Openwrt does ssdp reflecting ddos

im not sure if this caused by hackpascal uboot
the router scans local net udp 1900 upnp then request 1 small packet then get average 6 response with bigger packet bytes to fake source ips like cloudflare and leaseweb.

Check your choice of packages. I’ve never seen that on my network.