3381/udp?

Charles Hamby <[email protected]>
Newsgroups gmane.comp.security.intrusions
Message-ID <[email protected]> 
Starting at about 3pm Alaska time I started seeing a spike in 3381/udp 
traffic on my subnet from multiple IP addresses.  Shown below is a 
sample.  Anyone else seeing this or can anyone explain what this may be 
coming from? 


16:26:27 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=82.66.180.140 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=111 ID=19633 
PROTO=UDP SPT=12460 DPT=3381 LEN=27
16:26:28 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=172.183.5.189 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=31951 
PROTO=UDP SPT=6971 DPT=3381 LEN=27
16:26:29 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=210.122.4.4 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=11458 
PROTO=UDP SPT=6324 DPT=3381 LEN=27
16:26:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=217.162.40.47 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 ID=2464 
PROTO=UDP SPT=64731 DPT=3381 LEN=27
16:26:31 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=64.216.32.126 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=61766 
PROTO=UDP SPT=12535 DPT=3381 LEN=27
16:26:36 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=82.199.145.20 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=55336 
PROTO=UDP SPT=6554 DPT=3381 LEN=27
16:26:36 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=201.2.127.74 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=112 ID=1472 
PROTO=UDP SPT=3504 DPT=3381 LEN=33
16:26:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=210.96.65.129 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 ID=11166 
PROTO=UDP SPT=11480 DPT=3381 LEN=27
16:26:39 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=81.33.118.34 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=44 ID=24932 
DF PROTO=UDP SPT=3042 DPT=3381 LEN=27
16:26:39 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=148.122.37.128 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0xC0 TTL=101 
ID=42037 PROTO=UDP SPT=4655 DPT=3381 LEN=27
16:26:40 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.64.229.79 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=33028 
PROTO=UDP SPT=5507 DPT=3381 LEN=27
16:26:43 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.65.193.74 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=7911 DF 
PROTO=UDP SPT=15840 DPT=3381 LEN=27
16:26:43 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=210.97.247.55 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 ID=10890 
PROTO=UDP SPT=3868 DPT=3381 LEN=27
16:26:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.65.193.74 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=7933 DF 
PROTO=UDP SPT=15840 DPT=3381 LEN=31
16:26:46 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=221.144.165.126 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 
ID=18976 PROTO=UDP SPT=10213 DPT=3381 LEN=27
16:26:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=195.78.15.80 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=61161 
PROTO=UDP SPT=11725 DPT=3381 LEN=27
16:26:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=217.43.198.179 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 
ID=20657 PROTO=UDP SPT=12017 DPT=3381 LEN=27
16:26:52 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.33.157.109 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 ID=223 
PROTO=UDP SPT=3762 DPT=3381 LEN=27
16:26:53 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=81.56.243.59 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=110 ID=3091 
PROTO=UDP SPT=4661 DPT=3381 LEN=27
16:26:54 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.32.53.185 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=41 ID=64932 
PROTO=UDP SPT=59297 DPT=3381 LEN=27
16:26:55 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=212.195.240.145 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=104 
ID=12035 PROTO=UDP SPT=33900 DPT=3381 LEN=27
16:26:56 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.103.107.223 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=114 ID=7013 
PROTO=UDP SPT=8540 DPT=3381 LEN=27
16:27:02 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=68.225.59.107 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=111 ID=23928 
PROTO=UDP SPT=8255 DPT=3381 LEN=27
16:27:02 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=81.64.136.105 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=114 ID=22950 
PROTO=UDP SPT=7814 DPT=3381 LEN=27
16:27:05 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=218.185.137.2 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=47 ID=9448 
PROTO=UDP SPT=7123 DPT=3381 LEN=27
16:27:08 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=66.244.80.32 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=114 ID=49325 
PROTO=UDP SPT=4200 DPT=3381 LEN=33
16:27:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.28.109.112 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=61336 
PROTO=UDP SPT=5834 DPT=3381 LEN=27
16:27:10 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=172.179.165.64 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 
ID=19333 PROTO=UDP SPT=5008 DPT=3381 LEN=27
16:27:11 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=69.108.163.155 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=44 ID=61761 
PROTO=UDP SPT=6494 DPT=3381 LEN=27
16:27:12 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=69.22.193.154 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=115 ID=47512 
PROTO=UDP SPT=62823 DPT=3381 LEN=27
16:27:20 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=82.122.212.40 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=48 ID=31492 
PROTO=UDP SPT=4672 DPT=3381 LEN=27
16:27:20 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=172.207.51.223 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=105 ID=1228 
PROTO=UDP SPT=11747 DPT=3381 LEN=27
16:27:22 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.60.33.202 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=115 ID=45598 
PROTO=UDP SPT=1006 DPT=3381 LEN=27
16:27:24 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.163.81.124 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=18139 
PROTO=UDP SPT=5534 DPT=3381 LEN=27
16:27:25 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.130.61.77 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=116 ID=45873 
PROTO=UDP SPT=33556 DPT=3381 LEN=27
16:27:28 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.54.221.220 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=112 ID=4296 
PROTO=UDP SPT=10208 DPT=3381 LEN=27
16:27:28 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=64.158.58.51 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=14665 
PROTO=UDP SPT=30831 DPT=3381 LEN=27
16:27:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.32.245.101 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 ID=2972 
PROTO=UDP SPT=11335 DPT=3381 LEN=27
16:27:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=24.98.203.233 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113 ID=56342 
PROTO=UDP SPT=33760 DPT=3381 LEN=27
16:27:34 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.62.237.245 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=39039 
PROTO=UDP SPT=4242 DPT=3381 LEN=27
16:27:35 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.84.196.8 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=2664 DPT=3381 LEN=33
16:27:37 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.221.74.20 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=42 ID=58515 
PROTO=UDP SPT=7675 DPT=3381 LEN=27
16:27:37 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.221.74.20 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=42 ID=58551 
PROTO=UDP SPT=7675 DPT=3381 LEN=31
16:27:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.203.90.98 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=110 ID=41540 
PROTO=UDP SPT=5978 DPT=3381 LEN=27
16:27:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.224.234.207 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 
ID=36572 PROTO=UDP SPT=6897 DPT=3381 LEN=27
16:27:48 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.34.90.86 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=44 ID=25873 
PROTO=UDP SPT=8388 DPT=3381 LEN=27
16:27:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=200.86.119.158 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 
ID=15828 PROTO=UDP SPT=12236 DPT=3381 LEN=27
16:27:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=24.8.129.6 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=107 ID=4186 
PROTO=UDP SPT=5105 DPT=3381 LEN=27
16:27:56 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=201.2.127.74 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=112 ID=6055 
PROTO=UDP SPT=3504 DPT=3381 LEN=33
16:28:16 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=216.221.115.179 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113 
ID=64983 PROTO=UDP SPT=4732 DPT=3381 LEN=27
16:28:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=172.183.5.189 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 ID=40652 
PROTO=UDP SPT=6971 DPT=3381 LEN=27
16:28:20 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=218.149.243.251 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 
ID=19796 PROTO=UDP SPT=9903 DPT=3381 LEN=27
16:28:30 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=211.255.45.76 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=110 ID=455 
PROTO=UDP SPT=12538 DPT=3381 LEN=27
16:28:31 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=196.37.90.158 DST=w.x.y.z LEN=47 TOS=0x10 PREC=0x20 TTL=108 ID=4795 
PROTO=UDP SPT=25 DPT=3381 LEN=27
16:28:32 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=83.114.240.188 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=116 
ID=22816 PROTO=UDP SPT=11263 DPT=3381 LEN=27
16:28:36 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=5666 
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:28:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=81.48.131.57 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=240 ID=39034 
PROTO=UDP SPT=5164 DPT=3381 LEN=27
16:28:40 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.44.193.133 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113 
ID=29005 PROTO=UDP SPT=6286 DPT=3381 LEN=27
16:28:42 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=200.119.229.208 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=112 
ID=26114 PROTO=UDP SPT=65224 DPT=3381 LEN=27
16:28:45 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=217.164.254.227 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=49 
ID=26619 PROTO=UDP SPT=4770 DPT=3381 LEN=27
16:28:45 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=24.210.17.221 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=45 ID=30665 
PROTO=UDP SPT=10096 DPT=3381 LEN=27
16:28:47 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=217.122.177.5 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x20 TTL=105 ID=18744 
PROTO=UDP SPT=11547 DPT=3381 LEN=27
16:28:55 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=1106 
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:29:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.65.193.74 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=10553 
DF PROTO=UDP SPT=15840 DPT=3381 LEN=27
16:29:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.65.193.74 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=10601 
DF PROTO=UDP SPT=15840 DPT=3381 LEN=31
16:29:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=210.109.223.167 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=108 
ID=4178 PROTO=UDP SPT=8016 DPT=3381 LEN=27
16:29:31 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=6092 
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:29:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=2023 
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:29:50 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.211.147.32 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=48 ID=36274 
PROTO=UDP SPT=17866 DPT=3381 LEN=33
16:29:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=201.2.127.74 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=112 ID=12861 
PROTO=UDP SPT=3504 DPT=3381 LEN=33
16:30:08 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.84.196.8 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=2664 DPT=3381 LEN=33
16:30:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.84.196.8 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=2664 DPT=3381 LEN=33
16:30:51 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=6961 
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:30:59 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=218.149.243.251 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=109 
ID=21993 PROTO=UDP SPT=9903 DPT=3381 LEN=33
16:31:10 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=4141 
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:31:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.23.190.131 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=9864 
PROTO=UDP SPT=6587 DPT=3381 LEN=27
16:31:18 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.23.190.131 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=9977 
PROTO=UDP SPT=6587 DPT=3381 LEN=31
16:32:46 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=200.247.68.44 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=8041 
PROTO=UDP SPT=6394 DPT=3381 LEN=33
16:33:05 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=211.255.45.76 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=110 ID=6457 
PROTO=UDP SPT=12538 DPT=3381 LEN=33
16:33:14 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=218.149.243.251 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=109 
ID=22213 PROTO=UDP SPT=9903 DPT=3381 LEN=33
16:33:47 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=218.154.85.244 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=106 
ID=12872 PROTO=UDP SPT=8893 DPT=3381 LEN=27
16:34:05 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.23.239.67 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=11615 
PROTO=UDP SPT=2991 DPT=3381 LEN=27
16:34:22 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.84.196.8 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=2664 DPT=3381 LEN=27
16:34:22 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.84.196.8 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=2664 DPT=3381 LEN=31
16:34:27 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.55.206.118 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=46 ID=26329 
PROTO=UDP SPT=17008 DPT=3381 LEN=27
16:34:27 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.55.206.118 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=46 ID=58847 
PROTO=UDP SPT=17008 DPT=3381 LEN=31
16:34:41 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.196.7.13 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF 
PROTO=UDP SPT=4148 DPT=3381 LEN=27
16:35:09 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=218.149.243.251 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=109 
ID=22346 PROTO=UDP SPT=9903 DPT=3381 LEN=33
16:35:38 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=131.220.96.78 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=40 ID=59805 
DF PROTO=UDP SPT=8947 DPT=3381 LEN=27
16:35:39 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=131.220.96.78 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=40 ID=59842 
DF PROTO=UDP SPT=8947 DPT=3381 LEN=31
16:35:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.126.48.196 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=61641 DPT=3381 LEN=27
16:35:44 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.126.48.196 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=61641 DPT=3381 LEN=31
16:36:00 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.53.243.91 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=112 ID=59075 
PROTO=UDP SPT=11087 DPT=3381 LEN=27
16:36:40 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=62.211.147.32 DST=w.x.y.z LEN=53 TOS=0x00 PREC=0x00 TTL=48 ID=55601 
PROTO=UDP SPT=17866 DPT=3381 LEN=33
16:37:06 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.84.230.210 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=12862 DPT=3381 LEN=27
16:37:06 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=213.84.230.210 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF 
PROTO=UDP SPT=12862 DPT=3381 LEN=31
16:41:00 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.119.171.10 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=109 ID=46452 
PROTO=UDP SPT=3948 DPT=3381 LEN=27
16:41:57 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=12.218.103.28 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=113 ID=48374 
PROTO=UDP SPT=5768 DPT=3381 LEN=27
16:42:07 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=218.185.137.2 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=47 ID=17168 
PROTO=UDP SPT=7123 DPT=3381 LEN=27
16:42:33 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.221.74.20 DST=w.x.y.z LEN=47 TOS=0x00 PREC=0x00 TTL=42 ID=45418 
PROTO=UDP SPT=7675 DPT=3381 LEN=27
16:42:33 IN=eth1 OUT= MAC=00:c0:f0:5b:34:20:00:0b:bf:c9:94:7c:08:00 
SRC=80.221.74.20 DST=w.x.y.z LEN=51 TOS=0x00 PREC=0x00 TTL=42 ID=45454 
PROTO=UDP SPT=7675 DPT=3381 LEN=31

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.