[aprssig] Is FINDU.COM Abandoned??

Steve Dimse steve at dimse.com
Thu Dec 5 11:11:07 EST 2024


findU is under some kind of DDOS attack for the last three days. It is receiving dozens of hits a second from many different IPs. I'm wrapping up my summer as an astronomy ranger at Grand Canyon and have very little time to spare, so I turned off the web access, hoping they would go away, but they haven't. As soon as I turn it on the server loads up with 200 requests (the limit I have on Apache).

I took a little timne this AM to look closely. The offending requests are to near.cgi and request a lat-lon near list. Some IPs request a lot, some only appear occasionally, but the lat - long appear random (e.g. as many for 60-80 lat as the much more populated 30-50).

I tried to have near.cgi reject lat/long but the overhead of creating a process for each request still bogged down the server, so I just killed near.cgi, and the server is keeping up so far. I'll watch the access list to see if the ddos goes away and I can reenable near.

If this is a new feature for someone's program, please own up and stop it. If this is a deliberate attempt to drive findU off the net congrats, you are only one step away. If the load shifts to another cgi I will have no option but to turn off web access again, at least until January but maybe forever. I'm too old for this crap.

Steve K4HG

> On Dec 5, 2024, at 5:58 AM, joe at dellabarba.com wrote:
> 
> FINDU.COM is down now. Is it gone for good?
> Joe
> N3HGB
> _______________________________________________
> aprssig mailing list
> aprssig at lists.tapr.org
> http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org





More information about the aprssig mailing list