# Gateway is flooded with packets

**URL:** <https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775>\
**Category:** Uncategorized\
**Created:** [March 12, 2019, 9:42am UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775 "2019-03-12T09:42:11Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![erichabg](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/erichabg/32/35697_2.png) [@erichabg](https://www.thethingsnetwork.org/forum/u/erichabg)\
**Post date:** [March 12, 2019, 9:42am UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/1 "2019-03-12T09:42:12Z")

</div>

Hello All!  
Fascinated by the community and the possibilities of lorawan I put a puplic TTN gateway into operation a week ago (Raspi with IMST and outdour antenna). The first days I saw only my own test devices in the gatway traffic logs but since yesterday the gateway is flodded with packets.  
Every 6 seconds there is a packet from the same device id with a network id 0x0b (Network: EveryNet, Region: Russia) with spreding factor of 12 and a bandwidth of 125, coding\_rate “4/5”. The device randomly sends at 686.1 , 686.3 and 686.5 MHz. Payload is 27 bytes and air time about 1650ms. rssi is about -105, and snr about 7.5.  
Does anyone have any idea what kind of device this can be?  
Does the id speak for a russian device? (I have some Russian neighbors)  
What would you do here, after all, it’s far outside the 1% duty cycle limit.

Location is Augsburg, Germany.

Regards  
Erich

---

<div class="post-metadata">

**Author:** ![BoRRoZ](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/borroz/32/44234_2.png) [@BoRRoZ](https://www.thethingsnetwork.org/forum/u/BoRRoZ)\
**Post date:** [March 12, 2019, 9:48am UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/2 "2019-03-12T09:48:57Z")

</div>

No the signal don’t come from your neighbours because SF12 / RSSI -105 / airtime indicates that’s it’s travelling a distance… maybe even 10 km or more.

maybe you can make a screenshot from your TTN console showing such a packet with all metadata

---

<div class="post-metadata">

**Author:** ![erichabg](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/erichabg/32/35697_2.png) [@erichabg](https://www.thethingsnetwork.org/forum/u/erichabg)\
**Post date:** [March 12, 2019, 9:50am UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/3 "2019-03-12T09:50:47Z")

</div>

Here are the data:  
{  
“gw\_id”: “eui-b827ebfffe265f55”,  
“payload”: “QHE2iBeAiTYB+Hwr2SZBMAerXX23P+fDxuC+”,  
“f\_cnt”: 13961,  
“lora”: {  
“spreading\_factor”: 12,  
“bandwidth”: 125,  
“air\_time”: 1646592000  
},  
“coding\_rate”: “4/5”,  
“timestamp”: “2019-03-12T09:40:56.821Z”,  
“rssi”: -98,  
“snr”: 6.8,  
“dev\_addr”: “17883671”,  
“frequency”: 868300000  
}

---

<div class="post-metadata">

**Author:** ![wipes](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/wipes/32/28234_2.png) [@wipes](https://www.thethingsnetwork.org/forum/u/wipes)\
**Post date:** [March 12, 2019, 1:06pm UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/4 "2019-03-12T13:06:53Z")

</div>

> [@erichabg](#):
>
> “Does anyone have any idea what kind of device this can be?  
> Does the id speak for a russian device? ”,

> [@erichabg](#):
>
> “dev\_addr”: “17883671”,

Definitely not a TTN registered device, The Things Network Foundation has a 7-bit device address prefix from the LoRa Alliance. This means that all TTN device addresses will start with 0x26 or 0x27.

The 0x16/0x17 prefix seems to be Russia: EveryNet (0x0b)

---

<div class="post-metadata">

**Author:** ![erichabg](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/erichabg/32/35697_2.png) [@erichabg](https://www.thethingsnetwork.org/forum/u/erichabg)\
**Post date:** [March 12, 2019, 2:16pm UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/5 "2019-03-12T14:16:05Z")

</div>

Looks like the owner of the device is reading this forum! 🤔  
Not a hour after I have wrote this thread the devices stopped sending! 😊  
Weird coincidence…

---

<div class="post-metadata">

**Author:** ![BoRRoZ](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/borroz/32/44234_2.png) [@BoRRoZ](https://www.thethingsnetwork.org/forum/u/BoRRoZ)\
**Post date:** [March 12, 2019, 2:26pm UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/6 "2019-03-12T14:26:58Z")

</div>

that’s nice of him 👍

---

<div class="post-metadata">

**Author:** ![pe1mew](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/pe1mew/32/45049_2.png) [@pe1mew](https://www.thethingsnetwork.org/forum/u/pe1mew)\
**Post date:** [March 13, 2019, 8:24am UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/7 "2019-03-13T08:24:07Z")

</div>

Might have been a short test of some one with a local LoRaWAN server.

---

<div class="post-metadata">

**Author:** ![system](https://www.thethingsnetwork.org/forum/uploads/default/original/3X/6/2/6250ea44fd2b0d6259489e1a92748df681e1f970.png) [@system](https://www.thethingsnetwork.org/forum/u/system)\
**Post date:** [May 12, 2019, 8:24am UTC](https://www.thethingsnetwork.org/forum/t/gateway-is-flooded-with-packets/23775/8 "2019-05-12T08:24:10Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
