Christian Bierre wrote: > > Lloyd Bryant wrote: >> 07-09-13 19:48:00 (WARNING): [weird #2] Node 65.19.143.2:40120 >> (LimeWire/4.12.8) has GUID 91d7e34a81914f8bff7d02e765004800 but used >> d40be3b9cc5c4f78ff72028aa2004700 in Q-Hit (638 bytes) [hops=1, TTL=4] > >> 07-09-13 19:55:50 (WARNING): [weird #1] node 66.160.158.164:9903 >> (LimeWire/4.12.8) advertised 66.160.158.164 but now says Query Hits from >> 24.159.59.140:14800 >> 07-09-13 19:55:50 (WARNING): [weird #2] Node 66.160.158.164:9903 >> (LimeWire/4.12.8) has GUID 576ae3ed09db4febff3900b13f023900 but used >> 0a15e3ede79f4f2bff36008e3502d200 in Q-Hit (685 bytes) [hops=1, TTL=4] > >> This same pattern of errors keeps occurring until it reaches MAX_WEIRD_MSG >> and is disconnected. Then, 3-5 minutes later I get another node connecting, >> from the same address range, which does exactly the same thing. > >> So far, I've got about 18 connections from these two ranges (65.19.143.x and >> 66.160.158.x), with the last digit of the IP and the port number varying. >> So far every one of those weird messages relates to an audio file. >> >> Are these "hostiles.txt" candidates, or am I misunderstanding the errors? > > You're not misunderstanding at all. > > Hurricane Electric has a zero tolerance spam policy. They should be held to > their own standards or just stop lying.
And I've got several more sources doing exactly the same thing: 64.62.210.2 64.62.210.3 64.62.210.4 64.62.210.66 64.62.210.67 64.62.210.68 78.129.136.194 78.129.136.195 78.128.136.196 Tracerouting them shows the 64.62.210.x addresses route via Hurricane Electric (no surprise there), while the 78.129.136.x addresses route via RapidSwitch (which we've already got a couple of "hostiles.txt" entries on). Lloyd B. Lloyd B. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ gtk-gnutella-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/gtk-gnutella-devel
