UDP Flood?

[Syzygy]

hm, aufgrund seltsamer verhaltensweisen hab ich grad mal mein routerprotokoll gechecked und da folgendes gefunden:

06/16/2005 15:34:02 **UDP flood** 209.202.139.17, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:34:00 **UDP flood** 64.37.216.42, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:57 **UDP flood** 209.143.227.69, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:56 **UDP flood** 64.14.244.160, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:54 **UDP flood** 209.202.167.44, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:50 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:33:50 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:33:49 **UDP flood** 216.35.190.29, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:48 **UDP flood** 209.202.167.191, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:46 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:33:46 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:33:44 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:33:44 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:33:43 **UDP flood** 216.34.100.22, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:43 **UDP flood** 209.202.179.222, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:42 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:33:42 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:33:39 **UDP flood** 216.177.71.102, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:05 **UDP flood** 216.33.92.9, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:04 **UDP flood** 172.178.18.33, 8090->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:04 **UDP flood** 216.34.208.120, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:03 **UDP flood** 209.202.162.37, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:01 **UDP flood** 216.35.208.146, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:33:00 **UDP flood** 64.37.212.215, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:56 **UDP flood** 196.204.244.36, 7765->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:56 **UDP flood** 61.152.158.151, 44843->> 192.168.2.3, 1027 (from PPPOE Inbound)

06/16/2005 15:32:52 **UDP flood** 66.119.47.43, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:52 **UDP flood** 209.67.147.74, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:50 **UDP flood** 216.34.250.177, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:50 **UDP flood** 216.33.92.182, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:39 **UDP flood** 209.202.139.95, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:38 **UDP flood** 64.37.239.104, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:32:37 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:32:37 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:32:37 **UDP flood** 216.182.208.66, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:59 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:31:57 **UDP flood** 216.33.77.26, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:56 **UDP flood** 216.177.71.102, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:56 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:31:56 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:31:56 **UDP flood** 64.28.69.232, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:55 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:31:55 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:31:53 **UDP flood** 64.15.244.58, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:53 **UDP flood** 216.34.184.54, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:52 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:31:52 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:31:51 **UDP flood** 216.34.184.54, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:50 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:31:50 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:31:50 **UDP flood** 209.67.240.245, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:49 **UDP flood** 84.240.51.184, 10469->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:48 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:31:48 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:31:45 **UDP flood** 64.37.215.181, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:40 **UDP flood** 128.238.35.35, 9998->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:40 **UDP flood** 216.35.69.138, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:40 **UDP flood** 209.202.175.139, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:39 **UDP flood** 64.70.58.27, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:35 **UDP flood** 64.37.200.140, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:34 **UDP flood** 218.186.197.104, 34567->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:31 **UDP flood** 216.35.190.120, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:20 **UDP flood** 64.14.65.40, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:17 **UDP flood** 64.28.69.151, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:31:17 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:31:16 **UDP flood** 200.116.143.152, 3045->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:30:38 **UDP flood** 216.35.181.161, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:30:38 **UDP flood** 64.210.229.184, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:30:28 **UDP flood** 209.202.142.90, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:30:27 **UDP flood** 64.14.244.160, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:30:27 **UDP flood** 216.35.69.70, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:30:25 **UDP flood** 216.69.229.207, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:47 **UDP flood** 64.210.229.184, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:46 **UDP flood** 216.69.229.163, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:45 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:29:45 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:29:43 **UDP flood** 216.34.250.204, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:40 **UDP flood** 209.202.172.46, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:40 **UDP flood** 216.69.229.146, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:36 **UDP flood** 216.33.74.51, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:32 **UDP flood** 82.140.57.241, 32768->> 62.72.64.237, 53 (from PPPOE Outbound)

06/16/2005 15:29:32 **UDP flood** 82.140.57.241, 32768->> 62.72.64.241, 53 (from PPPOE Outbound)

06/16/2005 15:29:32 **UDP flood** 209.202.179.12, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)

06/16/2005 15:29:30 **UDP flood** 209.202.139.190, 4672->> 192.168.2.3, 5802 (from PPPOE Inbound)


-------------------------
rein instinktiv würde ich das als angriff werten, ist allerdings bis auf ziemlich laggende internetverbindung nix weiter passiert. sollte ich sonst noch irgendwas überprüfen?

windows updates aktuellster stand.
antivir aktuellster stand -> nix
adaware aktuellster stand -> nix
spybot aktuellster stand -> nix
spywareblaster all protection enabled.

 

[Gast]

emule-user?

 

[Syzygy]

gelegentlich schon, aber war seit tagen nicht an. an inet-anwendungen lief eigentlich nur miranda und firefox (bw-forum -_-)

einige der ports die da gefloodet werden sind aber eindeutig die emule-standardports (4672)... hmm, reiner zufall dass ich beim einwählen die IP von einem bekommen hab der kurz vorher off ist und sein mule anhatte? kam kurz nachdem ich online ging der flood -_-

 

[[For]Hood2]

Original geschrieben von Syzygy
gelegentlich schon, aber war seit tagen nicht an. an inet-anwendungen lief eigentlich nur miranda und firefox (bw-forum -_-)

einige der ports die da gefloodet werden sind aber eindeutig die emule-standardports (4672)... hmm, reiner zufall dass ich beim einwählen die IP von einem bekommen hab der kurz vorher off ist und sein mule anhatte? kam kurz nachdem ich online ging der flood -_-

Bingo

 

[Gast]

denk ich auch.