strange udp
"lola marais" <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
Can anyone help identify this traffic? Any suggestions are welcome. 17:07:11.058632 my.host.4827 > 64.246.16.11.4665: [udp sum ok] udp 18 (ttl 125, id 49700, len 46) 17:07:12.119558 my.host.4827 > 64.246.16.11.4665: [udp sum ok] udp 18 (ttl 125, id 49703, len 46) 17:07:12.660676 my.host.4827 > 69.44.153.224.6548: [udp sum ok] udp 6 (ttl 125, id 49706, len 34) 17:07:13.190843 my.host.4827 > 69.44.153.224.6548: [udp sum ok] udp 6 (ttl 125, id 49708, len 34) 17:07:13.201288 my.host.4827 > 64.246.16.11.4665: [udp sum ok] udp 18 (ttl 125, id 49709, len 46) 17:07:14.262428 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49712, len 46) 17:07:15.323526 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49716, len 46) 17:07:15.877195 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49718, len 46) 17:07:16.935814 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49721, len 46) 17:07:17.477694 my.host.4827 > 193.225.80.117.4665: [udp sum ok] udp 6 (ttl 125, id 49723, len 34) 17:07:17.477695 my.host.4827 > 193.225.80.117.4665: [udp sum ok] udp 6 (ttl 125, id 49724, len 34) 17:07:18.007005 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49726, len 46) 17:07:19.078358 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49729, len 46) 17:07:20.139671 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49732, len 46) 17:07:21.201056 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49735, len 46) 17:07:22.272375 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49738, len 46) 17:07:22.813144 my.host.4827 > 82.210.11.2.6671: [udp sum ok] udp 6 (ttl 125, id 49740, len 34) 17:07:22.813146 my.host.4827 > 82.210.11.2.6671: [udp sum ok] udp 6 (ttl 125, id 49741, len 34) 17:07:23.343574 my.host.4827 > 193.19.227.24.4665: [udp sum ok] udp 18 (ttl 125, id 49743, len 46) 17:07:23.884230 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49745, len 46) 17:07:24.945534 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49748, len 46) 17:07:26.016875 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49751, len 46) 17:07:27.084017 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49754, len 46) 17:07:27.620808 my.host.4827 > 67.15.18.45.3310: [udp sum ok] udp 6 (ttl 125, id 49757, len 34) 17:07:27.621105 my.host.4827 > 67.15.18.45.3310: [udp sum ok] udp 6 (ttl 125, id 49758, len 34) 17:07:28.149669 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49760, len 46) 17:07:29.222471 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49763, len 46) 17:07:30.288121 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49766, len 46) 17:07:31.343252 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49769, len 46) 17:07:31.886833 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49771, len 46) 17:07:32.424875 my.host.4827 > 65.75.161.70.4665: [udp sum ok] udp 6 (ttl 125, id 49773, len 34) 17:07:32.434708 my.host.4827 > 65.75.161.70.4665: [udp sum ok] udp 6 (ttl 125, id 49774, len 34) 17:07:32.965577 my.host.4827 > 67.15.14.73.4246: [udp sum ok] udp 18 (ttl 125, id 49776, len 46) 17:07:34.031481 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49779, len 46) 17:07:35.088223 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49782, len 46) 17:07:36.159126 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49785, len 46) 17:07:37.223124 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49788, len 46) 17:07:37.761101 my.host.4827 > 66.98.144.100.4246: [udp sum ok] udp 6 (ttl 125, id 49790, len 34) 17:07:37.761102 my.host.4827 > 66.98.144.100.4246: [udp sum ok] udp 6 (ttl 125, id 49791, len 34) 17:07:38.295636 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49793, len 46) 17:07:39.363042 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49797, len 46) 17:07:39.903675 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49799, len 46) 17:07:40.965056 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49802, len 46) 17:07:42.026739 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49805, len 46) 17:07:42.566990 my.host.4827 > 195.140.142.37.6670: [udp sum ok] udp 6 (ttl 125, id 49807, len 34) 17:07:42.577053 my.host.4827 > 195.140.142.37.6670: [udp sum ok] udp 6 (ttl 125, id 49808, len 34) 17:07:43.110699 my.host.4827 > 62.241.53.2.4246: [udp sum ok] udp 18 (ttl 125, id 49810, len 46) many thanks in advance _________________________________________________________________ Keep in touch with friends abroad - it's easy with MSN Groups! http://groups.msn.com/people.msnw?pgmarket=en-za _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions