[aprssig] UNDEFINED?

John Langner WB2OSZ wb2osz at comcast.net
Thu Apr 30 10:49:14 EDT 2020


This looks like a deliberate attack, not an innocent accidental
misconfiguration.

It appears to be scanning thru a large number of T2 servers, around the
world. The location is bouncing all over the place, perhaps to thwart
duplicate removal and fill up the database.


At  http://ontario.aprs2.net:14501/   we find:


187.210.189.241	UNDEFINED	true	gpserver  corget.cn	No filter
set	0d1h0m4.17s	121	2,402	7,676	184,425	21	512
0d0h0m4.249s

2400 packets per hour to the Ontario server alone.  

This might be an attempt at a denial of service attack.






More information about the aprssig mailing list