[Intrusions] 3381/udp?
Charles Hamby
fixer at gci.net
Fri Aug 6 03:15:25 GMT 2004
Starting at about 3pm Alaska time I started seeing a spike in 3381/udp
traffic on my subnet from multiple IP addresses. Shown below is a
sample. Anyone else seeing this or can anyone explain what this may be
coming from?
16:26:27 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=82.66.180.140 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=111 ID=19633
PROTO=UDP SPT=12460 DPT=3381 LEN=27
16:26:28 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=172.183.5.189 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=31951
PROTO=UDP SPT=6971 DPT=3381 LEN=27
16:26:29 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=210.122.4.4 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=11458
PROTO=UDP SPT=6324 DPT=3381 LEN=27
16:26:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=217.162.40.47 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 ID=2464
PROTO=UDP SPT=64731 DPT=3381 LEN=27
16:26:31 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=64.216.32.126 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=61766
PROTO=UDP SPT=12535 DPT=3381 LEN=27
16:26:36 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=82.199.145.20 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=55336
PROTO=UDP SPT=6554 DPT=3381 LEN=27
16:26:36 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=201.2.127.74 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=112 ID=1472
PROTO=UDP SPT=3504 DPT=3381 LEN=33
16:26:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=210.96.65.129 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 ID=11166
PROTO=UDP SPT=11480 DPT=3381 LEN=27
16:26:39 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=81.33.118.34 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=44 ID=24932
DF PROTO=UDP SPT=3042 DPT=3381 LEN=27
16:26:39 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=148.122.37.128 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0xC0 TTL=101
ID=42037 PROTO=UDP SPT=4655 DPT=3381 LEN=27
16:26:40 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.64.229.79 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=33028
PROTO=UDP SPT=5507 DPT=3381 LEN=27
16:26:43 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.65.193.74 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=7911 DF
PROTO=UDP SPT=15840 DPT=3381 LEN=27
16:26:43 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=210.97.247.55 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 ID=10890
PROTO=UDP SPT=3868 DPT=3381 LEN=27
16:26:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.65.193.74 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=7933 DF
PROTO=UDP SPT=15840 DPT=3381 LEN=31
16:26:46 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=221.144.165.126 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107
ID=18976 PROTO=UDP SPT=10213 DPT=3381 LEN=27
16:26:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=195.78.15.80 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=61161
PROTO=UDP SPT=11725 DPT=3381 LEN=27
16:26:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=217.43.198.179 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106
ID=20657 PROTO=UDP SPT=12017 DPT=3381 LEN=27
16:26:52 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.33.157.109 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 ID=223
PROTO=UDP SPT=3762 DPT=3381 LEN=27
16:26:53 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=81.56.243.59 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=110 ID=3091
PROTO=UDP SPT=4661 DPT=3381 LEN=27
16:26:54 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.32.53.185 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=41 ID=64932
PROTO=UDP SPT=59297 DPT=3381 LEN=27
16:26:55 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=212.195.240.145 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=104
ID=12035 PROTO=UDP SPT=33900 DPT=3381 LEN=27
16:26:56 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.103.107.223 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=114 ID=7013
PROTO=UDP SPT=8540 DPT=3381 LEN=27
16:27:02 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=68.225.59.107 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=111 ID=23928
PROTO=UDP SPT=8255 DPT=3381 LEN=27
16:27:02 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=81.64.136.105 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=114 ID=22950
PROTO=UDP SPT=7814 DPT=3381 LEN=27
16:27:05 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=218.185.137.2 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=47 ID=9448
PROTO=UDP SPT=7123 DPT=3381 LEN=27
16:27:08 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=66.244.80.32 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=114 ID=49325
PROTO=UDP SPT=4200 DPT=3381 LEN=33
16:27:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.28.109.112 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=61336
PROTO=UDP SPT=5834 DPT=3381 LEN=27
16:27:10 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=172.179.165.64 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108
ID=19333 PROTO=UDP SPT=5008 DPT=3381 LEN=27
16:27:11 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=69.108.163.155 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=44 ID=61761
PROTO=UDP SPT=6494 DPT=3381 LEN=27
16:27:12 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=69.22.193.154 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=115 ID=47512
PROTO=UDP SPT=62823 DPT=3381 LEN=27
16:27:20 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=82.122.212.40 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=48 ID=31492
PROTO=UDP SPT=4672 DPT=3381 LEN=27
16:27:20 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=172.207.51.223 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=105 ID=1228
PROTO=UDP SPT=11747 DPT=3381 LEN=27
16:27:22 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.60.33.202 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=115 ID=45598
PROTO=UDP SPT=1006 DPT=3381 LEN=27
16:27:24 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.163.81.124 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=18139
PROTO=UDP SPT=5534 DPT=3381 LEN=27
16:27:25 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.130.61.77 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=116 ID=45873
PROTO=UDP SPT=33556 DPT=3381 LEN=27
16:27:28 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.54.221.220 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=112 ID=4296
PROTO=UDP SPT=10208 DPT=3381 LEN=27
16:27:28 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=64.158.58.51 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=14665
PROTO=UDP SPT=30831 DPT=3381 LEN=27
16:27:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.32.245.101 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 ID=2972
PROTO=UDP SPT=11335 DPT=3381 LEN=27
16:27:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=24.98.203.233 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113 ID=56342
PROTO=UDP SPT=33760 DPT=3381 LEN=27
16:27:34 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.62.237.245 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=39039
PROTO=UDP SPT=4242 DPT=3381 LEN=27
16:27:35 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.84.196.8 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=2664 DPT=3381 LEN=33
16:27:37 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.221.74.20 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=42 ID=58515
PROTO=UDP SPT=7675 DPT=3381 LEN=27
16:27:37 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.221.74.20 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=42 ID=58551
PROTO=UDP SPT=7675 DPT=3381 LEN=31
16:27:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.203.90.98 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=110 ID=41540
PROTO=UDP SPT=5978 DPT=3381 LEN=27
16:27:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.224.234.207 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106
ID=36572 PROTO=UDP SPT=6897 DPT=3381 LEN=27
16:27:48 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.34.90.86 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=44 ID=25873
PROTO=UDP SPT=8388 DPT=3381 LEN=27
16:27:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=200.86.119.158 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107
ID=15828 PROTO=UDP SPT=12236 DPT=3381 LEN=27
16:27:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=24.8.129.6 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 ID=4186
PROTO=UDP SPT=5105 DPT=3381 LEN=27
16:27:56 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=201.2.127.74 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=112 ID=6055
PROTO=UDP SPT=3504 DPT=3381 LEN=33
16:28:16 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=216.221.115.179 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113
ID=64983 PROTO=UDP SPT=4732 DPT=3381 LEN=27
16:28:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=172.183.5.189 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=40652
PROTO=UDP SPT=6971 DPT=3381 LEN=27
16:28:20 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=218.149.243.251 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109
ID=19796 PROTO=UDP SPT=9903 DPT=3381 LEN=27
16:28:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=211.255.45.76 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=110 ID=455
PROTO=UDP SPT=12538 DPT=3381 LEN=27
16:28:31 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=196.37.90.158 DST=w.x.y.z LEN=47 TOS=0x10 PREC=0x20 TTL=108 ID=4795
PROTO=UDP SPT=25 DPT=3381 LEN=27
16:28:32 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=83.114.240.188 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=116
ID=22816 PROTO=UDP SPT=11263 DPT=3381 LEN=27
16:28:36 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=5666
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:28:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=81.48.131.57 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=240 ID=39034
PROTO=UDP SPT=5164 DPT=3381 LEN=27
16:28:40 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.44.193.133 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113
ID=29005 PROTO=UDP SPT=6286 DPT=3381 LEN=27
16:28:42 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=200.119.229.208 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=112
ID=26114 PROTO=UDP SPT=65224 DPT=3381 LEN=27
16:28:45 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=217.164.254.227 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=49
ID=26619 PROTO=UDP SPT=4770 DPT=3381 LEN=27
16:28:45 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=24.210.17.221 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=45 ID=30665
PROTO=UDP SPT=10096 DPT=3381 LEN=27
16:28:47 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=217.122.177.5 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x20 TTL=105 ID=18744
PROTO=UDP SPT=11547 DPT=3381 LEN=27
16:28:55 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=1106
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:29:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.65.193.74 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=10553
DF PROTO=UDP SPT=15840 DPT=3381 LEN=27
16:29:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.65.193.74 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=10601
DF PROTO=UDP SPT=15840 DPT=3381 LEN=31
16:29:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=210.109.223.167 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108
ID=4178 PROTO=UDP SPT=8016 DPT=3381 LEN=27
16:29:31 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=6092
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:29:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=2023
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:29:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.211.147.32 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=48 ID=36274
PROTO=UDP SPT=17866 DPT=3381 LEN=33
16:29:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=201.2.127.74 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=112 ID=12861
PROTO=UDP SPT=3504 DPT=3381 LEN=33
16:30:08 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.84.196.8 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=2664 DPT=3381 LEN=33
16:30:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.84.196.8 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=2664 DPT=3381 LEN=33
16:30:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=6961
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:30:59 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=218.149.243.251 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=109
ID=21993 PROTO=UDP SPT=9903 DPT=3381 LEN=33
16:31:10 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=4141
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:31:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.23.190.131 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=9864
PROTO=UDP SPT=6587 DPT=3381 LEN=27
16:31:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.23.190.131 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=9977
PROTO=UDP SPT=6587 DPT=3381 LEN=31
16:32:46 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=8041
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:33:05 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=6457
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:33:14 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=218.149.243.251 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=109
ID=22213 PROTO=UDP SPT=9903 DPT=3381 LEN=33
16:33:47 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=218.154.85.244 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106
ID=12872 PROTO=UDP SPT=8893 DPT=3381 LEN=27
16:34:05 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.23.239.67 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=11615
PROTO=UDP SPT=2991 DPT=3381 LEN=27
16:34:22 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.84.196.8 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=2664 DPT=3381 LEN=27
16:34:22 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.84.196.8 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=2664 DPT=3381 LEN=31
16:34:27 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.55.206.118 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=26329
PROTO=UDP SPT=17008 DPT=3381 LEN=27
16:34:27 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.55.206.118 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=58847
PROTO=UDP SPT=17008 DPT=3381 LEN=31
16:34:41 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.196.7.13 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF
PROTO=UDP SPT=4148 DPT=3381 LEN=27
16:35:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=218.149.243.251 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=109
ID=22346 PROTO=UDP SPT=9903 DPT=3381 LEN=33
16:35:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=131.220.96.78 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=40 ID=59805
DF PROTO=UDP SPT=8947 DPT=3381 LEN=27
16:35:39 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=131.220.96.78 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=40 ID=59842
DF PROTO=UDP SPT=8947 DPT=3381 LEN=31
16:35:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.126.48.196 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=61641 DPT=3381 LEN=27
16:35:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.126.48.196 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=61641 DPT=3381 LEN=31
16:36:00 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.53.243.91 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=112 ID=59075
PROTO=UDP SPT=11087 DPT=3381 LEN=27
16:36:40 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=62.211.147.32 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=48 ID=55601
PROTO=UDP SPT=17866 DPT=3381 LEN=33
16:37:06 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.84.230.210 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=12862 DPT=3381 LEN=27
16:37:06 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=213.84.230.210 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF
PROTO=UDP SPT=12862 DPT=3381 LEN=31
16:41:00 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.119.171.10 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=46452
PROTO=UDP SPT=3948 DPT=3381 LEN=27
16:41:57 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=12.218.103.28 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113 ID=48374
PROTO=UDP SPT=5768 DPT=3381 LEN=27
16:42:07 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=218.185.137.2 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=47 ID=17168
PROTO=UDP SPT=7123 DPT=3381 LEN=27
16:42:33 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.221.74.20 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=42 ID=45418
PROTO=UDP SPT=7675 DPT=3381 LEN=27
16:42:33 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00
SRC=80.221.74.20 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=42 ID=45454
PROTO=UDP SPT=7675 DPT=3381 LEN=31
More information about the Intrusions
mailing list