Old 22nd October 2012, 15:45   #1
drock
Junior Member
 
Join Date: May 2009
Posts: 19
NSPlayer/12.0.7601.17514 WMFSDK/12.0 Real or Botnet?

Hi Guys,

I have not been paying close attention to my shoutcast listener stats for the last few months and today I found about 290 conncurent listeners when I usualy only see around 100.

At first I thought someone must be messing around, but I dont see any duplicate IPs.

The only thing that I can see which is unusual is a lot of connections from user agent "NSPlayer/12.0.7601.17514 WMFSDK/12.0" or something very similar.

Some of the connections have a long listen time, put a lot of them do appear to be short like 0-10 seconds.

here is a log snippit below.

Hoping to try and figure out if this is legitimate users or a botnet!

2012-10-22 11:36:02 I msg:[DST 188.173.140.121:50564 sid=4] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:02 E msg:[DST 95.49.187.6:49652 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:02 I msg:[DST 95.49.187.6:49652 sid=1] SHOUTcast 1 client connection closed (11 seconds) [Bytes: 528767] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:02 E msg:[DST 188.173.140.121:50564 sid=4] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:02 I msg:[DST 188.173.140.121:50564 sid=4] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 39420] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:02 I msg:[DST 188.173.140.121:50565 sid=4] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:04 E msg:[DST 93.75.154.58:50552 sid=9] Timeout waiting to send data (1350920164 1350920134[30] )
2012-10-22 11:36:04 I msg:[DST 93.75.154.58:50552 sid=9] SHOUTcast 1 client connection closed (46 seconds) [Bytes: 631410] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:05 E msg:[DST 94.153.81.249:60791 sid=2] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60791 sid=2] SHOUTcast 1 client connection closed (6 seconds) [Bytes: 304478] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60793 sid=11] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514
2012-10-22 11:36:05 E msg:[DST 94.153.81.249:60793 sid=11] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60793 sid=11] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 35040] Agent: `NSPlayer/12.0.7601.17514'
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60794 sid=11] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:05 E msg:[DST 177.64.43.223:53003 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 177.64.43.223:53003 sid=1] SHOUTcast 1 client connection closed (2965 seconds) [Bytes: 71310477] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:05 E msg:[DST 94.153.81.249:60794 sid=11] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:05 I msg:[DST 94.153.81.249:60794 sid=11] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 45260] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:06 I msg:[DST 94.153.81.249:60795 sid=11] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:06 I msg:[DST 64.12.243.206:14919 sid=10] SHOUTcast 1 client connection accepted. SHOUTcast Metadata Puller
2012-10-22 11:36:06 E msg:[DST 64.12.243.206:14919 sid=10] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:06 I msg:[DST 64.12.243.206:14919 sid=10] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 185750] Agent: `SHOUTcast Metadata Puller'
2012-10-22 11:36:08 E msg:[DST 83.27.55.215:1787 sid=4] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:08 I msg:[DST 83.27.55.215:1787 sid=4] SHOUTcast 1 client connection closed (14 seconds) [Bytes: 575904] Agent: `NSPlayer/9.0.0.3250 WMFSDK/9.0'
2012-10-22 11:36:09 I msg:[DST 78.61.243.104:55404 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51968 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.9200.16384
2012-10-22 11:36:09 E msg:[DST 78.61.243.104:55404 sid=9] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:09 I msg:[DST 78.61.243.104:55404 sid=9] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 39420] Agent: `NSPlayer/12.0.7601.17514'
2012-10-22 11:36:09 E msg:[DST 31.14.26.157:51968 sid=9] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51968 sid=9] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 34560] Agent: `NSPlayer/12.0.9200.16384'
2012-10-22 11:36:09 I msg:[DST 78.61.243.104:55405 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51969 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.9200.16384 WMFSDK/12.0
2012-10-22 11:36:09 E msg:[DST 31.14.26.157:51969 sid=9] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:09 I msg:[DST 31.14.26.157:51969 sid=9] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 79200] Agent: `NSPlayer/12.0.9200.16384 WMFSDK/12.0'
2012-10-22 11:36:10 E msg:[DST 62.45.148.176:51817 sid=1] Timeout waiting to send data (1350920170 1350920140[30] )
2012-10-22 11:36:10 I msg:[DST 62.45.148.176:51817 sid=1] SHOUTcast 1 client connection closed (332 seconds) [Bytes: 7505148] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:10 E msg:[DST 78.61.243.104:55405 sid=9] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:10 I msg:[DST 78.61.243.104:55405 sid=9] SHOUTcast 1 client connection closed (1 seconds) [Bytes: 39420] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:10 I msg:[DST 31.14.26.157:51970 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.9200.16384 WMFSDK/12.0
2012-10-22 11:36:10 I msg:[DST 78.61.243.104:55406 sid=9] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7601.17514 WMFSDK/12.0
2012-10-22 11:36:10 E msg:[DST 190.42.147.142:50118 sid=10] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:10 I msg:[DST 190.42.147.142:50118 sid=10] SHOUTcast 1 client connection closed (98 seconds) [Bytes: 2608728] Agent: `SA-MP/0.3'
2012-10-22 11:36:11 E msg:[DST 188.173.140.121:50565 sid=4] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:11 I msg:[DST 188.173.140.121:50565 sid=4] SHOUTcast 1 client connection closed (9 seconds) [Bytes: 455054] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:12 I msg:[DST 213.87.130.37:47509 sid=2] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385
2012-10-22 11:36:12 I msg:[DST 216.82.44.85:38192 sid=1] SHOUTcast 1 client connection accepted. XML Getter (Mozilla Compatible)
2012-10-22 11:36:12 E msg:[DST 216.82.44.85:38192 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:12 I msg:[DST 216.82.44.85:38192 sid=1] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 17376] Agent: `XML Getter (Mozilla Compatible)'
2012-10-22 11:36:12 E msg:[DST 213.87.130.37:47509 sid=2] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:12 I msg:[DST 213.87.130.37:47509 sid=2] SHOUTcast 1 client connection closed (0 seconds) [Bytes: 19880] Agent: `NSPlayer/12.0.7600.16385'
2012-10-22 11:36:13 E msg:[DST 91.209.233.194:51331 sid=1] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:13 I msg:[DST 91.209.233.194:51331 sid=1] SHOUTcast 1 client connection closed (36 seconds) [Bytes: 1105749] Agent: `NSPlayer/12.0.7601.17514 WMFSDK/12.0'
2012-10-22 11:36:13 I msg:[DST 213.87.130.37:3656 sid=2] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:14 E msg:[DST 213.87.130.37:3656 sid=2] Socket error while waiting to send data. err=Connection reset by peer(104)
2012-10-22 11:36:14 I msg:[DST 213.87.130.37:3656 sid=2] SHOUTcast 1 client connection closed (1 seconds) [Bytes: 29820] Agent: `NSPlayer/12.0.7600.16385 WMFSDK/12.0'
2012-10-22 11:36:14 I msg:[DST 213.87.130.37:53087 sid=2] SHOUTcast 1 client connection accepted. NSPlayer/12.0.7600.16385 WMFSDK/12.0
2012-10-22 11:36:15 I msg:[DST 190.42.147.142:50120 sid=10] SHOUTcast 1 client connection accepted. SA-MP/0.3
2012-10-22 11:36:16 E msg:[DST 109.122.0.82:3963 sid=1] Socket error while waiting to send data. err=Broken pipe(32)
2012-10-22 11:36:16 I msg:[DST 109.122.0.82:3963 sid=1] SHOUTcast 1 client connection closed (101 seconds) [Bytes: 2665187] Agent: `NSPlayer/11.0.5721.5275 WMFSDK/11.0'
2012-10-22 11:36:17 I msg:[YP2] Connecting to yp.shoutcast.com
drock is offline   Reply With Quote
Old 22nd October 2012, 17:14   #2
DrO
 
Join Date: Sep 2003
Posts: 27,873
i'd probably say it's legit as it looks like what i'd expect to see from the WMP-based connection. other than looking at where the connections are coming from, is up to you really if you're happy with them or not (as it could just be a batch of new legit listeners - the horror of it ).

-daz
DrO is offline   Reply With Quote
Old 22nd October 2012, 17:19   #3
drock
Junior Member
 
Join Date: May 2009
Posts: 19
Interesting. I will keep looking into it. Thank you for the quick reply!

drock is offline   Reply With Quote
Old 22nd November 2012, 16:08   #4
vittoriusly
Junior Member
 
Join Date: Nov 2012
Posts: 1
I got a Windows Phone 8.
For debugging shoutcast streaming of a customer of mine I intercepted the traffic between the phone and the server.
The user-agent i saw was
NSPlayer/12.00.9200.16437 WMFSDK/12.00.9200.16437
vittoriusly is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Shoutcast > Shoutcast Technical Support

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump