UDP Denial of Service

[ravana]

Hi,

 

I'm having a strange problem. Each time i connect to jaymod 1, my router gets bombarded by random IP address's on Random UDP ports. This caues me lag and then i disconnect. Any Ideas?

 

Ravana

[daredevil]

Can you post:

 

IP address

With what data you are being bombarded with?

 

You can monitor network traffic using Wireshark

[ravana]

# Time Message Source Destination Notes

1 10/13/2011 12:47:07 ports scan UDP 119.176.218.59:4041 192.168.1.1:19337 ATTACK

2 10/13/2011 12:47:06 ports scan UDP 189.120.197.186:32716 192.168.1.1:19380 ATTACK

3 10/13/2011 12:47:06 ports scan UDP 174.140.163.124:51413 192.168.1.1:19344 ATTACK

4 10/13/2011 12:47:06 ports scan UDP 92.136.116.86:61121 192.168.1.1:18226 ATTACK

5 10/13/2011 12:47:06 ports scan UDP 92.55.50.113:35691 192.168.1.1:19381 ATTACK

6 10/13/2011 12:47:06 ports scan UDP 93.87.218.203:28099 192.168.1.1:19376 ATTACK

7 10/13/2011 12:47:06 ports scan UDP 81.198.128.56:11123 192.168.1.1:19377 ATTACK

8 10/13/2011 12:47:06 ports scan UDP 90.21.116.141:55358 192.168.1.1:19375 ATTACK

9 10/13/2011 12:47:06 ports scan UDP 109.121.213.212:25026 192.168.1.1:19373 ATTACK

10 10/13/2011 12:47:06 ports scan UDP 62.205.144.27:19832 192.168.1.1:19372 ATTACK

11 10/13/2011 12:47:06 ports scan UDP 206.75.32.34:43019 192.168.1.1:19370 ATTACK

12 10/13/2011 12:47:06 ports scan UDP 98.224.183.158:60038 192.168.1.1:19371 ATTACK

13 10/13/2011 12:47:06 ports scan UDP 46.71.206.48:10194 192.168.1.1:19369 ATTACK

14 10/13/2011 12:47:06 ports scan UDP 80.184.12.55:32883 192.168.1.1:19365 ATTACK

15 10/13/2011 12:47:06 ports scan UDP 190.213.77.197:22189 192.168.1.1:19358 ATTACK

16 10/13/2011 12:47:06 ports scan UDP 80.2.190.187:61147 192.168.1.1:19368 ATTACK

17 10/13/2011 12:47:06 ports scan UDP 219.70.71.88:45876 192.168.1.1:19360 ATTACK

18 10/13/2011 12:47:06 ports scan UDP 90.37.211.5:27472 192.168.1.1:19364 ATTACK

19 10/13/2011 12:47:06 ports scan UDP 118.100.60.79:21987 192.168.1.1:19351 ATTACK

20 10/13/2011 12:47:06 ports scan UDP 60.246.162.27:18888 192.168.1.1:19352 ATTACK

21 10/13/2011 12:47:06 ports scan UDP 61.60.146.155:46782 192.168.1.1:19355 ATTACK

22 10/13/2011 12:47:06 ports scan UDP 109.93.158.102:19205 192.168.1.1:19362 ATTACK

23 10/13/2011 12:47:06 ports scan UDP 81.243.30.93:10028 192.168.1.1:19363 ATTACK

24 10/13/2011 12:47:06 ports scan UDP 108.87.11.13:42319 192.168.1.1:19357 ATTACK

25 10/13/2011 12:47:06 ports scan UDP 41.251.30.185:19832 192.168.1.1:19359 ATTACK

26 10/13/2011 12:47:06 ports scan UDP 89.142.90.152:50955 192.168.1.1:17068 ATTACK

27 10/13/2011 12:47:06 ports scan UDP 173.53.66.176:14879 192.168.1.1:19353 ATTACK

28 10/13/2011 12:47:06 ports scan UDP 66.177.6.200:57972 192.168.1.1:19354 ATTACK

29 10/13/2011 12:47:06 ports scan UDP 125.109.170.130:4041 192.168.1.1:19335 ATTACK

30 10/13/2011 12:47:06 ports scan UDP 99.18.192.184:15994 192.168.1.1:19348 ATTACK

31 10/13/2011 12:47:06 ports scan UDP 46.50.156.5:24925 192.168.1.1:19349 ATTACK

32 10/13/2011 12:47:06 ports scan UDP 95.26.159.115:42329 192.168.1.1:19350 ATTACK

33 10/13/2011 12:47:06 ports scan UDP 174.140.163.124:51413 192.168.1.1:19344 ATTACK

34 10/13/2011 12:47:06 ports scan UDP 89.114.164.77:16046 192.168.1.1:19347 ATTACK

35 10/13/2011 12:47:06 ports scan UDP 41.196.238.136:22314 192.168.1.1:19341 ATTACK

36 10/13/2011 12:47:06 ports scan UDP 188.32.33.120:46187 192.168.1.1:19346 ATTACK

37 10/13/2011 12:47:06 ports scan UDP 81.30.190.136:28294 192.168.1.1:19343 ATTACK

38 10/13/2011 12:47:06 ports scan UDP 99.228.211.138:64654 192.168.1.1:19342 ATTACK

39 10/13/2011 12:47:06 ports scan UDP 212.77.130.168:35691 192.168.1.1:19336 ATTACK

40 10/13/2011 12:47:06 ports scan UDP 88.189.44.120:62446 192.168.1.1:19339 ATTACK

41 10/13/2011 12:47:06 ports scan UDP 46.118.77.88:19278 192.168.1.1:19334 ATTACK

42 10/13/2011 12:47:06 ports scan UDP 91.215.220.162:5013 192.168.1.1:19333 ATTACK

43 10/13/2011 12:47:06 ports scan UDP 67.241.188.113:50591 192.168.1.1:19332 ATTACK

44 10/13/2011 12:47:06 ports scan UDP 95.92.78.237:6881 192.168.1.1:19330 ATTACK

45 10/13/2011 12:47:06 ports scan UDP 99.42.112.46:6881 192.168.1.1:19329 ATTACK

46 10/13/2011 12:47:06 ports scan UDP 178.124.3.200:10012 192.168.1.1:19328 ATTACK

47 10/13/2011 12:47:06 ports scan UDP 178.59.45.109:56513 192.168.1.1:18795 ATTACK

48 10/13/2011 12:47:05 ports scan UDP 113.53.30.23:14892 192.168.1.1:19322 ATTACK

 

Times are GMT + 1 (Dublin time). Log dump from the broadband router.

[JoeDirt]

Looks like you have a trojan on your computer.