There are a lot of UDP attacks on the Internet, what the hell is going on!

The complete thing is that it should be a UDP flooding attack.

udp flood attack）

UDP flooding attacks are a type of attack that results in a host-based denial of service attack. UDP is a connectionless protocol, and it doesn't require any programs to establish a connection to transfer data. A UDP flooding attack can occur when an attacker randomly sends UDP packets to the port of the victim system.

When the victim system receives a UDP packet, it determines that the destination port is waiting for the application. When it discovers that there is no waiting application on the port, it generates an ICMP packet with an unreachable destination and sends it to the forged source address. If enough UDP packets are sent to the victim's computer port, the entire system will be brought down.

Prevention against UDP flooding attacks.

Using firewalls to filter unsolicited and harmful data at critical points on the network can effectively mitigate UDP flooding attacks. In addition, the following measures should be taken in the user's network:

Disable or filter monitoring and response services.

Disable or filter other UDP services.

If a user must provide external access to some UDP service, then a mechanism needs to be used to protect that service from abuse.

Monitor users' networks to see which systems are using these services and monitor for signs of abuse.

The amount is not large, and it is normal. It is estimated that the person is looking for a computer in the local area network.

If the number is huge, and your network usage is affected, it means that there is a machine poisoned in the local area network, see that the address sent a huge lot, and it is up to you to reinstall the antivirus after finding it.

I installed a Kaba 2009 and it was no problem. I'm not a webmaster, so I'll just take care of myself.

I opened the firewall of the route and sealed it. Install ARP firewalls on each terminal.

A UDP patch with an optimization master will do the trick.

BT, right? Turn off all your computers and restart your router.

Attack the firewall with an anti-LAN.

It might be useful to change the IP address with an IP wizard.

A bit of a personal suggestion:

1. Successfully defend against attacks from UDP to local port 10665, which means that there is a machine working or scanning your port, it may be caused by poisoning of this machine, you can see if other machines also have this port being struck.

2. Your slow Internet speed may be related to many factors, one or two machines test the same software, compare the speed, because the speed of different addresses is not the same. 2. Swap your machine with other fast machine network cables, retest the same software, and see the results. to determine whether it is a network cable or a machine problem.

3. Change the IP address or network card of your machine to see if the gateway restricts your traffic. 4. Optimize your machine.

Try the next domain defense software.

Wouldn't it be enough to filter out the attacking computer directly? The security protection of the router should be able to detect the IP and MAC of the computer.

For DDoS attack protection, you can freeze the attack IP address to interrupt the attacker's attack.

Generally, if the attack traffic is not very large, it is sufficient to install protection software on the server for defense, but if the attack traffic is very large, it is recommended to install protection software on the server for defense and purchase a hardware firewall for defense.