Being DDos'd a few too many times.

[lukehanham]

Okay i put up my game server two days ago and it was top of the list in the first hour of launch.

Since then i have had a few UDP attacks knocking the server offline for long periods of time.

What firewall rules can you suggest to help block these, they are very very disruptive to my community.

I'm on a 4 core VDS in frankfurt.

[soja]

You would need to post simple and detailed packet captures for us to be able to make rules to help you block an attack.

Capture multiple of these during your attack, and paste them here either in pastebin or text files that you attach.

[lukehanham]

Hit offline, again.

error : ret -1
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
15:04:27.924415 IP 84.248.191.250.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.924961 IP 109.154.115.204.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.925805 IP 86.42.79.170.51279 > 31.186.251.34.27015: UDP, payload 65
15:04:27.929283 IP 101.127.70.184.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.930303 IP 2.237.17.119.60955 > 31.186.251.34.27015: UDP, payload 56
15:04:27.931731 IP 82.47.166.43.27005 > 31.186.251.34.27015: UDP, payload 63
15:04:27.931741 IP 82.47.166.43.27005 > 31.186.251.34.27015: UDP, payload 63
15:04:27.931743 IP 82.47.166.43.27005 > 31.186.251.34.27015: UDP, payload 63
15:04:27.934958 IP 31.50.222.124.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.935771 IP 2.218.168.129.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.936129 IP 173.3.97.214.27005 > 31.186.251.34.27015: UDP, payload 65
15:04:27.936938 IP 87.104.186.202.27005 > 31.186.251.34.27015: UDP, payload 75
15:04:27.941757 IP 62.98.147.62.27005 > 31.186.251.34.27015: UDP, payload 68
15:04:27.942878 IP 85.140.220.190.27005 > 31.186.251.34.27015: UDP, payload 89
15:04:27.943088 IP 31.186.251.34.27015 > 79.21.232.67.27005: UDP, payload 465
15:04:27.943088 IP 31.186.251.34.27015 > 151.229.238.97.27005: UDP, payload 383
15:04:27.943204 IP 31.186.251.34.27015 > 82.21.245.163.27005: UDP, payload 214
15:04:27.943305 IP 31.186.251.34.27015 > 62.31.50.118.27005: UDP, payload 294
15:04:27.943371 IP 86.4.113.116.27005 > 31.186.251.34.27015: UDP, payload 66
15:04:27.943439 IP 31.186.251.34.27015 > 85.140.220.190.27005: UDP, payload 386
15:04:27.943577 IP 80.44.245.46.61053 > 31.186.251.34.27015: UDP, payload 65
15:04:27.943614 IP 31.186.251.34.27015 > 2.218.168.129.27005: UDP, payload 386
15:04:27.943809 IP 31.186.251.34.27015 > 101.127.70.184.27005: UDP, payload 790
15:04:27.943852 IP 31.186.251.34.27015 > 188.67.108.39.27005: UDP, payload 239
15:04:27.943856 IP 188.67.108.39.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.943964 IP 31.186.251.34.27015 > 109.154.115.204.27005: UDP, payload 253
15:04:27.944088 IP 31.186.251.34.27015 > 95.147.185.187.27005: UDP, payload 234
15:04:27.944139 IP 31.186.251.34.27015 > 173.3.97.214.27005: UDP, payload 403
15:04:27.944208 IP 31.186.251.34.27015 > 80.44.245.46.61053: UDP, payload 214
15:04:27.944277 IP 31.186.251.34.27015 > 84.248.191.250.27005: UDP, payload 214
15:04:27.944391 IP 31.186.251.34.27015 > 77.7.238.74.27005: UDP, payload 343
15:04:27.944568 IP 31.186.251.34.27015 > 31.50.222.124.27005: UDP, payload 279
15:04:27.944598 IP 85.166.230.207.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.944682 IP 31.186.251.34.27015 > 87.104.186.202.27005: UDP, payload 218
15:04:27.944722 IP 31.186.251.34.27015 > 82.47.166.43.27005: UDP, payload 617
15:04:27.944844 IP 31.186.251.34.27015 > 178.94.217.238.12384: UDP, payload 271
15:04:27.945023 IP 31.186.251.34.27015 > 82.139.34.166.62144: UDP, payload 569
15:04:27.945094 IP 31.186.251.34.27015 > 86.4.113.116.27005: UDP, payload 481
15:04:27.945279 IP 31.186.251.34.27015 > 85.166.230.207.27005: UDP, payload 380
15:04:27.945349 IP 70.124.26.42.27005 > 31.186.251.34.27015: UDP, payload 63
15:04:27.945438 IP 31.186.251.34.27015 > 62.98.147.62.27005: UDP, payload 307
15:04:27.945590 IP 31.186.251.34.27015 > 2.237.17.119.60955: UDP, payload 307
15:04:27.945740 IP 31.186.251.34.27015 > 84.180.210.227.27005: UDP, payload 1001
15:04:27.945767 IP 31.186.251.34.27015 > 86.182.56.132.27005: UDP, payload 324
15:04:27.945884 IP 31.186.251.34.27015 > 86.42.79.170.51279: UDP, payload 249
15:04:27.946047 IP 31.186.251.34.27015 > 95.119.196.175.27005: UDP, payload 466
15:04:27.946151 IP 31.186.251.34.27015 > 70.124.26.42.27005: UDP, payload 474
15:04:27.946301 IP 31.186.251.34.27015 > 78.216.26.10.27005: UDP, payload 367
15:04:27.947329 IP 86.182.56.132.27005 > 31.186.251.34.27015: UDP, payload 81
15:04:27.948356 IP 82.21.245.163.27005 > 31.186.251.34.27015: UDP, payload 94
15:04:27.950302 IP 78.216.26.10.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.951145 IP 109.154.115.204.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.953246 IP 84.248.191.250.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.954127 IP 95.147.185.187.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.956261 IP 79.21.232.67.27005 > 31.186.251.34.27015: UDP, payload 63
15:04:27.956348 IP 86.42.79.170.51279 > 31.186.251.34.27015: UDP, payload 91
15:04:27.956461 IP 101.127.70.184.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.957181 IP 95.119.196.175.27005 > 31.186.251.34.27015: UDP, payload 63
15:04:27.958885 IP 2.237.17.119.60955 > 31.186.251.34.27015: UDP, payload 60
15:04:27.961114 IP 2.218.168.129.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.961313 IP 89.168.108.86.58219 > 31.186.251.34.27015: UDP, payload 25
15:04:27.962403 IP 151.229.238.97.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.963767 IP 82.139.34.166.62144 > 31.186.251.34.27015: UDP, payload 60
15:04:27.964459 IP 5.44.168.174.55690 > 31.186.251.34.27015: UDP, payload 25
15:04:27.964711 IP 31.50.222.124.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.966710 IP 109.154.115.204.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.971135 IP 87.104.186.202.27005 > 31.186.251.34.27015: UDP, payload 67
15:04:27.971915 IP 178.94.217.238.12384 > 31.186.251.34.27015: UDP, payload 64
15:04:27.972678 IP 82.21.245.163.27005 > 31.186.251.34.27015: UDP, payload 105
15:04:27.973177 IP 80.44.245.46.61053 > 31.186.251.34.27015: UDP, payload 71
15:04:27.973506 IP 85.140.220.190.27005 > 31.186.251.34.27015: UDP, payload 91
15:04:27.973754 IP 78.216.26.10.27005 > 31.186.251.34.27015: UDP, payload 60
15:04:27.974020 IP 188.67.108.39.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.974164 IP 173.3.97.214.27005 > 31.186.251.34.27015: UDP, payload 67
15:04:27.974810 IP 86.182.56.132.27005 > 31.186.251.34.27015: UDP, payload 77
15:04:27.978521 IP 86.4.113.116.27005 > 31.186.251.34.27015: UDP, payload 73
15:04:27.978579 IP 62.31.50.118.27005 > 31.186.251.34.27015: UDP, payload 76
15:04:27.979630 IP 95.147.185.187.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.982167 IP 70.124.26.42.27005 > 31.186.251.34.27015: UDP, payload 63
15:04:27.983285 IP 84.248.191.250.27005 > 31.186.251.34.27015: UDP, payload 53
15:04:27.983866 IP 86.42.79.170.51279 > 31.186.251.34.27015: UDP, payload 89
15:04:27.989467 IP 85.166.230.207.27005 > 31.186.251.34.27015: UDP, payload 59
15:04:27.989547 IP 31.186.251.34.27015 > 151.229.238.97.27005: UDP, payload 449
15:04:27.989665 IP 31.186.251.34.27015 > 82.21.245.163.27005: UDP, payload 248
15:04:27.989703 IP 31.186.251.34.27015 > 79.21.232.67.27005: UDP, payload 521
15:04:27.989823 IP 31.186.251.34.27015 > 62.31.50.118.27005: UDP, payload 367
15:04:27.989981 IP 31.186.251.34.27015 > 85.140.220.190.27005: UDP, payload 494
15:04:27.990067 IP 31.186.251.34.27015 > 2.218.168.129.27005: UDP, payload 452
15:04:27.990216 IP 31.186.251.34.27015 > 188.67.108.39.27005: UDP, payload 283
15:04:27.990357 IP 31.186.251.34.27015 > 101.127.70.184.27005: UDP, payload 560
15:04:27.990370 IP 31.186.251.34.27015 > 109.154.115.204.27005: UDP, payload 283
15:04:27.990486 IP 31.186.251.34.27015 > 95.147.185.187.27005: UDP, payload 283
15:04:27.990583 IP 31.186.251.34.27015 > 80.44.245.46.61053: UDP, payload 248
15:04:27.990638 IP 31.186.251.34.27015 > 173.3.97.214.27005: UDP, payload 441
15:04:27.990678 IP 31.186.251.34.27015 > 84.248.191.250.27005: UDP, payload 262
15:04:27.990794 IP 31.186.251.34.27015 > 77.7.238.74.27005: UDP, payload 402
15:04:27.990930 IP 31.186.251.34.27015 > 31.50.222.124.27005: UDP, payload 327
15:04:27.990936 IP 31.186.251.34.27015 > 82.47.166.43.27005: UDP, payload 579
15:04:27.991035 IP 31.186.251.34.27015 > 87.104.186.202.27005: UDP, payload 266
15:04:27.991106 IP 31.186.251.34.27015 > 178.94.217.238.12384: UDP, payload 373
100 packets captured
1427 packets received by filter
0 packets dropped by kernel

[soja]

Need a detailed capture now. Detailed is the most important, sometimes you can see simple patterns in the normal capture though, which is why I asked for both.

[lukehanham]

Next time it happens i will do a detailed capture, the attacks seem to be for short durations but powerful enough to knock the servers dead.

[soja]

That is a common attack method, it gives you a small window to capture, analyze, and block the attack, but still empties your servers.

[lukehanham]

error : ret -1
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
15:50:49.684413 IP (tos 0x0, ttl 64, id 18586, offset 0, flags [DF], proto UDP (17), length 675)
31.186.251.34.27015 > 80.167.76.221.27005: UDP, payload 647
0x0000: 4500 02a3 489a 4000 4011 374f 1fba fb22 E...H.@.@.7O..."
0x0010: 50a7 4cdd 6987 697d 028f bb01 2412 0000 P.L.i.i}....$...
0x0020: 6515 0000 a133 99b9 b7a3 247f c84b 8803 e....3....$..K..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.684415 IP (tos 0x0, ttl 64, id 65002, offset 0, flags [DF], proto UDP (17), length 246)
31.186.251.34.27015 > 95.119.196.175.27005: UDP, payload 218
0x0000: 4500 00f6 fdea 4000 4011 fd08 1fba fb22 E.....@.@......"
0x0010: 5f77 c4af 6987 697d 00e2 3ff7 312e 0100 _w..i.i}..?.1...
0x0020: 7851 0100 a084 e81e 76fe e275 4396 5500 xQ......v..uC.U.
0x0030: 40f5 8282 80b6 4656 5905 00d4 00af 0580 @.....FVY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.684496 IP (tos 0x0, ttl 64, id 54188, offset 0, flags [DF], proto UDP (17), length 284)
31.186.251.34.27015 > 178.94.217.238.12614: UDP, payload 256
0x0000: 4500 011c d3ac 4000 4011 befa 1fba fb22 E.....@.@......"
0x0010: b25e d9ee 6987 3146 0108 a843 cac2 0000 .^..i.1F...C....
0x0020: a8db 0000 a00b cd01 813b ec4d 4396 5500 .........;.MC.U.
0x0030: 40f5 8282 80b6 4652 5905 00f8 00df 0680 @.....FRY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.684563 IP (tos 0x0, ttl 64, id 39613, offset 0, flags [DF], proto UDP (17), length 318)
31.186.251.34.27015 > 80.100.140.100.27005: UDP, payload 290
0x0000: 4500 013e 9abd 4000 4011 a74c 1fba fb22 E..>..@.@..L..."
0x0010: 5064 8c64 6987 697d 012a f8e0 7fa1 0000 Pd.di.i}.*......
0x0020: bcb4 0000 a0b0 cbe5 620e a7e0 4396 5500 ........b...C.U.
0x0030: 40f5 8282 80b6 465a 5905 0014 01ee 0780 @.....FZY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.684601 IP (tos 0x0, ttl 64, id 54723, offset 0, flags [DF], proto UDP (17), length 244)
31.186.251.34.27015 > 173.3.97.214.27005: UDP, payload 216
0x0000: 4500 00f4 d5c3 4000 4011 3a7f 1fba fb22 E.....@.@.:...."
0x0010: ad03 61d6 6987 697d 00e0 2aa8 002d 0100 ..a.i.i}..*..-..
0x0020: 0d50 0100 a02b c801 e191 150a 4396 5500 .P...+......C.U.
0x0030: 40f5 8282 80b6 464a 5905 00c4 009f 0580 @.....FJY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.684670 IP (tos 0x0, ttl 64, id 13933, offset 0, flags [DF], proto UDP (17), length 264)
31.186.251.34.27015 > 82.21.245.163.27005: UDP, payload 236
0x0000: 4500 0108 366d 4000 4011 a0e2 1fba fb22 E...6m@.@......"
0x0010: 5215 f5a3 6987 697d 00f4 639b 6730 0100 R...i.i}..c.g0..
0x0020: 0957 0100 61b7 2b74 7f82 f9f9 0846 8803 .W..a.+t.....F..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe8c 21cb 2a00 a07a 4141 405b ......!.*..zAA@[
0x0050: 23ad #.
15:50:49.684695 IP (tos 0x0, ttl 64, id 30391, offset 0, flags [DF], proto UDP (17), length 338)
31.186.251.34.27015 > 85.244.251.55.54951: UDP, payload 310
0x0000: 4500 0152 76b7 4000 4011 56db 1fba fb22 E..Rv.@.@.V...."
0x0010: 55f4 fb37 6987 d6a7 013e 6d58 af92 0000 U..7i....>mX....
0x0020: 45a1 0000 a1e8 daa6 a322 0ad5 c84b 8803 E........"...K..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.684816 IP (tos 0x0, ttl 64, id 84, offset 0, flags [DF], proto UDP (17), length 308)
31.186.251.34.27015 > 78.216.26.10.27005: UDP, payload 280
0x0000: 4500 0134 0054 4000 4011 b5a6 1fba fb22 E..4.T@.@......"
0x0010: 4ed8 1a0a 6987 697d 0120 84f0 752e 0100 N...i.i}....u...
0x0020: e554 0100 609c c901 89f8 762f 4396 5500 .T..`.....v/C.U.
0x0030: 40f5 8282 80b6 4656 5905 0010 01a1 0780 @.....FVY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.684826 IP (tos 0x0, ttl 64, id 37514, offset 0, flags [DF], proto UDP (17), length 330)
31.186.251.34.27015 > 188.67.108.39.27005: UDP, payload 302
0x0000: 4500 014a 928a 4000 4011 63d1 1fba fb22 E..J..@.@.c...."
0x0010: bc43 6c27 6987 697d 0136 448f 1b29 0100 .Cl'i.i}.6D..)..
0x0020: 064e 0100 604b 9b01 8a29 d342 4396 5500 .N..`K...).BC.U.
0x0030: 40f5 8282 80b6 464e 5905 00fc 0050 0880 @.....FNY....P..
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.684927 IP (tos 0x0, ttl 64, id 43848, offset 0, flags [DF], proto UDP (17), length 303)
31.186.251.34.27015 > 85.244.255.73.53745: UDP, payload 275
0x0000: 4500 012f ab48 4000 4011 1e5b 1fba fb22 E../.H@.@..[..."
0x0010: 55f4 ff49 6987 d1f1 011b 7147 6f80 0000 U..Ii.....qGo...
0x0020: 6e91 0000 a0de 2900 bfab d04c 4396 5500 n.....)....LC.U.
0x0030: 40f5 8282 80b6 4656 5905 0014 0176 0780 @.....FVY....v..
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.684979 IP (tos 0x0, ttl 119, id 14599, offset 0, flags [none], proto UDP (17), length 81)
95.119.196.175.27005 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 3907 0000 7711 cb91 5f77 c4af E..Q9...w..._w..
0x0010: 1fba fb22 697d 6987 003d e562 7951 0100 ..."i}i..=.byQ..
0x0020: 2e2e 0100 20b9 8b85 76fe e275 49e8 17e0 ........v..uI...
0x0030: 5d54 0040 2aab 0080 17e1 7241 69ff 5886 ]T.@*.....rAi.X.
0x0040: 0000 0000 0000 0030 5859 0500 341b 9001 .......0XY..4...
0x0050: 00 .
15:50:49.684999 IP (tos 0x0, ttl 64, id 24322, offset 0, flags [DF], proto UDP (17), length 384)
31.186.251.34.27015 > 31.50.222.124.27005: UDP, payload 356
0x0000: 4500 0180 5f02 4000 4011 c1df 1fba fb22 E..._.@.@......"
0x0010: 1f32 de7c 6987 697d 016c 1a09 322c 0100 .2.|i.i}.l..2,..
0x0020: 7f52 0100 a014 e9f8 07ba b8ad 4396 5500 .R..........C.U.
0x0030: 40f5 8282 80b6 4656 5905 003c 01fe 0980 @.....FVY..<....
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.685079 IP (tos 0x0, ttl 64, id 57118, offset 0, flags [DF], proto UDP (17), length 344)
31.186.251.34.27015 > 82.47.166.43.27005: UDP, payload 316
0x0000: 4500 0158 df1e 4000 4011 473f 1fba fb22 E..X..@.@.G?..."
0x0010: 522f a62b 6987 697d 0144 148d 2a2b 0100 R/.+i.i}.D..*+..
0x0020: 7a4c 0100 20d7 ae00 6d3d d1c2 4396 5500 zL......m=..C.U.
0x0030: 40f5 8282 80b6 4642 5905 0010 01bd 0880 @.....FBY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.685107 IP (tos 0x0, ttl 64, id 10149, offset 0, flags [DF], proto UDP (17), length 303)
31.186.251.34.27015 > 95.147.185.187.27005: UDP, payload 275
0x0000: 4500 012f 27a5 4000 4011 dded 1fba fb22 E../'.@.@......"
0x0010: 5f93 b9bb 6987 697d 011b 3558 aa27 0100 _...i.i}..5X.'..
0x0020: e249 0100 61d1 9401 7e4d 9cca 0849 8803 .I..a...~M...I..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f80 ?.
15:50:49.685168 IP (tos 0x0, ttl 64, id 54830, offset 0, flags [DF], proto UDP (17), length 287)
31.186.251.34.27015 > 84.247.164.238.48575: UDP, payload 259
0x0000: 4500 011f d62e 4000 4011 4edd 1fba fb22 E.....@.@.N...."
0x0010: 54f7 a4ee 6987 bdbf 010b 15df 5d20 0100 T...i.......]...
0x0020: 2a45 0100 a07e 9900 d8b2 0960 4396 5500 *E...~.....`C.U.
0x0030: 40f5 8282 80b6 4656 5905 00d8 00f7 0680 @.....FVY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.685246 IP (tos 0x0, ttl 64, id 28952, offset 0, flags [DF], proto UDP (17), length 337)
31.186.251.34.27015 > 213.122.93.146.27005: UDP, payload 309
0x0000: 4500 0151 7118 4000 4011 7a9a 1fba fb22 E..Qq.@.@.z...."
0x0010: d57a 5d92 6987 697d 013d 4f38 79bc 0000 .z].i.i}.=O8y...
0x0020: dcd3 0000 a1de e600 125a 3a2c 0849 8803 .........Z:,.I..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f80 ?.
15:50:49.685281 IP (tos 0x0, ttl 64, id 14656, offset 0, flags [DF], proto UDP (17), length 347)
31.186.251.34.27015 > 84.248.191.250.27005: UDP, payload 319
0x0000: 4500 015b 3940 4000 4011 d082 1fba fb22 E..[9@@.@......"
0x0010: 54f8 bffa 6987 697d 0147 3128 281d 0100 T...i.i}.G1((...
0x0020: 2d40 0100 2076 f2e4 37b1 95b8 4396 5500 -@...v..7...C.U.
0x0030: 40f5 8282 80b6 4656 5905 0020 01d4 0880 @.....FVY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.685341 IP (tos 0x0, ttl 64, id 54831, offset 0, flags [DF], proto UDP (17), length 294)
31.186.251.34.27015 > 84.247.164.238.48756: UDP, payload 266
0x0000: 4500 0126 d62f 4000 4011 4ed5 1fba fb22 E..&./@.@.N...."
0x0010: 54f7 a4ee 6987 be74 0112 15e6 870b 0100 T...i..t........
0x0020: f820 0100 6049 8701 c18c fbf0 4396 5500 ....`I......C.U.
0x0030: 40f5 8282 80b6 4656 5905 00d8 0031 0780 @.....FVY....1..
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.685372 IP (tos 0x0, ttl 64, id 60070, offset 0, flags [DF], proto UDP (17), length 304)
31.186.251.34.27015 > 109.154.115.204.27005: UDP, payload 276
0x0000: 4500 0130 eaa6 4000 4011 52d3 1fba fb22 E..0..@.@.R...."
0x0010: 6d9a 73cc 6987 697d 011c fd70 280a 0100 m.s.i.i}...p(...
0x0020: 032b 0100 20c4 6ecd 045e f41d 4396 5500 .+....n..^..C.U.
0x0030: 40f5 8282 80b6 4652 5905 000c 017c 0780 @.....FRY....|..
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.685456 IP (tos 0x0, ttl 64, id 33517, offset 0, flags [DF], proto UDP (17), length 285)
31.186.251.34.27015 > 46.147.140.17.47467: UDP, payload 257
0x0000: 4500 011d 82ed 4000 4011 e161 1fba fb22 E.....@.@..a..."
0x0010: 2e93 8c11 6987 b96b 0109 d69b 067d 0000 ....i..k.....}..
0x0020: 1e7e 0000 20f5 406c 22b2 d216 4396 5500 .~....@l"...C.U.
0x0030: 40f5 8282 80b6 464e 5905 00d0 00e5 0680 @.....FNY.......
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.685461 IP (tos 0x0, ttl 64, id 29132, offset 0, flags [DF], proto UDP (17), length 299)
31.186.251.34.27015 > 85.139.82.66.27005: UDP, payload 271
0x0000: 4500 012b 71cc 4000 4011 054c 1fba fb22 E..+q.@.@..L..."
0x0010: 558b 5242 6987 697d 0117 c3d2 eb6e 0000 U.RBi.i}.....n..
0x0020: 6477 0000 20bb be6e 759c a7c9 4396 5500 dw.....nu...C.U.
0x0030: 40f5 8282 80b6 4656 5905 0018 0155 0780 @.....FVY....U..
0x0040: 20fb 1bd0 3c90 0220 3ad1 7e3f fbfd f6c0 ....<...:.~?....
0x0050: 63c0 c.
15:50:49.686285 IP (tos 0x0, ttl 118, id 16786, offset 0, flags [none], proto UDP (17), length 81)
85.244.255.73.53745 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 4192 0000 7611 92ef 55f4 ff49 E..QA...v...U..I
0x0010: 1fba fb22 d1f1 6987 003d 796b 6f91 0000 ..."..i..=yko...
0x0020: 6c80 0000 202f 64d6 bfab d04c 49e8 1760 l..../d....LI..`
0x0030: 5b24 0040 2aab 0080 a8d6 b040 af43 7385 [$.@*......@.Cs.
0x0040: 0000 0000 1000 0032 5859 0500 941f 8401 .......2XY......
0x0050: 00 .
15:50:49.687066 IP (tos 0x0, ttl 117, id 6692, offset 0, flags [none], proto UDP (17), length 94)
85.139.82.66.27005 > 31.186.251.34.27015: UDP, payload 66
0x0000: 4500 005e 1a24 0000 7511 68c1 558b 5242 E..^.$..u.h.U.RB
0x0010: 1fba fb22 697d 6987 004a 1e04 6577 0000 ..."i}i..J..ew..
0x0020: e86e 0000 20e4 4cec 759c a7c9 49e8 24e0 .n....L.u...I.$.
0x0030: d81d 0040 2aab 0080 9302 8341 3146 0986 ...@*......A1F..
0x0040: 2100 0200 0088 c606 0000 00d1 d800 0000 !...............
0x0050: 201a ..
15:50:49.691586 IP (tos 0x0, ttl 115, id 24527, offset 0, flags [none], proto UDP (17), length 134)
84.247.164.238.48756 > 31.186.251.34.27015: UDP, payload 106
0x0000: 4500 0086 5fcf 0000 7311 d2d5 54f7 a4ee E..._...s...T...
0x0010: 1fba fb22 be74 6987 0072 00d5 f920 0100 ...".ti..r......
0x0020: 840b 0100 2053 d41e c18c fbf0 49e8 4ce0 .....S......I.L.
0x0030: 3d48 0040 2aab 0080 ee2d 6541 9355 1785 =H.@*....-eA.U..
0x0040: 0800 c461 2c80 0000 00e9 fec3 febb 1002 ...a,...........
0x0050: 0090 ..
15:50:49.691666 IP (tos 0x0, ttl 113, id 20581, offset 0, flags [none], proto UDP (17), length 120)
188.67.108.39.27005 > 31.186.251.34.27015: UDP, payload 92
0x0000: 4500 0078 5065 0000 7111 b5c8 bc43 6c27 E..xPe..q....Cl'
0x0010: 1fba fb22 697d 6987 0064 6c50 074e 0100 ..."i}i..dlP.N..
0x0020: 1829 0100 20a4 c3a4 8a29 d342 49e8 3e60 .).......).BI.>`
0x0030: 8153 00c0 29ab 0080 d9bb 0542 2180 5086 .S..)......B!.P.
0x0040: 2108 0000 0033 00f8 8006 0030 a4d3 40a8 !....3.....0..@.
0x0050: bc8e ..
15:50:49.694425 IP (tos 0x0, ttl 117, id 14249, offset 0, flags [none], proto UDP (17), length 81)
178.94.217.238.12614 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 37a9 0000 7511 66c9 b25e d9ee E..Q7...u.f..^..
0x0010: 1fba fb22 3146 6987 003d 6c41 a9db 0000 ..."1Fi..=lA....
0x0020: c6c2 0000 20e6 fa57 813b ec4d 49e8 17e0 .......W.;.MI...
0x0030: e936 00c0 29ab 0080 9870 d941 7ff5 4985 .6..)....p.A..I.
0x0040: 0100 0000 0000 0030 5459 0500 c832 8401 .......0TY...2..
0x0050: 00 .
15:50:49.695054 IP (tos 0x0, ttl 118, id 3429, offset 0, flags [none], proto UDP (17), length 87)
85.244.251.55.54951 > 31.186.251.34.27015: UDP, payload 59
0x0000: 4500 0057 0d65 0000 7611 cb28 55f4 fb37 E..W.e..v..(U..7
0x0010: 1fba fb22 d6a7 6987 0043 705d 46a1 0000 ..."..i..Cp]F...
0x0020: ac92 0000 2058 0baf a322 0ad5 49e8 1d20 .....X..."..I...
0x0030: 5128 0040 2aab 0080 5708 b041 c3e7 5d84 Q(.@*...W..A..].
0x0040: 0088 0600 0000 d100 0000 201a 0030 5859 .............0XY
0x0050: 0500 ..
15:50:49.695409 IP (tos 0x0, ttl 111, id 5051, offset 0, flags [none], proto UDP (17), length 84)
31.50.222.124.27005 > 31.186.251.34.27015: UDP, payload 56
0x0000: 4500 0054 13bb 0000 6f11 1f53 1f32 de7c E..T....o..S.2.|
0x0010: 1fba fb22 697d 6987 0040 1bf9 8152 0100 ..."i}i..@...R..
0x0020: 302c 0100 30ed 5f74 0107 bab8 ad89 881a 0,..0._t........
0x0030: a09f 5400 402a ab00 8085 29af 40ad 97b5 ..T.@*....).@...
0x0040: 8400 0000 0000 0000 0000 0086 2bab 0000 ............+...
0x0050: 3d8c =.
15:50:49.696553 IP (tos 0x0, ttl 116, id 31638, offset 0, flags [none], proto UDP (17), length 109)
82.21.245.163.27005 > 31.186.251.34.27015: UDP, payload 81
0x0000: 4500 006d 7b96 0000 7411 6854 5215 f5a3 E..m{...t.hTR...
0x0010: 1fba fb22 697d 6987 0059 ac11 0a57 0100 ..."i}i..Y...W..
0x0020: 6530 0100 20df c6fd 7f82 f9f9 49e8 3320 e0..........I.3.
0x0030: c255 00c0 2aab 0080 67e5 56c1 f11e f985 .U..*...g.V.....
0x0040: 0115 01f6 ffeb 0600 706d a72b f83c 64c2 ........pm.+.<d.
0x0050: 30e0 0.
15:50:49.698545 IP (tos 0x0, ttl 115, id 24738, offset 0, flags [none], proto UDP (17), length 102)
84.247.164.238.48575 > 31.186.251.34.27015: UDP, payload 74
0x0000: 4500 0066 60a2 0000 7311 d222 54f7 a4ee E..f`...s.."T...
0x0010: 1fba fb22 bdbf 6987 0052 611c 2c45 0100 ..."..i..Ra.,E..
0x0020: 5b20 0100 20d0 a8ab d8b2 0960 49e8 2ca0 [..........`I.,.
0x0030: 4a51 00c0 2aab 0080 c0cc 0c40 4534 9b85 JQ..*......@E4..
0x0040: 0500 e230 2202 0000 00f7 ff19 8206 0000 ...0"...........
0x0050: 2000 ..
15:50:49.699084 IP (tos 0x0, ttl 116, id 20309, offset 0, flags [none], proto UDP (17), length 109)
82.139.34.166.62144 > 31.186.251.34.27015: UDP, payload 81
0x0000: 4500 006d 4f55 0000 7411 671d 528b 22a6 E..mOU..t.g.R.".
0x0010: 1fba fb22 f2c0 6987 0059 36f4 7256 0100 ..."..i..Y6.rV..
0x0020: a131 0100 2049 7101 db3d b13e 49e8 3320 .1...Iq..=.>I.3.
0x0030: 9c55 00c0 2aab 0080 cfcc 3142 4166 4384 .U..*.....1BAfC.
0x0040: 0183 ff3f 0000 30a2 8546 68da ef83 30e0 ...?..0..Fh...0.
0x0050: dc7f ..
15:50:49.700421 IP (tos 0x0, ttl 118, id 10470, offset 0, flags [none], proto UDP (17), length 98)
46.147.140.17.47467 > 31.186.251.34.27015: UDP, payload 70
0x0000: 4500 0062 28e6 0000 7611 4624 2e93 8c11 E..b(...v.F$....
0x0010: 1fba fb22 b96b 6987 004e 5b29 217e 0000 ...".ki..N[)!~..
0x0020: 037d 0000 20d6 207f 22b2 d216 49e8 28e0 .}......"...I.(.
0x0030: 871f 0040 2aab 0080 0581 0d42 a31c 3c86 ...@*......B..<.
0x0040: 0500 e230 2202 8000 0018 f204 0000 0043 ...0"..........C
0x0050: 9e00 ..
15:50:49.701164 IP (tos 0x0, ttl 111, id 26589, offset 0, flags [none], proto UDP (17), length 97)
109.154.115.204.27005 > 31.186.251.34.27015: UDP, payload 69
0x0000: 4500 0061 67dd 0000 6f11 e76b 6d9a 73cc E..ag...o..km.s.
0x0010: 1fba fb22 697d 6987 004d cba8 052b 0100 ..."i}i..M...+..
0x0020: 260a 0100 208a 4162 045e f41d 49e8 27e0 &.....Ab.^..I.'.
0x0030: c04a 00c0 2aab 0080 03cf 9d3e 8d34 1586 .J..*......>.4..
0x0040: 0500 e230 2202 0000 0000 8000 0000 0004 ...0"...........
0x0050: 0000 ..
15:50:49.701836 IP (tos 0x0, ttl 119, id 5426, offset 0, flags [DF], proto UDP (17), length 81)
80.100.140.100.27005 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 1532 4000 7711 f6c4 5064 8c64 E..Q.2@.w...Pd.d
0x0010: 1fba fb22 697d 6987 003d 0512 beb4 0000 ..."i}i..=......
0x0020: 7ea1 0000 206f 5571 620e a7e0 49e8 1720 ~....oUqb...I...
0x0030: 2f2d 0040 2bab 0080 f97e f540 cd86 5686 /-.@+....~.@..V.
0x0040: 0180 0000 1000 0032 6059 0500 3013 fc05 .......2`Y..0...
0x0050: 00 .
15:50:49.702092 IP (tos 0x0, ttl 116, id 14693, offset 0, flags [none], proto UDP (17), length 101)
80.167.76.221.27005 > 31.186.251.34.27015: UDP, payload 73
0x0000: 4500 0065 3965 0000 7411 54c2 50a7 4cdd E..e9e..t.T.P.L.
0x0010: 1fba fb22 697d 6987 0051 de97 6615 0000 ..."i}i..Q..f...
0x0020: 2212 0000 20a8 70d8 b7a3 247f 49e8 2b20 ".....p...$.I.+.
0x0030: 5905 00c0 2aab 0080 ef1e c5c0 8728 7285 Y...*........(r.
0x0040: 0500 e230 2202 8000 0018 f284 0600 0000 ...0"...........
0x0050: 439e C.
15:50:49.703339 IP (tos 0x0, ttl 119, id 14600, offset 0, flags [none], proto UDP (17), length 81)
95.119.196.175.27005 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 3908 0000 7711 cb90 5f77 c4af E..Q9...w..._w..
0x0010: 1fba fb22 697d 6987 003d d062 7a51 0100 ..."i}i..=.bzQ..
0x0020: 2f2e 0100 20f8 0d85 76fe e275 49e8 1720 /.......v..uI...
0x0030: 5e54 00c0 2aab 0080 17e1 7241 69ff 5886 ^T..*.....rAi.X.
0x0040: 0000 0000 0000 0030 5c59 0500 bc1c 9401 .......0\Y......
0x0050: 00 .
15:50:49.703438 IP (tos 0x0, ttl 114, id 21901, offset 0, flags [none], proto UDP (17), length 85)
173.3.97.214.27005 > 31.186.251.34.27015: UDP, payload 57
0x0000: 4500 0055 558d 0000 7211 c954 ad03 61d6 E..UU...r..T..a.
0x0010: 1fba fb22 697d 6987 0041 1f33 0f50 0100 ..."i}i..A.3.P..
0x0020: fc2c 0100 2006 5b7b e191 150a 49e8 1b60 .,....[{....I..`
0x0030: 0354 00c0 29ab 0080 599a 4d41 e35d a785 .T..)...Y.MA.]..
0x0040: 6100 0000 0000 0000 0000 0030 5459 0500 a..........0TY..
0x0050: ec11 ..
15:50:49.704901 IP (tos 0x0, ttl 121, id 11264, offset 0, flags [none], proto UDP (17), length 116)
84.248.191.250.27005 > 31.186.251.34.27015: UDP, payload 88
0x0000: 4500 0074 2c00 0000 7911 e5a9 54f8 bffa E..t,...y...T...
0x0010: 1fba fb22 697d 6987 0060 deef 2f40 0100 ..."i}i..`../@..
0x0020: 261d 0100 3047 ecb0 0137 b195 b889 883a &...0G...7.....:
0x0030: 200b 5000 402a ab00 803d 0932 41a7 9f03 ..P.@*...=.2A...
0x0040: 8505 00e2 3022 0280 0000 18f2 0400 0000 ....0"..........
0x0050: 439e C.
15:50:49.709007 IP (tos 0x0, ttl 117, id 23680, offset 0, flags [none], proto UDP (17), length 94)
95.147.185.187.27005 > 31.186.251.34.27015: UDP, payload 66
0x0000: 4500 005e 5c80 0000 7511 b4e3 5f93 b9bb E..^\...u..._...
0x0010: 1fba fb22 697d 6987 004a 3ed3 e349 0100 ..."i}i..J>..I..
0x0020: a827 0100 2034 b4c5 7e4d 9cca 49e8 2460 .'...4..~M..I.$`
0x0030: 7852 00c0 2aab 0080 4caf 44c1 8b69 0f86 xR..*...L.D..i..
0x0040: 6100 0000 0088 b606 0000 00d1 d600 0000 a...............
0x0050: 20da ..
15:50:49.711053 IP (tos 0x0, ttl 117, id 6693, offset 0, flags [none], proto UDP (17), length 94)
85.139.82.66.27005 > 31.186.251.34.27015: UDP, payload 66
0x0000: 4500 005e 1a25 0000 7511 68c0 558b 5242 E..^.%..u.h.U.RB
0x0010: 1fba fb22 697d 6987 004a 0082 6677 0000 ..."i}i..J..fw..
0x0020: e96e 0000 2081 65ed 759c a7c9 49e8 2420 .n....e.u...I.$.
0x0030: d91d 00c0 2aab 0080 9302 8341 3146 0986 ....*......A1F..
0x0040: 2100 0200 0088 c606 0000 00d1 d800 0000 !...............
0x0050: 201a ..
15:50:49.713459 IP (tos 0x0, ttl 118, id 3430, offset 0, flags [none], proto UDP (17), length 87)
85.244.251.55.54951 > 31.186.251.34.27015: UDP, payload 59
0x0000: 4500 0057 0d66 0000 7611 cb27 55f4 fb37 E..W.f..v..'U..7
0x0010: 1fba fb22 d6a7 6987 0043 e7bc 47a1 0000 ..."..i..C..G...
0x0020: ad92 0000 203b 19af a322 0ad5 49e8 1d60 .....;..."..I..`
0x0030: 5128 00c0 2aab 0080 5708 b041 c3e7 5d84 Q(..*...W..A..].
0x0040: 0088 0600 0000 d100 0000 201a 0030 5c59 .............0\Y
0x0050: 0500 ..
15:50:49.716066 IP (tos 0x0, ttl 64, id 13938, offset 0, flags [DF], proto UDP (17), length 232)
31.186.251.34.27015 > 82.21.245.163.27005: UDP, payload 204
0x0000: 4500 00e8 3672 4000 4011 a0fd 1fba fb22 E...6r@.@......"
0x0010: 5215 f5a3 6987 697d 00d4 637b 6830 0100 R...i.i}..c{h0..
0x0020: 0a57 0100 20ce 7074 7f82 f9f9 8396 5500 .W....pt......U.
0x0030: 80f5 4282 80b6 465e 5905 00c4 0043 0580 ..B...F^Y....C..
0x0040: 20eb 1b70 3da0 0220 bace 7236 e3fd f6c0 ...p=.....r6....
0x0050: 63c0 c.
15:50:49.716066 IP (tos 0x0, ttl 64, id 18588, offset 0, flags [DF], proto UDP (17), length 611)
31.186.251.34.27015 > 80.167.76.221.27005: UDP, payload 583
0x0000: 4500 0263 489c 4000 4011 378d 1fba fb22 E..cH.@.@.7...."
0x0010: 50a7 4cdd 6987 697d 024f bac1 fdff ffff P.L.i.i}.O......
0x0020: 4c5a 5353 6302 0000 0025 1200 0066 1500 LZSSc....%...f..
0x0030: 0000 a1fd 00b9 b7a3 247f 0072 6301 e93a ........$..rc..:
0x0040: c7b6 0600 0040 80ea bdc7 f656 0051 fdfd .....@.....V.Q..
0x0050: fabe ..
15:50:49.716162 IP (tos 0x0, ttl 64, id 30427, offset 0, flags [DF], proto UDP (17), length 302)
31.186.251.34.27015 > 85.244.251.55.54951: UDP, payload 274
0x0000: 4500 012e 76db 4000 4011 56db 1fba fb22 E...v.@.@.V...."
0x0010: 55f4 fb37 6987 d6a7 011a 6d34 b092 0000 U..7i.....m4....
0x0020: 46a1 0000 205d 63a6 a322 0ad5 8396 5500 F....]c.."....U.
0x0030: 80f5 4282 80b6 465a 5905 0008 01f1 0680 ..B...FZY.......
0x0040: 20eb 1b70 3da0 0220 bace 7236 e3fd f6c0 ...p=.....r6....
0x0050: 63c0 c.
15:50:49.716207 IP (tos 0x0, ttl 64, id 37536, offset 0, flags [DF], proto UDP (17), length 458)
31.186.251.34.27015 > 188.67.108.39.27005: UDP, payload 430
0x0000: 4500 01ca 92a0 4000 4011 633b 1fba fb22 E.....@.@.c;..."
0x0010: bc43 6c27 6987 697d 01b6 450f 1c29 0100 .Cl'i.i}..E..)..
0x0020: 074e 0100 a116 4e01 8a29 d342 4856 8803 .N....N..).BHV..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.716369 IP (tos 0x0, ttl 64, id 60071, offset 0, flags [DF], proto UDP (17), length 395)
31.186.251.34.27015 > 109.154.115.204.27005: UDP, payload 367
0x0000: 4500 018b eaa7 4000 4011 5277 1fba fb22 E.....@.@.Rw..."
0x0010: 6d9a 73cc 6987 697d 0177 fdcb 290a 0100 m.s.i.i}.w..)...
0x0020: 052b 0100 2110 f2cd 045e f41d c84e 8803 .+..!....^...N..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.719479 IP (tos 0x0, ttl 118, id 16787, offset 0, flags [none], proto UDP (17), length 81)
85.244.255.73.53745 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 4193 0000 7611 92ee 55f4 ff49 E..QA...v...U..I
0x0010: 1fba fb22 d1f1 6987 003d 74a5 7091 0000 ..."..i..=t.p...
0x0020: 6d80 0000 20ba 91d6 bfab d04c 49e8 17a0 m..........LI...
0x0030: 5b24 00c0 2aab 0080 a8d6 b040 af43 7385 [$..*......@.Cs.
0x0040: 0080 0000 1000 0032 5c59 0500 681a 8001 .......2\Y..h...
0x0050: 00 .
15:50:49.719911 IP (tos 0x0, ttl 51, id 11830, offset 0, flags [none], proto UDP (17), length 84)
78.216.26.10.27005 > 31.186.251.34.27015: UDP, payload 56
0x0000: 4500 0054 2e36 0000 3311 d5a4 4ed8 1a0a E..T.6..3...N...
0x0010: 1fba fb22 697d 6987 0040 1555 e754 0100 ..."i}i..@.U.T..
0x0020: 732e 0100 305f 4bf7 0189 f876 2f89 881a s...0_K....v/...
0x0030: 2039 5500 402a ab00 80ad 0dcb 41ad 2889 .9U.@*......A.(.
0x0040: 8200 8000 0010 0000 0200 4086 2bab 0080 ..........@.+...
0x0050: 2482 $.
15:50:49.721661 IP (tos 0x0, ttl 113, id 20582, offset 0, flags [none], proto UDP (17), length 113)
188.67.108.39.27005 > 31.186.251.34.27015: UDP, payload 85
0x0000: 4500 0071 5066 0000 7111 b5ce bc43 6c27 E..qPf..q....Cl'
0x0010: 1fba fb22 697d 6987 005d ec62 084e 0100 ..."i}i..].b.N..
0x0020: 1929 0100 20ac cda4 8a29 d342 49e8 37a0 .).......).BI.7.
0x0030: 8153 0040 2aab 0080 219d 0642 e575 5486 .S.@*...!..B.uT.
0x0040: 2108 0000 0065 002a 0088 0600 30cd ef40 !....e.*....0..@
0x0050: e818 ..
15:50:49.722928 IP (tos 0x0, ttl 115, id 17443, offset 0, flags [none], proto UDP (17), length 143)
84.247.164.238.48756 > 31.186.251.34.27015: UDP, payload 115
0x0000: 4500 008f 4423 0000 7311 ee78 54f7 a4ee E...D#..s..xT...
0x0010: 1fba fb22 be74 6987 007b de0c fa20 0100 ...".ti..{......
0x0020: 850b 0100 204f 7a1e c18c fbf0 49e8 5520 .....Oz.....I.U.
0x0030: 3e48 00c0 2aab 0080 9c75 3e41 4b74 2c85 >H..*....u>AKt,.
0x0040: 0800 c461 2c80 0000 0039 ff8b ff1b 0200 ...a,....9......
0x0050: 3076 0v
15:50:49.724062 IP (tos 0x0, ttl 111, id 26590, offset 0, flags [none], proto UDP (17), length 87)
109.154.115.204.27005 > 31.186.251.34.27015: UDP, payload 59
0x0000: 4500 0057 67de 0000 6f11 e774 6d9a 73cc E..Wg...o..tm.s.
0x0010: 1fba fb22 697d 6987 0043 9deb 062b 0100 ..."i}i..C...+..
0x0020: 260a 0100 207a ca62 045e f41d 49e8 1d20 &....z.b.^..I...
0x0030: c14a 0040 2bab 0080 03cf 9d3e 8d34 1586 .J.@+......>.4..
0x0040: 0100 0000 00fc 6854 1806 f4ff 0730 5c59 ......hT.....0\Y
0x0050: 0500 ..
15:50:49.725080 IP (tos 0x0, ttl 116, id 31639, offset 0, flags [none], proto UDP (17), length 111)
82.21.245.163.27005 > 31.186.251.34.27015: UDP, payload 83
0x0000: 4500 006f 7b97 0000 7411 6851 5215 f5a3 E..o{...t.hQR...
0x0010: 1fba fb22 697d 6987 005b 3bab 0b57 0100 ..."i}i..[;..W..
0x0020: 6630 0100 208b 68fd 7f82 f9f9 49e8 3560 f0....h.....I.5`
0x0030: c255 0040 2bab 0080 6b3b 5dc1 e721 1386 .U.@+...k;]..!..
0x0040: 01f7 00f6 ffeb 0600 2053 3dc4 30e0 18c0 .........S=.0...
0x0050: 0000 ..
15:50:49.726857 IP (tos 0x0, ttl 117, id 14250, offset 0, flags [none], proto UDP (17), length 81)
178.94.217.238.12614 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 37aa 0000 7511 66c8 b25e d9ee E..Q7...u.f..^..
0x0010: 1fba fb22 3146 6987 003d 2449 aadb 0000 ..."1Fi..=$I....
0x0020: c7c2 0000 201f 2c57 813b ec4d 49e8 1720 ......,W.;.MI...
0x0030: ea36 0040 2aab 0080 9870 d941 7ff5 4985 .6.@*....p.A..I.
0x0040: 0100 0000 0000 0030 5859 0500 d832 8401 .......0XY...2..
0x0050: 00 .
15:50:49.728426 IP (tos 0x0, ttl 116, id 14694, offset 0, flags [none], proto UDP (17), length 102)
80.167.76.221.27005 > 31.186.251.34.27015: UDP, payload 74
0x0000: 4500 0066 3966 0000 7411 54c0 50a7 4cdd E..f9f..t.T.P.L.
0x0010: 1fba fb22 697d 6987 0052 c4ae 6715 0000 ..."i}i..R..g...
0x0020: 2312 0000 2003 08da b7a3 247f 49e8 2c60 #.........$.I.,`
0x0030: 5905 0040 2bab 0080 ef1e c5c0 8728 7285 Y..@+........(r.
0x0040: 0500 e230 2202 8000 0018 f284 0600 0000 ...0"...........
0x0050: 439e C.
15:50:49.731290 IP (tos 0x0, ttl 116, id 20310, offset 0, flags [none], proto UDP (17), length 109)
82.139.34.166.62144 > 31.186.251.34.27015: UDP, payload 81
0x0000: 4500 006d 4f56 0000 7411 671c 528b 22a6 E..mOV..t.g.R.".
0x0010: 1fba fb22 f2c0 6987 0059 3fc9 7356 0100 ..."..i..Y?.sV..
0x0020: a231 0100 20e0 b901 db3d b13e 49e8 3360 .1.......=.>I.3`
0x0030: 9c55 0040 2bab 0080 112d 3442 d37e 1f84 .U.@+....-4B.~..
0x0040: 01e7 fe33 0000 90b4 2846 a895 5a79 30e0 ...3....(F..Zy0.
0x0050: d0ff ..
15:50:49.731651 IP (tos 0x0, ttl 114, id 20274, offset 0, flags [none], proto UDP (17), length 53)
109.30.146.94.55761 > 31.186.251.34.27015: UDP, payload 25
0x0000: 4500 0035 4f32 0000 7211 df2c 6d1e 925e E..5O2..r..,m..^
0x0010: 1fba fb22 d9d1 6987 0021 e33f ffff ffff ..."..i..!.?....
0x0020: 5453 6f75 7263 6520 456e 6769 6e65 2051 TSource.Engine.Q
0x0030: 7565 7279 00 uery.
15:50:49.732754 IP (tos 0x0, ttl 121, id 11265, offset 0, flags [none], proto UDP (17), length 125)
84.248.191.250.27005 > 31.186.251.34.27015: UDP, payload 97
0x0000: 4500 007d 2c01 0000 7911 e59f 54f8 bffa E..},...y...T...
0x0010: 1fba fb22 697d 6987 0069 3125 3040 0100 ..."i}i..i1%0@..
0x0020: 271d 0100 2025 65b0 37b1 95b8 49e8 43a0 '....%e.7...I.C.
0x0030: 0b50 0040 2bab 0080 3d09 3241 a79f 0385 .P.@+...=.2A....
0x0040: 0500 e230 2202 8000 00f8 0400 50c3 e826 ...0".......P..&
0x0050: 2815 (.
15:50:49.733040 IP (tos 0x0, ttl 64, id 951, offset 0, flags [DF], proto UDP (17), length 161)
31.186.251.34.27015 > 109.30.146.94.55761: UDP, payload 133
0x0000: 4500 00a1 03b7 4000 4011 1c3c 1fba fb22 E.....@.@..<..."
0x0010: 6d1e 925e 6987 d9d1 008d 1af8 ffff ffff m..^i...........
0x0020: 4911 4654 4720 4261 7365 7761 7273 207c I.FTG.Basewars.|
0x0030: 2042 616e 6763 6c61 7720 7c20 4f72 6967 .Bangclaw.|.Orig
0x0040: 696e 616c 207c 2046 756e 207c 2023 3100 inal.|.Fun.|.#1.
0x0050: 7270 rp
15:50:49.735439 IP (tos 0x0, ttl 114, id 26504, offset 0, flags [none], proto UDP (17), length 84)
213.122.93.146.27005 > 31.186.251.34.27015: UDP, payload 56
0x0000: 4500 0054 6788 0000 7211 9327 d57a 5d92 E..Tg...r..'.z].
0x0010: 1fba fb22 697d 6987 0040 a5fb ded3 0000 ..."i}i..@......
0x0020: 79bc 0000 308d 3ce0 0112 5a3a 2c89 881a y...0.<...Z:,...
0x0030: e0f6 3400 402b ab00 80b5 f584 41d3 e224 ..4.@+......A..$
0x0040: 8601 0000 0000 0000 0000 0086 2cab 0080 ............,...
0x0050: 970c ..
15:50:49.736130 IP (tos 0x0, ttl 114, id 25103, offset 0, flags [none], proto UDP (17), length 112)
62.31.50.118.27005 > 31.186.251.34.27015: UDP, payload 84
0x0000: 4500 0070 620f 0000 7211 5afc 3e1f 3276 E..pb...r.Z.>.2v
0x0010: 1fba fb22 697d 6987 005c 922d ba58 0100 ..."i}i..\.-.X..
0x0020: 0232 0100 30e1 2c52 016c 3283 f789 8836 .2..0.,R.l2....6
0x0030: e02d 5600 c02a ab00 80cc 1e12 42d5 7bf7 .-V..*......B.{.
0x0040: 8200 0e00 0050 4c4c 4208 0000 e6ed 5008 .....PLLB.....P.
0x0050: a57c .|
15:50:49.737688 IP (tos 0x0, ttl 119, id 14601, offset 0, flags [none], proto UDP (17), length 81)
95.119.196.175.27005 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 3909 0000 7711 cb8f 5f77 c4af E..Q9...w..._w..
0x0010: 1fba fb22 697d 6987 003d cf4a 7b51 0100 ..."i}i..=.J{Q..
0x0020: 2f2e 0100 2051 9185 76fe e275 49e8 1760 /....Q..v..uI..`
0x0030: 5e54 0040 2bab 0080 17e1 7241 69ff 5886 ^T.@+.....rAi.X.
0x0040: 0000 0000 0000 0030 5c59 0500 3c1b 9001 .......0\Y..<...
0x0050: 00 .
15:50:49.739206 IP (tos 0x0, ttl 117, id 6694, offset 0, flags [none], proto UDP (17), length 106)
85.139.82.66.27005 > 31.186.251.34.27015: UDP, payload 78
0x0000: 4500 006a 1a26 0000 7511 68b3 558b 5242 E..j.&..u.h.U.RB
0x0010: 1fba fb22 697d 6987 0056 3f59 6777 0000 ..."i}i..V?Ygw..
0x0020: ea6e 0000 2006 85ed 759c a7c9 49e8 3060 .n......u...I.0`
0x0030: d91d 0040 2bab 0080 9302 8341 3146 0986 ...@+......A1F..
0x0040: 2100 0200 0088 c606 0000 00d1 d800 002e !...............
0x0050: 8508 ..
15:50:49.739680 IP (tos 0x0, ttl 118, id 10473, offset 0, flags [none], proto UDP (17), length 98)
46.147.140.17.47467 > 31.186.251.34.27015: UDP, payload 70
0x0000: 4500 0062 28e9 0000 7611 4621 2e93 8c11 E..b(...v.F!....
0x0010: 1fba fb22 b96b 6987 004e bb1c 227e 0000 ...".ki..N.."~..
0x0020: 047d 0000 2062 be7f 22b2 d216 49e8 2820 .}...b.."...I.(.
0x0030: 881f 00c0 2aab 0080 0581 0d42 a31c 3c86 ....*......B..<.
0x0040: 0500 e230 2202 8000 0018 f204 0000 0043 ...0"..........C
0x0050: 9e00 ..
15:50:49.739834 IP (tos 0x0, ttl 114, id 21902, offset 0, flags [none], proto UDP (17), length 85)
173.3.97.214.27005 > 31.186.251.34.27015: UDP, payload 57
0x0000: 4500 0055 558e 0000 7211 c953 ad03 61d6 E..UU...r..S..a.
0x0010: 1fba fb22 697d 6987 0041 05c0 1050 0100 ..."i}i..A...P..
0x0020: fd2c 0100 20ba ad7a e191 150a 49e8 1ba0 .,.....z....I...
0x0030: 0354 0040 2aab 0080 599a 4d41 e35d a785 .T.@*...Y.MA.]..
0x0040: 6100 0000 0000 0000 0000 0030 5859 0500 a..........0XY..
0x0050: c011 ..
15:50:49.742046 IP (tos 0x0, ttl 118, id 28738, offset 0, flags [none], proto UDP (17), length 146)
46.147.136.4.7799 > 31.186.251.34.27015: UDP, payload 118
0x0000: 4500 0092 7042 0000 7611 02a5 2e93 8804 E...pB..v.......
0x0010: 1fba fb22 1e77 6987 007e d146 4c6f 0000 ...".wi..~.FLo..
0x0020: f461 0000 308a 7c83 0137 0911 8d89 8858 .a..0.|..7.....X
0x0030: 60d2 1b00 402a ab00 8082 192d 41f1 f8c4 `...@*.....-A...
0x0040: 8505 00e2 3022 0280 0000 f5ff 1700 18f2 ....0"..........
0x0050: 8406 ..
15:50:49.747589 IP (tos 0x0, ttl 64, id 6751, offset 0, flags [DF], proto UDP (17), length 330)
31.186.251.34.27015 > 82.139.34.166.62144: UDP, payload 302
0x0000: 4500 014a 1a5f 4000 4011 8f36 1fba fb22 E..J._@.@..6..."
0x0010: 528b 22a6 6987 f2c0 0136 9155 a431 0100 R.".i....6.U.1..
0x0020: 7356 0100 a084 3c0a db3d b13e c396 5500 sV....<..=.>..U.
0x0030: c0f5 4282 80b6 4662 5905 0014 0136 0780 ..B...FbY....6..
0x0040: 20c3 6515 0090 bacd ac00 88ae b39c cd78 ..e............x
0x0050: bf3d .=
15:50:49.747707 IP (tos 0x0, ttl 64, id 21467, offset 0, flags [DF], proto UDP (17), length 323)
31.186.251.34.27015 > 46.147.136.4.7799: UDP, payload 295
0x0000: 4500 0143 53db 4000 4011 145b 1fba fb22 E..CS.@.@..[..."
0x0010: 2e93 8804 6987 1e77 012f d2b4 f761 0000 ....i..w./...a..
0x0020: 4a6f 0000 2153 d500 3709 118d c84e 8803 Jo..!S..7....N..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.747738 IP (tos 0x0, ttl 64, id 25249, offset 0, flags [DF], proto UDP (17), length 383)
31.186.251.34.27015 > 62.31.50.118.27005: UDP, payload 355
0x0000: 4500 017f 62a1 4000 4011 4b5b 1fba fb22 E...b.@.@.K[..."
0x0010: 3e1f 3276 6987 697d 016b 8cee 0432 0100 >.2vi.i}.k...2..
0x0020: b858 0100 a1ed 5a79 6c32 83f7 0849 8803 .X....Zyl2...I..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f80 ?.
15:50:49.747833 IP (tos 0x0, ttl 64, id 65004, offset 0, flags [DF], proto UDP (17), length 291)
31.186.251.34.27015 > 95.119.196.175.27005: UDP, payload 263
0x0000: 4500 0123 fdec 4000 4011 fcd9 1fba fb22 E..#..@.@......"
0x0010: 5f77 c4af 6987 697d 010f 4024 322e 0100 _w..i.i}..@$2...
0x0020: 7a51 0100 20ee c01e 76fe e275 c396 5500 zQ......v..u..U.
0x0030: c0f5 4282 80b6 465e 5905 00d4 00a0 0580 ..B...F^Y.......
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.747891 IP (tos 0x0, ttl 64, id 18614, offset 0, flags [DF], proto UDP (17), length 568)
31.186.251.34.27015 > 80.167.76.221.27005: UDP, payload 540
0x0000: 4500 0238 48b6 4000 4011 379e 1fba fb22 E..8H.@.@.7...."
0x0010: 50a7 4cdd 6987 697d 0224 ba96 fdff ffff P.L.i.i}.$......
0x0020: 4c5a 5353 5702 0000 0026 1200 0067 1500 LZSSW....&...g..
0x0030: 0000 21cc a5b9 b7a3 247f 00b1 6301 19cf ..!.....$...c...
0x0040: 0240 b800 e2f6 f717 090b 46a9 00ea f51a .@........F.....
0x0050: 1b84 ..
15:50:49.747923 IP (tos 0x0, ttl 64, id 54195, offset 0, flags [DF], proto UDP (17), length 367)
31.186.251.34.27015 > 178.94.217.238.12614: UDP, payload 339
0x0000: 4500 016f d3b3 4000 4011 bea0 1fba fb22 E..o..@.@......"
0x0010: b25e d9ee 6987 3146 015b a896 cbc2 0000 .^..i.1F.[......
0x0020: aadb 0000 212b 3601 813b ec4d c84e 8803 ....!+6..;.M.N..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.748001 IP (tos 0x0, ttl 64, id 54740, offset 0, flags [DF], proto UDP (17), length 240)
31.186.251.34.27015 > 173.3.97.214.27005: UDP, payload 212
0x0000: 4500 00f0 d5d4 4000 4011 3a72 1fba fb22 E.....@.@.:r..."
0x0010: ad03 61d6 6987 697d 00dc 2aa4 012d 0100 ..a.i.i}..*..-..
0x0020: 0f50 0100 20e7 9301 e191 150a c396 5500 .P............U.
0x0030: c0f5 4282 80b6 4656 5905 00c4 0083 0580 ..B...FVY.......
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748026 IP (tos 0x0, ttl 64, id 39653, offset 0, flags [DF], proto UDP (17), length 372)
31.186.251.34.27015 > 80.100.140.100.27005: UDP, payload 344
0x0000: 4500 0174 9ae5 4000 4011 a6ee 1fba fb22 E..t..@.@......"
0x0010: 5064 8c64 6987 697d 0160 f916 80a1 0000 Pd.di.i}.`......
0x0020: beb4 0000 a1b9 1de5 620e a7e0 0849 8803 ........b....I..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f80 ?.
15:50:49.748086 IP (tos 0x0, ttl 64, id 13964, offset 0, flags [DF], proto UDP (17), length 236)
31.186.251.34.27015 > 82.21.245.163.27005: UDP, payload 208
0x0000: 4500 00ec 368c 4000 4011 a0df 1fba fb22 E...6.@.@......"
0x0010: 5215 f5a3 6987 697d 00d8 637f 6930 0100 R...i.i}..c.i0..
0x0020: 0b57 0100 2082 1d74 7f82 f9f9 c396 5500 .W.....t......U.
0x0030: c0f5 4282 80b6 4662 5905 00c4 0063 0580 ..B...FbY....c..
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748136 IP (tos 0x0, ttl 64, id 30449, offset 0, flags [DF], proto UDP (17), length 296)
31.186.251.34.27015 > 85.244.251.55.54951: UDP, payload 268
0x0000: 4500 0128 76f1 4000 4011 56cb 1fba fb22 E..(v.@.@.V...."
0x0010: 55f4 fb37 6987 d6a7 0114 6d2e b192 0000 U..7i.....m.....
0x0020: 47a1 0000 a055 98a6 a322 0ad5 c396 5500 G....U..."....U.
0x0030: c0f5 4282 80b6 465e 5905 0008 01c2 0680 ..B...F^Y.......
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748189 IP (tos 0x0, ttl 64, id 37565, offset 0, flags [DF], proto UDP (17), length 312)
31.186.251.34.27015 > 188.67.108.39.27005: UDP, payload 284
0x0000: 4500 0138 92bd 4000 4011 63b0 1fba fb22 E..8..@.@.c...."
0x0010: bc43 6c27 6987 697d 0124 447d 1d29 0100 .Cl'i.i}.$D}.)..
0x0020: 084e 0100 20e6 6601 8a29 d342 c396 5500 .N....f..).B..U.
0x0030: c0f5 4282 80b6 465a 5905 00fc 00bd 0780 ..B...FZY.......
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748285 IP (tos 0x0, ttl 64, id 122, offset 0, flags [DF], proto UDP (17), length 386)
31.186.251.34.27015 > 78.216.26.10.27005: UDP, payload 358
0x0000: 4500 0182 007a 4000 4011 b532 1fba fb22 E....z@.@..2..."
0x0010: 4ed8 1a0a 6987 697d 016e 853e 762e 0100 N...i.i}.n.>v...
0x0020: e754 0100 21f3 7301 89f8 762f c84b 8803 .T..!.s...v/.K..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.748325 IP (tos 0x0, ttl 64, id 43919, offset 0, flags [DF], proto UDP (17), length 393)
31.186.251.34.27015 > 85.244.255.73.53745: UDP, payload 365
0x0000: 4500 0189 ab8f 4000 4011 1dba 1fba fb22 E.....@.@......"
0x0010: 55f4 ff49 6987 d1f1 0175 71a1 7080 0000 U..Ii....uq.p...
0x0020: 7091 0000 619d 2800 bfab d04c c84b 8803 p...a.(....L.K..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.748441 IP (tos 0x0, ttl 64, id 24371, offset 0, flags [DF], proto UDP (17), length 393)
31.186.251.34.27015 > 31.50.222.124.27005: UDP, payload 365
0x0000: 4500 0189 5f33 4000 4011 c1a5 1fba fb22 E..._3@.@......"
0x0010: 1f32 de7c 6987 697d 0175 1a12 332c 0100 .2.|i.i}.u..3,..
0x0020: 8152 0100 a0e3 50f8 07ba b8ad c396 5500 .R....P.......U.
0x0030: c0f5 4282 80b6 465e 5905 003c 01cb 0980 ..B...F^Y..<....
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748489 IP (tos 0x0, ttl 64, id 57126, offset 0, flags [DF], proto UDP (17), length 354)
31.186.251.34.27015 > 82.47.166.43.27005: UDP, payload 326
0x0000: 4500 0162 df26 4000 4011 472d 1fba fb22 E..b.&@.@.G-..."
0x0010: 522f a62b 6987 697d 014e 1497 2b2b 0100 R/.+i.i}.N..++..
0x0020: 7e4c 0100 200e bf00 6d3d d1c2 c396 5500 ~L......m=....U.
0x0030: c0f5 4282 80b6 464e 5905 0010 0192 0780 ..B...FNY.......
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748566 IP (tos 0x0, ttl 64, id 10216, offset 0, flags [DF], proto UDP (17), length 322)
31.186.251.34.27015 > 95.147.185.187.27005: UDP, payload 294
0x0000: 4500 0142 27e8 4000 4011 dd97 1fba fb22 E..B'.@.@......"
0x0010: 5f93 b9bb 6987 697d 012e 356b ab27 0100 _...i.i}..5k.'..
0x0020: e349 0100 20ec fc01 7e4d 9cca c396 5500 .I......~M....U.
0x0030: c0f5 4282 80b6 465e 5905 00e4 0085 0680 ..B...F^Y.......
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748596 IP (tos 0x0, ttl 64, id 54889, offset 0, flags [DF], proto UDP (17), length 359)
31.186.251.34.27015 > 84.247.164.238.48575: UDP, payload 331
0x0000: 4500 0167 d669 4000 4011 4e5a 1fba fb22 E..g.i@.@.NZ..."
0x0010: 54f7 a4ee 6987 bdbf 0153 1627 5e20 0100 T...i....S.'^...
0x0020: 2c45 0100 2181 6000 d8b2 0960 c84b 8803 ,E..!.`....`.K..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.748705 IP (tos 0x0, ttl 64, id 28955, offset 0, flags [DF], proto UDP (17), length 378)
31.186.251.34.27015 > 213.122.93.146.27005: UDP, payload 350
0x0000: 4500 017a 711b 4000 4011 7a6e 1fba fb22 E..zq.@.@.zn..."
0x0010: d57a 5d92 6987 697d 0166 4f61 7abc 0000 .z].i.i}.fOaz...
0x0020: dcd3 0000 a08f 8700 125a 3a2c c396 5500 .........Z:,..U.
0x0030: c0f5 4282 80b6 465e 5905 0038 0104 0980 ..B...F^Y..8....
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748714 IP (tos 0x0, ttl 64, id 14658, offset 0, flags [DF], proto UDP (17), length 410)
31.186.251.34.27015 > 84.248.191.250.27005: UDP, payload 382
0x0000: 4500 019a 3942 4000 4011 d041 1fba fb22 E...9B@.@..A..."
0x0010: 54f8 bffa 6987 697d 0186 3167 291d 0100 T...i.i}..1g)...
0x0020: 3040 0100 2182 8ee4 37b1 95b8 0849 8803 0@..!...7....I..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f80 ?.
15:50:49.748820 IP (tos 0x0, ttl 64, id 54890, offset 0, flags [DF], proto UDP (17), length 311)
31.186.251.34.27015 > 84.247.164.238.48756: UDP, payload 283
0x0000: 4500 0137 d66a 4000 4011 4e89 1fba fb22 E..7.j@.@.N...."
0x0010: 54f7 a4ee 6987 be74 0123 15f7 880b 0100 T...i..t.#......
0x0020: fa20 0100 20ae 3201 c18c fbf0 c396 5500 ......2.......U.
0x0030: c0f5 4282 80b6 465e 5905 00d8 003e 0780 ..B...F^Y....>..
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.748919 IP (tos 0x0, ttl 118, id 3431, offset 0, flags [none], proto UDP (17), length 87)
85.244.251.55.54951 > 31.186.251.34.27015: UDP, payload 59
0x0000: 4500 0057 0d67 0000 7611 cb26 55f4 fb37 E..W.g..v..&U..7
0x0010: 1fba fb22 d6a7 6987 0043 eaad 48a1 0000 ..."..i..C..H...
0x0020: ae92 0000 208e a3af a322 0ad5 49e8 1da0 ........."..I...
0x0030: 5128 0040 2bab 0080 5708 b041 c3e7 5d84 Q(.@+...W..A..].
0x0040: 0088 0600 0000 d100 0000 201a 0030 6059 .............0`Y
0x0050: 0500 ..
15:50:49.748938 IP (tos 0x0, ttl 64, id 29134, offset 0, flags [DF], proto UDP (17), length 355)
31.186.251.34.27015 > 85.139.82.66.27005: UDP, payload 327
0x0000: 4500 0163 71ce 4000 4011 0512 1fba fb22 E..cq.@.@......"
0x0010: 558b 5242 6987 697d 014f c40a ec6e 0000 U.RBi.i}.O...n..
0x0020: 6677 0000 2174 796e 759c a7c9 0849 8803 fw..!tynu....I..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f80 ?.
15:50:49.748964 IP (tos 0x0, ttl 64, id 60085, offset 0, flags [DF], proto UDP (17), length 338)
31.186.251.34.27015 > 109.154.115.204.27005: UDP, payload 310
0x0000: 4500 0152 eab5 4000 4011 52a2 1fba fb22 E..R..@.@.R...."
0x0010: 6d9a 73cc 6987 697d 013e fd92 2a0a 0100 m.s.i.i}.>..*...
0x0020: 062b 0100 201a a6cd 045e f41d c396 5500 .+.......^....U.
0x0030: c0f5 4282 80b6 465e 5905 004c 0117 0880 ..B...F^Y..L....
0x0040: 207b 1b90 3eb0 0220 bace 7236 e3fd f6c0 .{..>.....r6....
0x0050: 63c0 c.
15:50:49.749037 IP (tos 0x0, ttl 64, id 33524, offset 0, flags [DF], proto UDP (17), length 330)
31.186.251.34.27015 > 46.147.140.17.47467: UDP, payload 302
0x0000: 4500 014a 82f4 4000 4011 e12d 1fba fb22 E..J..@.@..-..."
0x0010: 2e93 8c11 6987 b96b 0136 d6c8 077d 0000 ....i..k.6...}..
0x0020: 217e 0000 613a 436c 22b2 d216 c84b 8803 !~..a:Cl"....K..
0x0030: 0000 00b0 0300 0000 f813 e200 0000 00ec ................
0x0040: 0000 0000 fe84 3800 0000 003b 0000 0080 ......8....;....
0x0050: 3f21 ?!
15:50:49.749503 IP (tos 0x0, ttl 51, id 11835, offset 0, flags [none], proto UDP (17), length 81)
78.216.26.10.27005 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 2e3b 0000 3311 d5a2 4ed8 1a0a E..Q.;..3...N...
0x0010: 1fba fb22 697d 6987 003d 6a48 e854 0100 ..."i}i..=jH.T..
0x0020: 742e 0100 2065 1ef7 89f8 762f 49e8 17a0 t....e....v/I...
0x0030: 3955 0040 2bab 0080 ad0d cb41 ad28 8982 9U.@+......A.(..
0x0040: 0080 0000 1000 0032 6059 0500 dc10 d800 .......2`Y......
0x0050: 00 .
15:50:49.749776 IP (tos 0x0, ttl 117, id 23681, offset 0, flags [none], proto UDP (17), length 106)
95.147.185.187.27005 > 31.186.251.34.27015: UDP, payload 78
0x0000: 4500 006a 5c81 0000 7511 b4d6 5f93 b9bb E..j\...u..._...
0x0010: 1fba fb22 697d 6987 0056 309f e449 0100 ..."i}i..V0..I..
0x0020: a927 0100 20f9 e2c5 7e4d 9cca 49e8 30a0 .'......~M..I.0.
0x0030: 7852 0040 2bab 0080 4caf 44c1 8b69 0f86 xR.@+...L.D..i..
0x0040: 6100 0000 0088 b606 0000 00d1 d600 000e a...............
0x0050: cbcf ..
15:50:49.751659 IP (tos 0x0, ttl 113, id 20583, offset 0, flags [none], proto UDP (17), length 99)
188.67.108.39.27005 > 31.186.251.34.27015: UDP, payload 71
0x0000: 4500 0063 5067 0000 7111 b5db bc43 6c27 E..cPg..q....Cl'
0x0010: 1fba fb22 697d 6987 004f d0bf 094e 0100 ..."i}i..O...N..
0x0020: 1929 0100 2078 c7a4 8a29 d342 49e8 29e0 .)...x...).BI.).
0x0030: 8153 00c0 2aab 0080 697e 0742 c770 5686 .S..*...i~.B.pV.
0x0040: 2108 0000 0015 0088 0600 0004 0000 0020 !...............
0x0050: 0000 ..
15:50:49.756260 IP (tos 0x0, ttl 118, id 16788, offset 0, flags [none], proto UDP (17), length 81)
85.244.255.73.53745 > 31.186.251.34.27015: UDP, payload 53
0x0000: 4500 0051 4194 0000 7611 92ed 55f4 ff49 E..QA...v...U..I
0x0010: 1fba fb22 d1f1 6987 003d bf34 7191 0000 ..."..i..=.4q...
0x0020: 6e80 0000 206b 68d6 bfab d04c 49e8 17e0 n....kh....LI...
0x0030: 5b24 0040 2bab 0080 a8d6 b040 af43 7385 [$.@+......@.Cs.
0x0040: 0080 0000 1000 0032 6059 0500 401a 8001 .......2`Y..@...
0x0050: 00 .
15:50:49.756682 IP (tos 0x0, ttl 116, id 20311, offset 0, flags [none], proto UDP (17), length 109)
82.139.34.166.62144 > 31.186.251.34.27015: UDP, payload 81
0x0000: 4500 006d 4f57 0000 7411 671b 528b 22a6 E..mOW..t.g.R.".
0x0010: 1fba fb22 f2c0 6987 0059 2f73 7456 0100 ..."..i..Y/stV..
0x0020: a331 0100 2070 0f00 db3d b13e 49e8 33a0 .1...p...=.>I.3.
0x0030: 9c55 00c0 2bab 0080 a445 3142 add4 ca83 .U..+....E1B....
0x0040: 0187 fe4f ff03 d0c2 9543 2885 0260 30a0 ...O.....C(..`0.
0x0050: b0ff ..
15:50:49.757510 IP (tos 0x0, ttl 111, id 5055, offset 0, flags [none], proto UDP (17), length 84)
31.50.222.124.27005 > 31.186.251.34.27015: UDP, payload 56
0x0000: 4500 0054 13bf 0000 6f11 1f4f 1f32 de7c E..T....o..O.2.|
0x0010: 1fba fb22 697d 6987 0040 ce6c 8352 0100 ..."i}i..@.l.R..
0x0020: 322c 0100 3077 1675 0107 bab8 ad89 881a 2,..0w.u........
0x0030: 20a0 5400 402b ab00 8085 29af 40ad 97b5 ..T.@+....).@...
0x0040: 8400 0000 0000 0000 0000 0086 2cab 0080 ............,...
0x0050: 4f0c O.
15:50:49.757515 IP (tos 0x0, ttl 116, id 31640, offset 0, flags [none], proto UDP (17), length 115)
82.21.245.163.27005 > 31.186.251.34.27015: UDP, payload 87
0x0000: 4500 0073 7b98 0000 7411 684c 5215 f5a3 E..s{...t.hLR...
0x0010: 1fba fb22 697d 6987 005f 20cc 0c57 0100 ..."i}i.._...W..
0x0020: 6730 0100 20ea e4fc 7f82 f9f9 49e8 39a0 g0..........I.9.
0x0030: c255 00c0 2bab 0080 6b3b 5dc1 99ea 2186 .U..+...k;]...!.
0x0040: 01c7 0006 00e8 0600 7017 992a 780b c4c5 ........p..*x...
0x0050: 30a0 0.
15:50:49.758080 IP (tos 0x0, ttl 115, id 4581, offset 0, flags [none], proto UDP (17), length 127)
84.247.164.238.48756 > 31.186.251.34.27015: UDP, payload 99
0x0000: 4500 007f 11e5 0000 7311 20c7 54f7 a4ee E.......s...T...
0x0010: 1fba fb22 be74 6987 006b 0baa fb20 0100 ...".ti..k......
0x0020: 870b 0100 20dd 111f c18c fbf0 49e8 4560 ............I.E`
0x0030: 3e48 0040 2bab 0080 b123 3241 5f22 3685 >H.@+....#2A_"6.
0x0040: 0400 e22c 0a00 c461 2c82 0000 00ed ffef ...,...a,.......
0x0050: ff1b ..
15:50:49.759564 IP (tos 0x0, ttl 114, id 21903, offset 0, flags [none], proto UDP (17), length 85)
173.3.97.214.27005 > 31.186.251.34.27015: UDP, payload 57
0x0000: 4500 0055 558f 0000 7211 c952 ad03 61d6 E..UU...r..R..a.
0x0010: 1fba fb22 697d 6987 0041 0f21 1150 0100 ..."i}i..A.!.P..
0x0020: fe2c 0100 2099 757a e191 150a 49e8 1be0 .,....uz....I...
0x0030: 0354 00c0 2aab 0080 599a 4d41 e35d a785 .T..*...Y.MA.]..
0x0040: 6100 0000 0000 0000 0000 0030 5c59 0500 a..........0\Y..
0x0050: e811 ..
15:50:49.760036 IP (tos 0x0, ttl 114, id 25104, offset 0, flags [none], proto UDP (17), length 103)
62.31.50.118.27005 > 31.186.251.34.27015: UDP, payload 75
0x0000: 4500 0067 6210 0000 7211 5b04 3e1f 3276 E..gb...r.[.>.2v
0x0010: 1fba fb22 697d 6987 0053 7672 bb58 0100 ..."i}i..Svr.X..
0x0020: 0232 0100 209c 0252 6c32 83f7 49e8 2d60 .2.....Rl2..I.-`
0x0030: 2e56 00c0 2bab 0080 793b 1442 295f f582 .V..+...y;.B)_..
0x0040: 0007 004a 0000 b0ac b142 a84f 685e 10c0 ...J.....B.Oh^..
0x0050: 0700 ..
15:50:49.760817 IP (tos 0x0, ttl 121, id 11266, offset 0, flags [none], proto UDP (17), length 125)
84.248.191.250.27005 > 31.186.251.34.27015: UDP, payload 97
0x0000: 4500 007d 2c02 0000 7911 e59e 54f8 bffa E..},...y...T...
0x0010: 1fba fb22 697d 6987 0069 c81e 3140 0100 ..."i}i..i..1@..
0x0020: 281d 0100 200d bdb0 37b1 95b8 49e8 43e0 (.......7...I.C.
0x0030: 0b50 00c0 2bab 0080 1a46 3741 a9f8 0b85 .P..+....F7A....
0x0040: 0500 e230 2202 8000 0035 000e 00f8 0400 ...0"....5......
0x0050: 1046 .F
100 packets captured
1336 packets received by filter
0 packets dropped by kernel

[soja]

I don't see an attack in that capture, are you sure you are being (D)DoS attacked? Are you using a managed dedi/VDS, if so are you seeing bandwidth spikes when the server goes down?