further notice.
Title: Re: Online KiwiSDRs Under Attack
Post by: TRI International on December 21, 2021, 0922 UTC
Wow was wondering why they were not working, talking about nothing better to do  >:(
Title: Re: Online KiwiSDRs Under Attack
Post by: CoolAM Radio on December 21, 2021, 0955 UTC
Any chance of finding out IP nr's etc.?

Andre
CoolAMRadio/OHR
Title: Re: Online KiwiSDRs Under Attack
Post by: redhat on December 21, 2021, 1741 UTC
Things have been going downhill lately with regard to the kiwis.  Lately I've seen the wspr daemon running up all the available slots on a few of my favorite sdr's.

+-RH
Title: Re: Online KiwiSDRs Under Attack
Post by: ChrisSmolinski on December 21, 2021, 1920 UTC
They were coming from addresses assigned to Google, presumably some shared hosting / cloud services (aka rent-a-server).

For now they have been blacklisted and the KiwiSDRs here are back online.

I've disabled the s-meter extensions here as there was a certain user in Taiwan who would use them for 12+ hours at a time on all the KiwiSDRs here, monitoring CHU of all things.

I have seen some people sitting on HFDL for extended periods, if that becomes a problem I may need to disable it as well.  I've not noticed much WSRP usage here, fortunately.
Title: Re: Online KiwiSDRs Under Attack
Post by: ChrisSmolinski on December 22, 2021, 1142 UTC
A new KiwSDR update has just been released. If you own a KiwiSDR make sure it is set to auto update:
v1.482 December 22, 2021
Better resistance to abusive connections.

I'll remove the IP address ranges from the blacklist once I see some evidence from other KiwiSDR owners that the update is working  ;D