Unusual cardano-node log entries

Staking & Delegation Stake Pool Security
1

Hello everybody, I’m noticing some unusual log entries on the BP (running 1.29.0). What I’m concerned about are the usernames after the ScriptHash like … Entheos244897, SkaterBoy20, etc.

Does this like some sort of brute force attack?

Can anyone share some knowledge on what this is?

Sep 22 16:55:30 block-producer bash[2944558]: [block-pr:cardano.node.Mempool:Info:175] [2021-09-22 20:55:30.74 UTC] fromList [("tx",Object (fromList [("txid",String "txid: TxId {_unTxId = SafeHash \"2e893d295e73695b2b9bb25146183b3ee55a6a9ceacbd956b8501cf332c2f64d\"}")])),("mempoolSize",Object (fromList [("bytes",Number 21792.0),("numTxs",Number 41.0)])),("kind",String "TraceMempoolRejectedTx"),("err",Object (fromList [("badInputs",Array [String "f9462d5f782da881ccd2b5a52261b2d1edd91657b8d36b768fb65e1995305334#1"]),("consumed",Object (fromList [("lovelace",Number 0.0),("policies",Object (fromList []))])),("error",String "This transaction consumed Value 0 (fromList []) but produced Value 1578642847 (fromList [(PolicyID {policyID = ScriptHash \"16a2a21a7ed8a67c5254eda1f8d6041021b53f49ef53e18e3e572546\"},fromList [(\"Entheos236574\",1),(\"Entheos244897\",1),(\"Entheos245296\",1),(\"Entheos245912\",1),(\"Entheos246180\",1),(\"Entheos246356\",1),(\"Entheos247081\",1),(\"Entheos247092\",1),(\"Entheos247354\",1),(\"Entheos247883\",1),(\"Entheos248233\",1),(\"Entheos248673\",1),(\"Entheos249011\",1),(\"Entheos249574\",1)]),(PolicyID {policyID = ScriptHash \"6cfbfedd8c8ea23d264f5ae3ef039217100c210bb66de8711f21c903\"},fromList [(\"CNFT\",10000)]),(PolicyID {policyID = ScriptHash \"7a5a5c3757d33c2b2ff0b09405676e61f93d28b5d12805dd3320e31f\"},fromList [(\"CryptoDino00878\",1),(\"CryptoDino01826\",1),(\"CryptoDino05417\",1)]),(PolicyID {policyID = ScriptHash \"b7ef0cfb14f588740d02ce8a53879ff96ab03c7b21ec1c459ac2bdda\"},fromList [(\"HashGuardian111\",1),(\"HashGuardian1689\",1),(\"HashGuardian733\",1),(\"HashGuardian9251\",1)]),(PolicyID {policyID = ScriptHash \"d6fa4da48681eac2693a46449e92a2ff161cb8cdcbc152089fd81964\"},fromList [(\"SkaterBoy20\",1)])])"),("kind",String "ValueNotConservedUTxO"),("produced",Object (fromList [("lovelace",Number 1.578642847e9),("policies",Object (fromList [("16a2a21a7ed8a67c5254eda1f8d6041021b53f49ef53e18e3e572546",Object (fromList [("456e7468656f73323336353734",Number 1.0),("456e7468656f73323434383937",Number 1.0),("456e7468656f73323435323936",Number 1.0),("456e7468656f73323435393132",Number 1.0),("456e7468656f73323436313830",Number 1.0),("456e7468656f73323436333536",Number 1.0),("456e7468656f73323437303831",Number 1.0),("456e7468656f73323437303932",Number 1.0),("456e7468656f73323437333534",Number 1.0),("456e7468656f73323437383833",Number 1.0),("456e7468656f73323438323333",Number 1.0),("456e7468656f73323438363733",Number 1.0),("456e7468656f73323439303131",Number 1.0),("456e7468656f73323439353734",Number 1.0)])),("6cfbfedd8c8ea23d264f5ae3ef039217100c210bb66de8711f21c903",Object (fromList [("434e4654",Number 10000.0)])),("7a5a5c3757d33c2b2ff0b09405676e61f93d28b5d12805dd3320e31f",Object (fromList [("43727970746f44696e6f3030383738",Number 1.0),("43727970746f44696e6f3031383236",Number 1.0),("43727970746f44696e6f3035343137",Number 1.0)])),("b7ef0cfb14f588740d02ce8a53879ff96ab03c7b21ec1c459ac2bdda",Object (fromList [("48617368477561726469616e313131",Number 1.0),("48617368477561726469616e31363839",Number 1.0),("48617368477561726469616e373333",Number 1.0),("48617368477561726469616e39323531",Number 1.0)])),("d6fa4da48681eac2693a46449e92a2ff161cb8cdcbc152089fd81964",Object (fromList [("536b61746572426f793230",Number 1.0)]))]))]))]))]

Thanks in advance!
Dimitri

1 Like
2

Everything else but not an attack, perhaps NFT, tokens, smarcontracts, etc

You can check the policy ID on cardanoscan.io

And also a transaction from many

1 Like
3

Thank you, Alexd1985

1 Like
4

Alexd1985, perhaps one more question. I also see the following entries in my BP logs. There were about 20473 entries in the past 24 hours. Should I be concerned?

Sep 22 18:08:22 block-producer bash[3493408]: [block-pr:cardano.node.Mempool:Info:2016] [2021-09-22 22:08:22.55 UTC] fromList [(“tx”,Object (fromList [(“txid”,String “txid: TxId {_unTxId = SafeHash “889fbb51678c249a370e6ad2fe577a9efbb772d9c37696d69f3a0f782e0e34e1”}”)])),(“mempoolSize”,Object (fromList [(“bytes”,Number 21158.0),(“numTxs”,Number 36.0)])),(“kind”,String “TraceMempoolRejectedTx”),(“err”,Object (fromList [(“badInputs”,Array [String “8ded1a29e2779e188d3ab09b7fb9e3639234f813b367e44dad195baa5f5c857d#0”]),(“consumed”,Object (fromList [(“lovelace”,Number 0.0),(“policies”,Object (fromList ))])),(“error”,String "This transaction consumed Value 0 (fromList []) but produced Value 45000000 (fromList )"),(“kind”,String “ValueNotConservedUTxO”),(“produced”,Object (fromList [(“lovelace”,Number 4.5e7),(“policies”,Object (fromList ))]))]))]

5

Nope, all of this are transactions from blockchain

1 Like
6

Interesting … so all BP nodes receive the same errors from different nodes?

7

Do you have a recommended “mainnet-config” file for optimized (trace) logging ?