View Single Post
Old 22nd October 2012, 15:45   #1
drock
Junior Member
 
Join Date: May 2009
Posts: 19
NSPlayer/12.0.7601.17514 WMFSDK/12.0 Real or Botnet?

Hi Guys,

I have not been paying close attention to my shoutcast listener stats for the last few months and today I found about 290 conncurent listeners when I usualy only see around 100.

At first I thought someone must be messing around, but I dont see any duplicate IPs.

The only thing that I can see which is unusual is a lot of connections from user agent "NSPlayer/12.0.7601.17514 WMFSDK/12.0" or something very similar.

Some of the connections have a long listen time, put a lot of them do appear to be short like 0-10 seconds.

here is a log snippit below.

Hoping to try and figure out if this is legitimate users or a botnet!

2012-10-22 11:36:02 I msg:[DST 188.173.140.121:50564 sid=4] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:02 E msg:[DST 95.49.187.6:49652 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:02 I msg:[DST 95.49.187.6:49652 sid=1] SHOUTcast 1 client connection closed (11 seconds) [Bytes: 528767] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:02 E msg:[DST 188.173.140.121:50564 sid=4] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:02 I msg:[DST 188.173.140.121:50564 sid=4] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 39420] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:02 I msg:[DST 188.173.140.121:50565 sid=4] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:04 E msg:[DST 93.75.154.58:50552 sid=9] Timeout waiting to send data (1350920164 1350920134[30] )
2012-10-22 11:36:04 I msg:[DST 93.75.154.58:50552 sid=9] SHOUTcast 1 client connection closed (46 seconds) [Bytes: 631410] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:05 E msg:[DST 94.153.81.249:60791 sid=2] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60791 sid=2] SHOUTcast 1 client connection closed (6 seconds) [Bytes: 304478] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60793 sid=11] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514
2012-10-22 11:36:05 E msg:[DST 94.153.81.249:60793 sid=11] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60793 sid=11] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 35040] Agent: `NSPlayer/12.0.7601.17514'
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60794 sid=11] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:05 E msg:[DST 177.64.43.223:53003 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 177.64.43.223:53003 sid=1] SHOUTcast 1 client connection closed (2965 seconds) [Bytes: 71310477] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:05 E msg:[DST 94.153.81.249:60794 sid=11] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60794 sid=11] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 45260] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:06 I msg:[DST 94.153.81.249:60795 sid=11] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:06 I msg:[DST 64.12.243.206:14919 sid=10] SHOUTcast 1 client connection accepted. SHOUTcast Metadata Puller
2012-10-22 11:36:06 E msg:[DST 64.12.243.206:14919 sid=10] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:06 I msg:[DST 64.12.243.206:14919 sid=10] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 185750] Agent: `SHOUTcast Metadata Puller'
2012-10-22 11:36:08 E msg:[DST 83.27.55.215:1787 sid=4] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:08 I msg:[DST 83.27.55.215:1787 sid=4] SHOUTcast 1 client connection closed (14 seconds) [Bytes: 575904] Agent: `NSPlayer/9.0.0.3250 WMFSDK/9.0'
2012-10-22 11:36:09 I msg:[DST 78.61.243.104:55404 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51968 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.9200.16384
2012-10-22 11:36:09 E msg:[DST 78.61.243.104:55404 sid=9] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:09 I msg:[DST 78.61.243.104:55404 sid=9] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 39420] Agent: `NSPlayer/12.0.7601.17514'
2012-10-22 11:36:09 E msg:[DST 31.14.26.157:51968 sid=9] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51968 sid=9] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 34560] Agent: `NSPlayer/12.0.9200.16384'
2012-10-22 11:36:09 I msg:[DST 78.61.243.104:55405 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51969 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.9200.16384 WMFSDK/12.0
2012-10-22 11:36:09 E msg:[DST 31.14.26.157:51969 sid=9] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51969 sid=9] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 79200] Agent: `NSPlayer/12.0.9200.16384 WMFSDK/12.0'
2012-10-22 11:36:10 E msg:[DST 62.45.148.176:51817 sid=1] Timeout waiting to send data (1350920170 1350920140[30] )
2012-10-22 11:36:10 I msg:[DST 62.45.148.176:51817 sid=1] SHOUTcast 1 client connection closed (332 seconds) [Bytes: 7505148] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:10 E msg:[DST 78.61.243.104:55405 sid=9] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:10 I msg:[DST 78.61.243.104:55405 sid=9] SHOUTcast 1 client connection closed (1 seconds) [Bytes: 39420] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:10 I msg:[DST 31.14.26.157:51970 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.9200.16384 WMFSDK/12.0
2012-10-22 11:36:10 I msg:[DST 78.61.243.104:55406 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:10 E msg:[DST 190.42.147.142:50118 sid=10] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:10 I msg:[DST 190.42.147.142:50118 sid=10] SHOUTcast 1 client connection closed (98 seconds) [Bytes: 2608728] Agent: `SA-MP/0.3'
2012-10-22 11:36:11 E msg:[DST 188.173.140.121:50565 sid=4] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:11 I msg:[DST 188.173.140.121:50565 sid=4] SHOUTcast 1 client connection closed (9 seconds) [Bytes: 455054] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:12 I msg:[DST 213.87.130.37:47509 sid=2] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385
2012-10-22 11:36:12 I msg:[DST 216.82.44.85:38192 sid=1] SHOUTcast 1 client connection accepted. XML Getter (Mozilla Compatible)
2012-10-22 11:36:12 E msg:[DST 216.82.44.85:38192 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:12 I msg:[DST 216.82.44.85:38192 sid=1] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 17376] Agent: `XML Getter (Mozilla Compatible)'
2012-10-22 11:36:12 E msg:[DST 213.87.130.37:47509 sid=2] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:12 I msg:[DST 213.87.130.37:47509 sid=2] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 19880] Agent: `NSPlayer/12.0.7600.16385'
2012-10-22 11:36:13 E msg:[DST 91.209.233.194:51331 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:13 I msg:[DST 91.209.233.194:51331 sid=1] SHOUTcast 1 client connection closed (36 seconds) [Bytes: 1105749] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:13 I msg:[DST 213.87.130.37:3656 sid=2] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:14 E msg:[DST 213.87.130.37:3656 sid=2] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:14 I msg:[DST 213.87.130.37:3656 sid=2] SHOUTcast 1 client connection closed (1 seconds) [Bytes: 29820] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:14 I msg:[DST 213.87.130.37:53087 sid=2] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:15 I msg:[DST 190.42.147.142:50120 sid=10] SHOUTcast 1 client connection accepted. SA-MP/0.3
2012-10-22 11:36:16 E msg:[DST 109.122.0.82:3963 sid=1] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:16 I msg:[DST 109.122.0.82:3963 sid=1] SHOUTcast 1 client connection closed (101 seconds) [Bytes: 2665187] Agent: `NSPlayer/11.0.5721.5275 WMFSDK/11.0'
2012-10-22 11:36:17 I msg:[YP2] Connecting to yp.shoutcast.com
drock is offline   Reply With Quote