Hallo,
seit einiger Zeit sehe ich in den Router-Logs meiner DSL-EasyBox ständig Warnungen vor UDP Loops. Was hat es damit auf sich? Handelt es sich um gezielte Angriffe gegen meinen DSL-Anschluss? Wie kommen die Angreifer an meine IP? DynDNS-Dienste sind nicht vorhanden...
Auszug aus dem Router-Log:
09/15/2013 23:38:33 192.168.2.103 login success
09/15/2013 23:35:48 192.168.2.103 login success
09/15/2013 23:35:19 **UDP Loop** 89.248.162.242, 47544->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:35:11 **UDP Loop** 94.102.49.89, 39454->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:35:08 **UDP Loop** 94.102.49.30, 49186->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:35:04 **UDP Loop** 80.82.65.9, 54378->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:35:03 **UDP Loop** 89.248.168.210, 42863->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:35:00 **UDP Loop** 94.102.49.134, 41518->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:51 **UDP Loop** 89.248.160.155, 35821->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:49 **UDP Loop** 94.102.56.166, 52846->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:49 **UDP Loop** 80.82.70.98, 56783->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:49 **UDP Loop** 94.102.52.245, 32944->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:47 **UDP Loop** 80.82.64.21, 53138->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:46 **UDP Loop** 89.248.160.146, 40097->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:45 **UDP Loop** 94.102.49.26, 57562->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:35 **UDP Loop** 89.248.168.45, 39855->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:25 **UDP Loop** 142.0.45.40, 40100->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:34:18 **UDP Loop** 142.0.45.36, 42630->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 23:21:47 sending ACK to 192.168.2.103
09/15/2013 22:10:38 User from 192.168.2.103 timed out
09/15/2013 21:55:54 Wireless 08:37:3D:CF:BA:75 released
09/15/2013 21:10:02 192.168.2.103 login success
09/15/2013 20:40:39 sending ACK to 192.168.2.103
09/15/2013 20:36:35 sending ACK to 192.168.2.102
09/15/2013 18:06:47 sending ACK to 192.168.2.107
09/15/2013 17:41:04 NTP Date/Time updated.
09/15/2013 17:40:17 Get system time from NTP server:193.175.73.151.
09/15/2013 16:57:27 Wireless 48:5D:60:B3:3E:FE released
09/15/2013 16:51:38 sending ACK to 192.168.2.106
09/15/2013 16:51:38 sending ACK to 192.168.2.106
09/15/2013 16:42:16 **UDP Loop** 94.102.52.241, 43806->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 16:30:34 sending ACK to 192.168.2.106
09/15/2013 16:30:29 sending ACK to 192.168.2.106
09/15/2013 16:29:09 sending ACK to 192.168.2.106
09/15/2013 16:07:53 sending ACK to 192.168.2.101
09/15/2013 16:07:53 sending OFFER to 192.168.2.101
09/15/2013 16:05:45 sending ACK to 192.168.2.104
09/15/2013 15:16:27 Wireless 08:37:3D:75:89:68 released
09/15/2013 15:05:27 Wireless 98:FE:94:41:81:32 released
09/15/2013 15:04:38 sending ACK to 192.168.2.103
09/15/2013 12:05:21 sending ACK to 192.168.2.107
09/15/2013 07:24:07 **UDP Loop** 80.82.64.177, 47194->> 88.65.XX.XXX, 19 (from PPPoE1 Inbound)
09/15/2013 05:51:16 sending ACK to 192.168.2.104
09/15/2013 05:45:42 sending ACK to 192.168.2.103
09/15/2013 05:45:03 sending ACK to 192.168.2.108
09/15/2013 05:45:02 sending OFFER to 192.168.2.108
09/15/2013 05:40:26 NTP Date/Time updated.
01/14/2013 00:00:39 Get system time from NTP server:129.70.132.37.
01/14/2013 00:00:39 Can't find NTP time.
01/14/2013 00:00:30 Get system time from NTP server:91.64.231.216.
01/14/2013 00:00:23 If(PPPoE1) PPP connection ok !
01/14/2013 00:00:22 If(PPPoE1) get secondary DNS IP:195.50.140.114
01/14/2013 00:00:22 If(PPPoE1) get primary DNS IP:195.50.140.182
01/14/2013 00:00:22 If(PPPoE1) get IP:88.65.XX.XXX
01/14/2013 00:00:22 If(PPPoE1) start PPP
01/14/2013 00:00:22 If(PPPoE1) receive PADS
01/14/2013 00:00:22 If(PPPoE1) send PADR
01/14/2013 00:00:22 If(PPPoE1) receive PADO
01/14/2013 00:00:22 If(PPPoE1) send PADI
01/14/2013 00:00:21 ADSL Media Up !
01/14/2013 00:00:19 sending ACK to 192.168.2.102
01/14/2013 00:00:19 sending OFFER to 192.168.2.102
01/14/2013 00:00:18 sending ACK to 192.168.2.102
01/14/2013 00:00:15 sending ACK to 192.168.2.102
01/14/2013 00:00:12 sending ACK to 192.168.2.108
01/14/2013 00:00:03 sending ACK to 192.168.2.100
01/14/2013 00:00:03 sending ACK to 192.168.2.100
01/14/2013 00:00:00 sending OFFER to 192.168.2.100
01/14/2013 00:00:00 sending ACK to 192.168.2.100
01/14/2013 00:00:00 sending ACK to 192.168.2.100
01/14/2013 00:00:00 sending ACK to 192.168.2.100