[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Many IANA UPnP broadcasts... ?



Saturday, January 08 18:28:24
Hello,
Since 4 days my pf logs are filled with thousands of lines generated by
blocked broadcasts from IANA ip4 ranges. At least I think they are
broadcasts from IANA. The source port continuously shifts one up but
the destination port stays the same `1900', all packets with a ttl of 1. 
I honestly don't know why they are broadcasting these to me.
Port 1900 is registerd for UPnP enabled devices which will be opening and
listening on UDP port 1900 and TCP port 5000.
To be sure I wasn't the one trying to initiate UPnP connections I blocked
and logged all out-in traffic from/to port 5000 but nothing show'd up.
Below I pasted some entry's from my pf log, would be great of someone
could elaborate on what to do next.
Jan 08 18:18:13.676156 rule 0/0(match): block in on
xl1: 169.254.104.207.1614 > 239.255.255.250.1900:  udp 342 [ttl 1]
Jan 08 18:18:13.676526 rule 0/0(match): block in on
xl1: 169.254.104.207.1614 > 239.255.255.250.1900:  udp 342 [ttl 1]
Jan 08 18:18:13.677351 rule 0/0(match): block in on
xl1: 169.254.104.207.1615 > 239.255.255.250.1900:  udp 359 [ttl 1]
Jan 08 18:18:13.677736 rule 0/0(match): block in on
xl1: 169.254.104.207.1615 > 239.255.255.250.1900:  udp 359 [ttl 1]
Jan 08 18:18:13.678562 rule 0/0(match): block in on
xl1: 169.254.104.207.1616 > 239.255.255.250.1900:  udp 361 [ttl 1]
Jan 08 18:18:13.678948 rule 0/0(match): block in on
xl1: 169.254.104.207.1616 > 239.255.255.250.1900:  udp 361 [ttl 1]
Jan 08 18:18:13.679757 rule 0/0(match): block in on
xl1: 169.254.104.207.1617 > 239.255.255.250.1900:  udp 351 [ttl 1]
Jan 08 18:18:13.680143 rule 0/0(match): block in on
xl1: 169.254.104.207.1617 > 239.255.255.250.1900:  udp 351 [ttl 1]
Jan 08 18:18:13.680952 rule 0/0(match): block in on
xl1: 169.254.104.207.1618 > 239.255.255.250.1900:  udp 351 [ttl 1]
Jan 08 18:18:13.681330 rule 0/0(match): block in on
xl1: 169.254.104.207.1618 > 239.255.255.250.1900:  udp 351 [ttl 1]
Thankx... J.