DOS attack traffic captured, now what?

Ask questions about dedicated servers here and we and other users will do our best to answer them. Please also refer to the self-help section for tutorials and answers to the most commonly asked questions.
Post Reply
garbitos
New to forums
New to forums
Posts: 14
https://www.youtube.com/channel/UC40BgXanDqOYoVCYFDSTfHA
Joined: Fri Apr 20, 2012 1:43 pm

DOS attack traffic captured, now what?

Post by garbitos »

tcpdump: WARNING: vbr.7: no IPv4 address assigned
tcpdump: listening on vbr.7, link-type EN10MB (Ethernet), capture size 96 bytes
21:26:18.520720 IP (tos 0x0, ttl 116, id 32402, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e92 0000 7411 7637 b2aa 6f16 E...~...t.v7..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.520830 IP (tos 0x0, ttl 116, id 32403, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e93 0000 7411 7636 b2aa 6f16 E...~...t.v6..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.521036 IP (tos 0x0, ttl 116, id 32404, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e94 0000 7411 7635 b2aa 6f16 E...~...t.v5..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.521263 IP (tos 0x0, ttl 116, id 32405, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e95 0000 7411 7634 b2aa 6f16 E...~...t.v4..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.521562 IP (tos 0x0, ttl 116, id 32406, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e96 0000 7411 7633 b2aa 6f16 E...~...t.v3..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.521829 IP (tos 0x0, ttl 116, id 32407, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e97 0000 7411 7632 b2aa 6f16 E...~...t.v2..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.522072 IP (tos 0x0, ttl 116, id 32408, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e98 0000 7411 7631 b2aa 6f16 E...~...t.v1..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.522205 IP (tos 0x0, ttl 116, id 32409, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e99 0000 7411 7630 b2aa 6f16 E...~...t.v0..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.522418 IP (tos 0x0, ttl 116, id 32410, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e9a 0000 7411 762f b2aa 6f16 E...~...t.v/..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.522593 IP (tos 0x0, ttl 116, id 32411, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e9b 0000 7411 762e b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.522703 IP (tos 0x0, ttl 116, id 32412, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e9c 0000 7411 762d b2aa 6f16 E...~...t.v-..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.522762 IP (tos 0x0, ttl 116, id 32413, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e9d 0000 7411 762c b2aa 6f16 E...~...t.v,..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.522927 IP (tos 0x0, ttl 116, id 32414, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e9e 0000 7411 762b b2aa 6f16 E...~...t.v+..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.523130 IP (tos 0x0, ttl 116, id 32415, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7e9f 0000 7411 762a b2aa 6f16 E...~...t.v*..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.523376 IP (tos 0x0, ttl 116, id 32416, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea0 0000 7411 7629 b2aa 6f16 E...~...t.v)..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.523609 IP (tos 0x0, ttl 116, id 32417, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea1 0000 7411 7628 b2aa 6f16 E...~...t.v(..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.523791 IP (tos 0x0, ttl 116, id 32418, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea2 0000 7411 7627 b2aa 6f16 E...~...t.v'..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.523900 IP (tos 0x0, ttl 116, id 32419, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea3 0000 7411 7626 b2aa 6f16 E...~...t.v&..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524046 IP (tos 0x0, ttl 116, id 32420, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea4 0000 7411 7625 b2aa 6f16 E...~...t.v%..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524118 IP (tos 0x0, ttl 116, id 32421, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea5 0000 7411 7624 b2aa 6f16 E...~...t.v$..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524245 IP (tos 0x0, ttl 116, id 32422, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea6 0000 7411 7623 b2aa 6f16 E...~...t.v#..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524387 IP (tos 0x0, ttl 116, id 32423, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea7 0000 7411 7622 b2aa 6f16 E...~...t.v"..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524450 IP (tos 0x0, ttl 116, id 32424, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea8 0000 7411 7621 b2aa 6f16 E...~...t.v!..o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524456 IP (tos 0x0, ttl 116, id 32425, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ea9 0000 7411 7620 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524635 IP (tos 0x0, ttl 116, id 32426, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eaa 0000 7411 761f b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524800 IP (tos 0x0, ttl 116, id 32427, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eab 0000 7411 761e b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.524933 IP (tos 0x0, ttl 116, id 32428, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eac 0000 7411 761d b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.525079 IP (tos 0x0, ttl 116, id 32429, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ead 0000 7411 761c b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.525246 IP (tos 0x0, ttl 116, id 32430, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eae 0000 7411 761b b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.525460 IP (tos 0x0, ttl 116, id 32431, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eaf 0000 7411 761a b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.525565 IP (tos 0x0, ttl 116, id 32432, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb0 0000 7411 7619 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.525686 IP (tos 0x0, ttl 116, id 32433, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb1 0000 7411 7618 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.525736 IP (tos 0x0, ttl 116, id 32434, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb2 0000 7411 7617 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.525791 IP (tos 0x0, ttl 116, id 32435, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb3 0000 7411 7616 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526190 IP (tos 0x0, ttl 116, id 32436, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb4 0000 7411 7615 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526373 IP (tos 0x0, ttl 116, id 32437, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb5 0000 7411 7614 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526436 IP (tos 0x0, ttl 116, id 32438, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb6 0000 7411 7613 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526627 IP (tos 0x0, ttl 116, id 32439, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb7 0000 7411 7612 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526693 IP (tos 0x0, ttl 116, id 32440, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb8 0000 7411 7611 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526862 IP (tos 0x0, ttl 116, id 32441, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eb9 0000 7411 7610 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526867 IP (tos 0x0, ttl 116, id 32442, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eba 0000 7411 760f b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.526917 IP (tos 0x0, ttl 116, id 32443, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ebb 0000 7411 760e b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.527126 IP (tos 0x0, ttl 116, id 32444, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ebc 0000 7411 760d b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.527311 IP (tos 0x0, ttl 116, id 32445, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ebd 0000 7411 760c b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.527461 IP (tos 0x0, ttl 116, id 32446, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ebe 0000 7411 760b b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.527524 IP (tos 0x0, ttl 116, id 32447, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ebf 0000 7411 760a b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.527694 IP (tos 0x0, ttl 116, id 32448, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec0 0000 7411 7609 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.527779 IP (tos 0x0, ttl 116, id 32449, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec1 0000 7411 7608 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.527939 IP (tos 0x0, ttl 116, id 32450, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec2 0000 7411 7607 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.528142 IP (tos 0x0, ttl 116, id 32451, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec3 0000 7411 7606 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.528219 IP (tos 0x0, ttl 116, id 32452, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec4 0000 7411 7605 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.528380 IP (tos 0x0, ttl 116, id 32453, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec5 0000 7411 7604 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.528533 IP (tos 0x0, ttl 116, id 32454, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec6 0000 7411 7603 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.528680 IP (tos 0x0, ttl 116, id 32455, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec7 0000 7411 7602 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.528837 IP (tos 0x0, ttl 116, id 32456, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec8 0000 7411 7601 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.528963 IP (tos 0x0, ttl 116, id 32457, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ec9 0000 7411 7600 b2aa 6f16 E...~...t.v...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529043 IP (tos 0x0, ttl 116, id 32458, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eca 0000 7411 75ff b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529048 IP (tos 0x0, ttl 116, id 32459, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ecb 0000 7411 75fe b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529155 IP (tos 0x0, ttl 116, id 32460, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ecc 0000 7411 75fd b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529260 IP (tos 0x0, ttl 116, id 32461, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ecd 0000 7411 75fc b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529330 IP (tos 0x0, ttl 116, id 32462, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ece 0000 7411 75fb b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529389 IP (tos 0x0, ttl 116, id 32463, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ecf 0000 7411 75fa b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529456 IP (tos 0x0, ttl 116, id 32464, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed0 0000 7411 75f9 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529518 IP (tos 0x0, ttl 116, id 32465, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed1 0000 7411 75f8 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529578 IP (tos 0x0, ttl 116, id 32466, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed2 0000 7411 75f7 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529656 IP (tos 0x0, ttl 116, id 32467, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed3 0000 7411 75f6 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529661 IP (tos 0x0, ttl 116, id 32468, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed4 0000 7411 75f5 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529766 IP (tos 0x0, ttl 116, id 32469, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed5 0000 7411 75f4 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529827 IP (tos 0x0, ttl 116, id 32470, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed6 0000 7411 75f3 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529835 IP (tos 0x0, ttl 116, id 32471, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed7 0000 7411 75f2 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529940 IP (tos 0x0, ttl 116, id 32472, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed8 0000 7411 75f1 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.529999 IP (tos 0x0, ttl 116, id 32473, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ed9 0000 7411 75f0 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530074 IP (tos 0x0, ttl 116, id 32474, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eda 0000 7411 75ef b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530133 IP (tos 0x0, ttl 116, id 32475, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7edb 0000 7411 75ee b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530220 IP (tos 0x0, ttl 116, id 32476, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7edc 0000 7411 75ed b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530276 IP (tos 0x0, ttl 116, id 32477, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7edd 0000 7411 75ec b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530366 IP (tos 0x0, ttl 116, id 32478, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ede 0000 7411 75eb b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530428 IP (tos 0x0, ttl 116, id 32479, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7edf 0000 7411 75ea b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530475 IP (tos 0x0, ttl 116, id 32480, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee0 0000 7411 75e9 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530538 IP (tos 0x0, ttl 116, id 32481, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee1 0000 7411 75e8 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530597 IP (tos 0x0, ttl 116, id 32482, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee2 0000 7411 75e7 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.530932 IP (tos 0x0, ttl 116, id 32483, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee3 0000 7411 75e6 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531047 IP (tos 0x0, ttl 116, id 32484, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee4 0000 7411 75e5 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531170 IP (tos 0x0, ttl 116, id 32485, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee5 0000 7411 75e4 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531179 IP (tos 0x0, ttl 116, id 32486, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee6 0000 7411 75e3 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531415 IP (tos 0x0, ttl 116, id 32487, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee7 0000 7411 75e2 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531468 IP (tos 0x0, ttl 116, id 32488, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee8 0000 7411 75e1 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531473 IP (tos 0x0, ttl 116, id 32489, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ee9 0000 7411 75e0 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531599 IP (tos 0x0, ttl 116, id 32490, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eea 0000 7411 75df b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531755 IP (tos 0x0, ttl 116, id 32491, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eeb 0000 7411 75de b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531818 IP (tos 0x0, ttl 116, id 32492, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eec 0000 7411 75dd b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.531952 IP (tos 0x0, ttl 116, id 32493, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eed 0000 7411 75dc b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532018 IP (tos 0x0, ttl 116, id 32494, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eee 0000 7411 75db b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532026 IP (tos 0x0, ttl 116, id 32495, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7eef 0000 7411 75da b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532241 IP (tos 0x0, ttl 116, id 32496, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ef0 0000 7411 75d9 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532371 IP (tos 0x0, ttl 116, id 32497, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ef1 0000 7411 75d8 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532527 IP (tos 0x0, ttl 116, id 32498, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ef2 0000 7411 75d7 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532532 IP (tos 0x0, ttl 116, id 32499, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ef3 0000 7411 75d6 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532746 IP (tos 0x0, ttl 116, id 32500, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ef4 0000 7411 75d5 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
21:26:18.532803 IP (tos 0x0, ttl 116, id 32501, offset 0, flags [none], proto UDP (17), length 272) 178.170.111.22.2043 > 64.94.238.244.49001: UDP, length 244
0x0000: 4500 0110 7ef5 0000 7411 75d4 b2aa 6f16 E...~...t.u...o.
0x0010: 405e eef4 07fb bf69 00fc 1141 4d41 4220 @^.....i...AMAB.
0x0020: 4f57 4e53 2059 4f55 5220 4655 434b 494e OWNS.YOUR.FUCKIN
0x0030: 4720 4153 5320 594f 5520 4655 434b 494e G.ASS.YOU.FUCKIN
0x0040: 4720 5245 5441 5244 2121 2121 G.RETARD!!!!
100 packets captured
106 packets received by filter
0 packets dropped by kernel
Clearly I'm not experienced in these matters...

My first thought is to ban the IP mask...is it "178.170." ?? or am i reading it wrong?
Top
User avatar
kraze
Former staff
Former staff
Posts: 4362
Joined: Fri Sep 17, 2010 9:06 am
Location: California

Re: DOS attack traffic captured, now what?

Post by kraze »

It looks like that user is using some type of DDos attack utility. It would be best to get a in-depth filter going. Since you are on a VDS it allows you to add some very in-depth filters and block this guy.

Hopefully he doesn't get the urge to change vectors, but to get started add a firewall rule like this;


1. (Block) (Any) inbound packet
2. From (This Remote IP) (178.170.111.22)
3. To (Any of your IP's
4. of (this length/range) (244)
5. Containing (any string) <---You could probably add a specific string but I have a feeling that since he is sending packets with messages in them, he is likely to change them at any given time.
@Kraze^NFo> Juski has a very valid point
@Juski> Got my new signature, thanks!
@Kraze^NFo> Out of context!
@Juski> Doesn't matter!
@Juski> You said I had a valid point! You can't take it back now! It's out there!
Top
garbitos
New to forums
New to forums
Posts: 14
Joined: Fri Apr 20, 2012 1:43 pm

Re: DOS attack traffic captured, now what?

Post by garbitos »

Ok, I'm pretty sure they can refresh their IP but usually it is 178.170 for the first two entries so this is the rule I'm using for now...

*******************************

black any inbound packet

this remote ip: 178.170.*.*

any of your IPs

any length

any string

*******************************

Please tell me if you foresee any issues with this...i know I can now potentially block thousands of other IP's but I have checked my game server logs and am not worried about it...it represents a small area in germany only.

I'm sure I will see these attacks coming from proxies next...Ill keep this thread updated.

Thanks much for the advice!!!
Top
User avatar
kraze
Former staff
Former staff
Posts: 4362
Joined: Fri Sep 17, 2010 9:06 am
Location: California

Re: DOS attack traffic captured, now what?

Post by kraze »

That should be fine for now, but if you see issues grab traffic again and see if he has changed IP's.
@Kraze^NFo> Juski has a very valid point
@Juski> Got my new signature, thanks!
@Kraze^NFo> Out of context!
@Juski> Doesn't matter!
@Juski> You said I had a valid point! You can't take it back now! It's out there!
Top
User avatar
Edge100x
Founder
Founder
Posts: 13129
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:
Contact Edge100x

Re: DOS attack traffic captured, now what?

Post by Edge100x »

Nod, this is a basic DoS with all traffic coming from the same IP. Blocking 178.170.111.22 should do well in this case, and that's something that could be done on any server here (Windows/Linux/VDS).
Top
garbitos
New to forums
New to forums
Posts: 14
Joined: Fri Apr 20, 2012 1:43 pm

Re: DOS attack traffic captured, now what?

Post by garbitos »

Yup, thanks guys. I know this is coming from a basic cable connection which can refresh to a new dynamic IP from the modem admin panel....so I'm using the "178.170.*.*" to block the IP mask instead because even after new dynamic IP is given it is still within this range. Also its not the most popular game (FarCry) so I'm not worried about blocking the other IP's in this range....if this was a new game like BF3 I would definitely try blocking single IP's first.

Love the elevated level of admin knowledge around here!

Thanks and high five (or fistbump if you are too cool).
Top
garbitos
New to forums
New to forums
Posts: 14
Joined: Fri Apr 20, 2012 1:43 pm

Re: DOS attack traffic captured, now what?

Post by garbitos »

Welll....after closer inspection this was a different attacker than I thought it actually came from another server box in Paris, France....so I am going to try the filter settings kraze posted (below)...thanks again!
1. (Block) (Any) inbound packet
2. From (This Remote IP) (178.170.111.22)
3. To (Any of your IP's
4. of (this length/range) (244)
5. Containing (any string) <---You could probably add a specific string but I have a feeling that since he is sending packets with messages in them, he is likely to change them at any given time.
Top
User avatar
Edge100x
Founder
Founder
Posts: 13129
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:
Contact Edge100x

Re: DOS attack traffic captured, now what?

Post by Edge100x »

I'd still recommend starting by blocking by IP, but you could do it by length or content, as well, yes.

Most attacks are from a single disgruntled person who will not stick around if you completely ban and ignore him from that point on, which is why the most specific filter is usually the most appropriate.
Top
garbitos
New to forums
New to forums
Posts: 14
Joined: Fri Apr 20, 2012 1:43 pm

Re: DOS attack traffic captured, now what?

Post by garbitos »

yes its funny, with some help we figured out exactly who it is...whats funny is they are using their own game server space to attack my server...in hopes i guess of filling his own server.

He has two rented game servers so i have blocked both IP's: 46.163.66.221 and 178.170.111.2
Top
FAST
This is my homepage
This is my homepage
Posts: 340
Joined: Sat Dec 10, 2011 11:43 pm
Location: Toronto, Canada

Re: DOS attack traffic captured, now what?

Post by FAST »

if it is through a GSP , they should be contacted about it. At least i would try that.
Top
.=QUACK=.Major.Pain
This is my homepage
This is my homepage
Posts: 1573
Joined: Sun Jun 26, 2011 8:03 am

Re: DOS attack traffic captured, now what?

Post by .=QUACK=.Major.Pain »

Start by notifying their GSP and explain it to them as you did here with your evidence.
Also include that your reporting this to the ISP.

Then send emails to the ISP and report the abuse with the evidence, and ask that they also inquire with the GSP that is using the service to make sure that they are looking into it. Forcefully request that ISP and GSP cancel and blacklist the customer.

Send a copy of the email to both ISP's and GSP so at least the GSP will take you seriously.

1st IP abuse-mailbox: net-abuse@hosteurope.de
2nd IP abuse-mailbox: ikoula@ikoula.com

You would be surprised on what a threat to an ISP can result in.

I have done the same with hackers who hacked our AA2 gameserver, and another who hacked our ventrilo server years ago. The one that hacked our ventrilo, I traced back to a city about 220 km's from me. ISP was Bell, our biggest phone company. They replied with comments like they were not interested. So I threaten them with an email that I was going to contact the CRTC, our government authority on phone, tv, and internet laws as they apply to providers and that I was going to mention to the CRTC that I notified them of someone hacking our server and I provided them proof, and that they failed to act on the information provided. Also included that their failure in acting was their acceptance and condoning of the illegal behavior. Not to say that the customer also breached their contract with the ISP for misusing the service.

The following day I received and email that the customer was notified by phone, and their service was terminated immediately. lol

Never hurts to take the time to fight the fight.
Visit gspreviews.com And Rate & Review Your Old & Current GSP's
Find Your GSP Coupons at gspreviews.com/coupons/
Top
Post Reply

Return to “Dedicated servers and Virtual Dedicated Servers”