kubo Unexpected quick connection retries to the same host: Outgoing DDoS Detection by Hetzner

Unexpected quick connection retries to the same host: Outgoing DDoS Detection by Hetzner

Open SmaugPool opened this issue 1 year ago • 10 comments

Checklist

[X] This is a bug report, not a question. Ask questions on discuss.ipfs.io.
[X] I have searched on the issue tracker for my bug.
[X] I am running the latest kubo version or have an issue updating.

Installation method

ipfs-update or dist.ipfs.tech

Version

ipfs version --all
Kubo version: 0.24.0
Repo version: 15
System version: amd64/linux
Golang version: go1.21.3

Config

👉️ Click to expand

{
  "API": {
    "HTTPHeaders": {}
  },
  "Addresses": {
    "API": "/ip4/0.0.0.0/tcp/5001",
    "Announce": [],
    "AppendAnnounce": null,
    "Gateway": "/ip4/0.0.0.0/tcp/8080",
    "NoAnnounce": [
      "/ip4/10.0.0.0/ipcidr/8",
      "/ip4/100.64.0.0/ipcidr/10",
      "/ip4/169.254.0.0/ipcidr/16",
      "/ip4/172.16.0.0/ipcidr/12",
      "/ip4/192.0.0.0/ipcidr/24",
      "/ip4/192.0.2.0/ipcidr/24",
      "/ip4/192.168.0.0/ipcidr/16",
      "/ip4/198.18.0.0/ipcidr/15",
      "/ip4/198.51.100.0/ipcidr/24",
      "/ip4/203.0.113.0/ipcidr/24",
      "/ip4/240.0.0.0/ipcidr/4",
      "/ip6/100::/ipcidr/64",
      "/ip6/2001:2::/ipcidr/48",
      "/ip6/2001:db8::/ipcidr/32",
      "/ip6/fc00::/ipcidr/7",
      "/ip6/fe80::/ipcidr/10"
    ],
    "Swarm": [
      "/ip4/0.0.0.0/tcp/4001",
      "/ip6/::/tcp/4001",
      "/ip4/0.0.0.0/udp/4001/quic",
      "/ip4/0.0.0.0/udp/4001/quic-v1",
      "/ip4/0.0.0.0/udp/4001/quic-v1/webtransport",
      "/ip6/::/udp/4001/quic",
      "/ip6/::/udp/4001/quic-v1",
      "/ip6/::/udp/4001/quic-v1/webtransport"
    ]
  },
  "AutoNAT": {},
  "Bootstrap": [
    "/dnsaddr/bootstrap.libp2p.io/p2p/QmbLHAnMoJPWSCR5Zhtx6BHJX9KiKNN6tpvbUcqanj75Nb",
    "/dnsaddr/bootstrap.libp2p.io/p2p/QmcZf59bWwK5XFi76CZX8cbJ4BhTzzA3gU1ZjYZcYW3dwt",
    "/ip4/104.131.131.82/tcp/4001/p2p/QmaCpDMGvV2BGHeYERUEnRQAwe3N8SzbUtfsmvsqQLuvuJ",
    "/ip4/104.131.131.82/udp/4001/quic/p2p/QmaCpDMGvV2BGHeYERUEnRQAwe3N8SzbUtfsmvsqQLuvuJ",
    "/dnsaddr/bootstrap.libp2p.io/p2p/QmNnooDu7bfjPFoTZYxMNLWUQJyrVwtbZg5gBMjTezGAJN",
    "/dnsaddr/bootstrap.libp2p.io/p2p/QmQCU2EcMqAqQPR2i9bChDtGNJchTbq5TbXJJ16u19uLTa"
  ],
  "DNS": {
    "Resolvers": null
  },
  "Datastore": {
    "BloomFilterSize": 8388608,
    "GCPeriod": "1h",
    "HashOnRead": false,
    "Spec": {
      "mounts": [
        {
          "child": {
            "path": "blocks",
            "shardFunc": "/repo/flatfs/shard/v1/next-to-last/3",
            "sync": false,
            "type": "flatfs"
          },
          "mountpoint": "/blocks",
          "prefix": "flatfs.datastore",
          "type": "measure"
        },
        {
          "child": {
            "compression": "none",
            "path": "datastore",
            "type": "levelds"
          },
          "mountpoint": "/",
          "prefix": "leveldb.datastore",
          "type": "measure"
        }
      ],
      "type": "mount"
    },
    "StorageGCWatermark": 90,
    "StorageMax": "20T"
  },
  "Discovery": {
    "MDNS": {
      "Enabled": false,
      "Interval": 10
    }
  },
  "Experimental": {
    "FilestoreEnabled": false,
    "GraphsyncEnabled": false,
    "Libp2pStreamMounting": false,
    "OptimisticProvide": false,
    "OptimisticProvideJobsPoolSize": 0,
    "P2pHttpProxy": false,
    "StrategicProviding": false,
    "UrlstoreEnabled": false
  },
  "Gateway": {
    "APICommands": [],
    "DeserializedResponses": null,
    "DisableHTMLErrors": null,
    "ExposeRoutingAPI": null,
    "HTTPHeaders": {
      "Access-Control-Allow-Headers": [
        "X-Requested-With",
        "Range",
        "User-Agent"
      ],
      "Access-Control-Allow-Methods": [
        "GET"
      ],
      "Access-Control-Allow-Origin": [
        "*"
      ]
    },
    "NoDNSLink": false,
    "NoFetch": false,
    "PathPrefixes": [],
    "PublicGateways": null,
    "RootRedirect": "",
    "Writable": false
  },
  "Identity": {
    "PeerID": "..."
  },
  "Internal": {
    "Bitswap": {
      "EngineBlockstoreWorkerCount": 16,
      "EngineTaskWorkerCount": 8,
      "MaxOutstandingBytesPerPeer": 1048576,
      "ProviderSearchDelay": null,
      "TaskWorkerCount": 8
    }
  },
  "Ipns": {
    "RecordLifetime": "",
    "RepublishPeriod": "",
    "ResolveCacheSize": 128
  },
  "Migration": {
    "DownloadSources": null,
    "Keep": ""
  },
  "Mounts": {
    "FuseAllowOther": false,
    "IPFS": "/ipfs",
    "IPNS": "/ipns"
  },
  "Peering": {
    "Peers": [
      ...
    ]
  },
  "Pinning": {},
  "Plugins": {
    "Plugins": null
  },
  "Provider": {
    "Strategy": ""
  },
  "Pubsub": {
    "DisableSigning": false,
    "Router": ""
  },
  "Reprovider": {
    "Interval": "0s",
    "Strategy": "roots"
  },
  "Routing": {
    "AcceleratedDHTClient": false,
    "Methods": null,
    "Routers": null,
    "Type": "autoclient"
  },
  "Swarm": {
    "AddrFilters": [
      "/ip4/10.0.0.0/ipcidr/8",
      "/ip4/100.64.0.0/ipcidr/10",
      "/ip4/169.254.0.0/ipcidr/16",
      "/ip4/172.16.0.0/ipcidr/12",
      "/ip4/192.0.0.0/ipcidr/24",
      "/ip4/192.0.2.0/ipcidr/24",
      "/ip4/192.168.0.0/ipcidr/16",
      "/ip4/198.18.0.0/ipcidr/15",
      "/ip4/198.51.100.0/ipcidr/24",
      "/ip4/203.0.113.0/ipcidr/24",
      "/ip4/240.0.0.0/ipcidr/4",
      "/ip6/100::/ipcidr/64",
      "/ip6/2001:2::/ipcidr/48",
      "/ip6/2001:db8::/ipcidr/32",
      "/ip6/fc00::/ipcidr/7",
      "/ip6/fe80::/ipcidr/10"
    ],
    "ConnMgr": {
      "GracePeriod": "20s",
      "HighWater": 128,
      "LowWater": 64,
      "Type": "basic"
    },
    "DisableBandwidthMetrics": false,
    "DisableNatPortMap": true,
    "RelayClient": {},
    "RelayService": {},
    "ResourceMgr": {
      "Enabled": true,
      "MaxMemory": "8 GB"
    },
    "Transports": {
      "Multiplexers": {},
      "Network": {},
      "Security": {}
    }
  }
}

Description

Hetzner detected an outgoing DDOS from running kubo:

Abuse Message [AbuseID:D5244A:2C]: DDoSOutLevel: Outgoing DDoS Detection; SRC: [xx.xx.xx.xx], DST: [86.84.231.48]

We have indications that there was an attack from your server. Please take all necessary measures to avoid this in the future and to solve the issue.

##############################################################################    
#      DDoS-Attack detected from host xx.xx.xx.xx                           #    
##############################################################################    
    
    
TIME                                 SRC              ->  DST              SIZE  PROT  SRC-PORT  DST-PORT    
----------------------------------------------------------------------------------------------------------    
2023-12-09 21:55:48.62946843  +0000  xx.xx.xx.xx     ->  86.84.231.48      131   TCP      4001      4001    
2023-12-09 21:55:48.636624923 +0000  xx.xx.xx.xx     ->  86.84.231.48      125   TCP      4001      4001    
2023-12-09 21:55:48.65691599  +0000  xx.xx.xx.xx     ->  86.84.231.48      125   TCP      4001      4001    
2023-12-09 21:55:48.676951656 +0000  xx.xx.xx.xx     ->  86.84.231.48       82   TCP      4001      4001    
2023-12-09 21:55:48.68339217  +0000  xx.xx.xx.xx     ->  86.84.231.48      125   TCP      4001      4001    
2023-12-09 21:55:48.689840641 +0000  xx.xx.xx.xx     ->  86.84.231.48     1537   TCP      4001      4001    
2023-12-09 21:55:48.697183818 +0000  xx.xx.xx.xx     ->  86.84.231.48       82   TCP      4001      4001    
2023-12-09 21:55:48.704837033 +0000  xx.xx.xx.xx     ->  86.84.231.48      131   TCP      4001      4001    
2023-12-09 21:55:48.720577474 +0000  xx.xx.xx.xx     ->  86.84.231.48      125   TCP      4001      4001    
2023-12-09 21:55:48.737214402 +0000  xx.xx.xx.xx     ->  86.84.231.48      307   TCP      4001      4001    
2023-12-09 21:55:48.777546548 +0000  xx.xx.xx.xx     ->  86.84.231.48       52   TCP      4001      4001    
2023-12-09 21:55:51.482935619 +0000  xx.xx.xx.xx     ->  86.84.231.48       40   TCP      4001      4001    
2023-12-09 21:55:51.690973777 +0000  xx.xx.xx.xx     ->  86.84.231.48       40   TCP      4001      4001    
2023-12-09 21:55:51.894931229 +0000  xx.xx.xx.xx     ->  86.84.231.48       40   TCP      4001      4001    
2023-12-09 21:55:52.313679904 +0000  xx.xx.xx.xx     ->  86.84.231.48       40   TCP      4001      4001    
2023-12-09 21:55:53.165124965 +0000  xx.xx.xx.xx     ->  86.84.231.48       40   TCP      4001      4001    
2023-12-09 21:55:54.969556665 +0000  xx.xx.xx.xx     ->  86.84.231.48       40   TCP      4001      4001

Note: I redacted my node source IP

I was told in IPFS Discord that was unexepected because Kubo is supposed to use some backoff retry strategy.

Dec 10 '23 08:12 SmaugPool

Same here, many of our node operators have been warned by their providers.

Dec 11 '23 14:12 moshemalawach

Looks like this was already an issue in 0.23.0

Dec 11 '23 14:12 hoh

Hm.. I was not able to reproduce, the reported "DST" ("DDoS" receiver) node is a valid Kubo daemon running in Docker, and it is online now:

$ ipfs swarm connect /ip4/86.84.231.48/tcp/4001/p2p/12D3KooWDpvkix77iXcsxzbiV5aJuJC9oCcZ8o55QzA7bq8t7zAA
connect 12D3KooWDpvkix77iXcsxzbiV5aJuJC9oCcZ8o55QzA7bq8t7zAA success

My working theory is that 12D3KooWDpvkix77iXcsxzbiV5aJuJC9oCcZ8o55QzA7bq8t7zAA went offline, and the ISP (https://kpn.com) interpreted failed connection attempts to this node as DDoS (random IPs from all over the world sending weird packets), then reported it to ISPs of every IPFS node that tried to connect to the above peer, including nodes running on Hetzner.

And/or it is also possible the ISP started blackholing the P2P traffic for some reason, which would also made the peer look offline, and cause retries (we don't know if there were any response packets).

To me, based on limited available information, this looks like a false-positive.

If I was a client of Hetzner or KPN, I would try to explain this is not a DDoS, but IPFS nodes trying to talk to a service exposed by one of KPN clients. Mind that KPN knows who is operating 86.84.231.48 and can reach out to them to confirm.

Alternative ideas, or information how to reproduce the 40 byte packets is welcome.

Dec 12 '23 16:12 lidel

@lidel I think the question is why is there 11 connection retries in 150 ms. It seems it's not the expected Kubo behavior because of supposed backoff retry strategy.

Dec 13 '23 14:12 SmaugPool

Triage notes:

@SmaugPool is this still an issue on Hetzner? We tried Kubo 0.24/25 on Hetzner and were not able to trigger DDoS warning.
Next step here: someone should tryto reproduce and investigate if backoff in Kubo retry logic is broken (11 retries in 150ms sounds like a problem, if true)

Jan 30 '24 15:01 lidel

Oops, seems like we needed more information for this issue, please comment with more details or this issue will be closed in 7 days.

Feb 13 '24 00:02 github-actions[bot]

why is there 11 connection [TCP ipv4] retries in 150 ms.

@sukunrt because you've been poking at happy eyeballs for TCP (go-libp2p 0.32), do you think this is go-libp2p issue? (should we transfer the issue?) Dial back-offs should handle this.

Feb 13 '24 14:02 lidel

Sure. I can take this.

I think the last time I looked at this my understanding was that this is normal IPFS traffic since the packet sizes mentioned in the issue don't` look like SYN packets. But I will check again.

Feb 13 '24 14:02 sukunrt

@lidel I just got a new abuse alert from Hetzner using Kubo 0.25.0:

> #############################################################################
> #       Netscan detected from host 23.88.xx.xx                             #
> #############################################################################
>
>
> TIME (UTC)           SRC       SRC-PORT -> DST          DST-PORT SIZE PROT
> --------------------------------------------------------------------------
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->    3.79.235.146  4001 1518 TCP
> 2024-02-16 23:21:37  23.88.xx.xx  4001 ->    5.161.55.227  4001 1298 UDP
> 2024-02-16 23:21:41  23.88.xx.xx  4001 ->    5.161.55.227  4001   78 TCP
> 2024-02-16 23:21:37  23.88.xx.xx  4001 ->    5.161.55.227  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->     5.161.66.59  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->     5.161.66.59 15197 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->     5.161.66.59 15197 1298 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->     5.161.66.59 15197 1298 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 ->     5.161.66.59 41839 1298 UDP
> 2024-02-16 23:21:48  23.88.xx.xx  4001 ->     5.161.92.36  4001 1298 UDP
> 2024-02-16 23:21:49  23.88.xx.xx  4001 ->     5.161.92.36  4001 1298 UDP
> 2024-02-16 23:21:42  23.88.xx.xx  4001 ->     5.161.92.43  4001 1298 UDP
> 2024-02-16 23:21:42  23.88.xx.xx  4001 ->     5.161.92.43  4001   78 TCP
> 2024-02-16 23:21:11  23.88.xx.xx  4001 ->     5.161.92.43  4001   78 TCP
> 2024-02-16 23:21:45  23.88.xx.xx  4001 ->     5.161.92.43  4001 1298 UDP
> 2024-02-16 23:21:42  23.88.xx.xx  4001 ->     5.161.92.43  4001 1298 UDP
> 2024-02-16 23:21:42  23.88.xx.xx  4001 ->     5.161.92.43  4001 1298 UDP
> 2024-02-16 23:21:33  23.88.xx.xx  5001 ->     5.161.97.14 32936 1518 TCP
> 2024-02-16 23:21:13  23.88.xx.xx  5001 ->     5.161.97.14 32936   82 TCP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->     5.161.142.2  4001   78 TCP
> 2024-02-16 23:21:21  23.88.xx.xx  4001 ->     5.161.142.2  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  13.232.179.118  4001  195 TCP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  13.232.179.118  4001  195 TCP
> 2024-02-16 23:19:09  23.88.xx.xx  4001 ->       15.1.1.42  4001   78 TCP
> 2024-02-16 23:19:08  23.88.xx.xx  4001 ->       15.1.1.42  4001 1298 UDP
> 2024-02-16 23:19:08  23.88.xx.xx  4001 ->       15.1.1.42  4001 1298 UDP
> 2024-02-16 23:19:08  23.88.xx.xx  4001 ->       15.1.1.42  4001 1298 UDP
> 2024-02-16 23:19:09  23.88.xx.xx  4001 ->       15.1.1.42  4001 1298 UDP
> 2024-02-16 23:19:09  23.88.xx.xx  4001 ->       15.1.1.42  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   39.109.210.30 18438  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->    45.141.84.17  4001  308 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->  46.101.242.131  4001 1298 UDP
> 2024-02-16 23:21:18  23.88.xx.xx  4001 ->  46.101.242.131  4001 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->    62.92.66.133  4001   78 TCP
> 2024-02-16 23:21:21  23.88.xx.xx  4001 ->    62.92.66.133  4001   78 TCP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->   62.171.143.46  4001  122 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   62.171.143.46  4001  122 UDP
> 2024-02-16 23:21:14  23.88.xx.xx  4001 ->   62.171.143.46  4001  122 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   62.171.143.46  4001   72 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->   62.171.167.79  1540 1298 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->   62.171.167.79  1540 1298 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->    65.20.80.239  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  66.103.218.222  4001  122 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->     74.48.21.66  4001 1298 UDP
> 2024-02-16 23:21:26  23.88.xx.xx  4001 ->     74.48.21.66  4001 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->    74.48.37.245  4001 1298 UDP
> 2024-02-16 23:21:31  23.88.xx.xx  4001 ->    74.48.44.188  4001 1298 UDP
> 2024-02-16 23:21:33  23.88.xx.xx  4001 ->    74.48.44.188  4001 1298 UDP
> 2024-02-16 23:21:32  23.88.xx.xx  4001 ->    74.48.44.188  4001 1298 UDP
> 2024-02-16 23:21:32  23.88.xx.xx  4001 ->    74.48.45.254  4001 1298 UDP
> 2024-02-16 23:21:32  23.88.xx.xx  4001 ->    74.48.45.254  4001 1298 UDP
> 2024-02-16 23:21:33  23.88.xx.xx  4001 ->    74.48.45.254  4001 1298 UDP
> 2024-02-16 23:21:36  23.88.xx.xx  4001 ->    74.48.45.254  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->    74.48.52.150  4001 1298 UDP
> 2024-02-16 23:21:46  23.88.xx.xx  4001 ->    74.48.62.144  4001   78 TCP
> 2024-02-16 23:21:48  23.88.xx.xx  4001 ->    74.48.62.144  4001   78 TCP
> 2024-02-16 23:21:34  23.88.xx.xx  4001 ->    74.48.62.147  4001 1298 UDP
> 2024-02-16 23:21:44  23.88.xx.xx  4001 ->    74.48.62.147  4001 1298 UDP
> 2024-02-16 23:21:45  23.88.xx.xx  4001 ->    74.48.62.147  4001   78 TCP
> 2024-02-16 23:21:43  23.88.xx.xx  4001 ->    74.48.62.147  4001   78 TCP
> 2024-02-16 23:21:41  23.88.xx.xx  4001 ->    74.48.62.147  4001 1298 UDP
> 2024-02-16 23:21:42  23.88.xx.xx  4001 ->    74.48.62.147  4001   78 TCP
> 2024-02-16 23:21:35  23.88.xx.xx  4001 ->    74.48.62.147  4001 1298 UDP
> 2024-02-16 23:21:32  23.88.xx.xx  4001 ->    74.48.98.190  4001   78 TCP
> 2024-02-16 23:21:34  23.88.xx.xx  4001 ->    74.48.98.190  4001 1298 UDP
> 2024-02-16 23:21:33  23.88.xx.xx  4001 ->    74.48.98.190  4001 1298 UDP
> 2024-02-16 23:21:31  23.88.xx.xx  4001 ->    74.48.98.191  4001 1298 UDP
> 2024-02-16 23:21:30  23.88.xx.xx  4001 ->    74.48.98.191  4001   78 TCP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->   74.48.107.126  4001   84 UDP
> 2024-02-16 23:21:49  23.88.xx.xx  4001 ->    74.48.108.12  4001 1298 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->   74.48.114.216  4001 1298 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->   74.48.133.147  4001 1298 UDP
> 2024-02-16 23:21:15  23.88.xx.xx  4001 ->   74.48.133.147  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->     74.48.140.4  4001  114 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->   74.48.182.218  4001 1298 UDP
> 2024-02-16 23:21:36  23.88.xx.xx  4001 ->   74.48.183.132  4001   78 TCP
> 2024-02-16 23:21:36  23.88.xx.xx  4001 ->   74.48.183.132  4001 1298 UDP
> 2024-02-16 23:21:26  23.88.xx.xx  4001 ->   74.48.183.173  4001 1298 UDP
> 2024-02-16 23:21:25  23.88.xx.xx  4001 ->   74.48.183.173  4001 1298 UDP
> 2024-02-16 23:21:45  23.88.xx.xx  4001 ->   74.48.183.207  4001   78 TCP
> 2024-02-16 23:21:46  23.88.xx.xx  4001 ->   74.48.183.207  4001 1298 UDP
> 2024-02-16 23:21:44  23.88.xx.xx  4001 ->   74.48.183.207  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->   74.48.183.209  4001 1298 UDP
> 2024-02-16 23:21:15  23.88.xx.xx  4001 ->   74.48.183.209  4001   78 TCP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   74.48.215.148  4001  116 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   74.48.215.148  4001  168 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   74.48.215.148  4001   85 UDP
> 2024-02-16 23:21:49  23.88.xx.xx  4001 ->   74.48.221.181  4001 1298 UDP
> 2024-02-16 23:21:49  23.88.xx.xx  4001 ->   74.48.221.181  4001 1298 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->    79.113.221.3 10990 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->    79.113.221.3 44005 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->     80.240.16.2  4001 1298 UDP
> 2024-02-16 23:21:11  23.88.xx.xx  4001 ->   85.215.37.212  4001 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->   91.168.158.56 35772   72 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   91.168.158.56 35772  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   91.168.158.56 35772  782 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   91.168.158.56 35772  116 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  91.230.111.121  4001  168 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  91.230.111.121  4001  114 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->   91.230.153.86 24495 1298 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->   91.230.153.86 24495 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   91.230.153.86 24495 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->   91.230.153.86 24495 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   91.230.153.86 24495 1298 UDP
> 2024-02-16 23:21:25  23.88.xx.xx  4001 ->   91.230.153.86 24495 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   91.230.153.86 24495 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   91.230.153.86 29162 1298 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->   91.230.153.86 29162 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->   91.230.153.86 29162 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   91.230.153.86 29162 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   91.230.153.86 29480 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   91.230.153.86 38122 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   94.16.132.229 38779  173 TCP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   94.251.61.202 59558 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->   94.251.61.202 59558 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->   94.251.61.202 59558 1298 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->  98.142.139.114  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  103.108.67.158  4001   78 TCP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  103.108.67.158  4001   78 TCP
> 2024-02-16 23:21:09  23.88.xx.xx  4001 ->  103.108.67.223  4001 1298 UDP
> 2024-02-16 23:21:38  23.88.xx.xx  4001 ->   103.149.200.8  4001 1298 UDP
> 2024-02-16 23:21:37  23.88.xx.xx  4001 ->   103.149.200.8  4001 1298 UDP
> 2024-02-16 23:21:38  23.88.xx.xx  4001 ->   103.149.200.8  4001 1298 UDP
> 2024-02-16 23:21:40  23.88.xx.xx  4001 ->   103.149.200.8  4001 1298 UDP
> 2024-02-16 23:21:48  23.88.xx.xx  4001 -> 107.173.141.252  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 107.174.205.203  4001  114 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 -> 107.174.205.203  4001   85 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   107.175.0.156  4001 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   107.175.0.156  4001 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   107.175.0.156  4001 1298 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->   107.175.0.156  4001 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->   107.175.0.156  4001 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   107.175.0.156  4001 1298 UDP
> 2024-02-16 23:21:09  23.88.xx.xx  4001 -> 107.175.222.141  4001 1298 UDP
> 2024-02-16 23:21:24  23.88.xx.xx  4001 ->   112.13.172.69 32010   78 TCP
> 2024-02-16 23:21:18  23.88.xx.xx  4001 ->    114.157.1.37 52452 1298 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 ->    114.157.1.37 52452   78 TCP
> 2024-02-16 23:21:14  23.88.xx.xx  4001 -> 114.240.137.175 65422  122 UDP
> 2024-02-16 23:21:31  23.88.xx.xx  4001 -> 114.240.137.175 65422 1298 UDP
> 2024-02-16 23:21:32  23.88.xx.xx  4001 -> 114.240.137.175 65422 1298 UDP
> 2024-02-16 23:21:30  23.88.xx.xx  4001 -> 114.240.137.175 65422 1298 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 -> 114.240.137.175 65422   76 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 -> 114.240.137.175 65422  162 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 -> 114.240.137.175 65422  262 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 114.240.137.175 65422  168 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   120.226.39.68  4001  195 TCP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   120.226.39.68  4001  149 TCP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   120.226.39.68  4001  195 TCP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->  121.126.17.216  4001  114 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  121.126.17.216  4001  168 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  121.126.223.42  4001 1298 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->  121.126.223.42  4001 1298 UDP
> 2024-02-16 23:21:21  23.88.xx.xx  4001 ->  121.126.223.42  4001 1298 UDP
> 2024-02-16 23:21:27  23.88.xx.xx  4001 -> 121.178.152.160 41006   78 TCP
> 2024-02-16 23:21:35  23.88.xx.xx  4001 ->   137.220.36.71  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  137.220.36.112  4001 1448 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   137.220.39.84  4001   78 TCP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  137.220.42.136  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  137.220.42.136  4001 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->  137.220.42.136  4001 1298 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  137.220.42.136  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  139.84.167.236  4001  122 UDP
> 2024-02-16 23:21:09  23.88.xx.xx  4001 ->  139.84.170.195  4001 1460 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  139.84.170.195  4001 1460 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  139.84.170.195  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  139.84.170.195  4001 1460 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  139.84.170.195  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  139.84.170.195  4001  216 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->  139.162.88.235  4001  168 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 -> 139.162.109.188  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 139.162.109.188  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 139.162.109.188  4001  168 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 -> 139.162.109.188  4001 1460 UDP
> 2024-02-16 23:21:14  23.88.xx.xx  4001 -> 139.162.109.188  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  139.162.132.12  4001  168 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->  139.162.132.12  4001   72 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 139.162.164.149  4001  122 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  139.180.200.90  4001   78 TCP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->  141.164.47.205  4001 1298 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 ->   142.171.12.51  4001 1298 UDP
> 2024-02-16 23:21:44  23.88.xx.xx  4001 ->   142.171.62.61  4001 1298 UDP
> 2024-02-16 23:21:44  23.88.xx.xx  4001 ->   142.171.62.61  4001   78 TCP
> 2024-02-16 23:21:44  23.88.xx.xx  4001 ->   142.171.62.61  4001 1298 UDP
> 2024-02-16 23:21:44  23.88.xx.xx  4001 ->   142.171.62.61  4001 1298 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->   142.171.62.93  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   142.171.62.93  4001 1298 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->   142.171.62.93  4001 1298 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  142.171.123.87  4001 1298 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 -> 142.171.245.121  4001 1298 UDP
> 2024-02-16 23:21:18  23.88.xx.xx  4001 -> 142.171.245.121  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   142.215.53.21  4001  116 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->   142.215.53.21  4001   72 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->   144.91.65.134  4001  143 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   144.91.84.254  4001 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->  144.91.116.143  4001 1298 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  144.91.123.240  4001  116 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->  144.91.123.240  4001  114 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 146.190.234.166  4001  216 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  148.135.54.141  4001 1298 UDP
> 2024-02-16 23:21:21  23.88.xx.xx  4001 ->  148.135.54.141  4001 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->  148.135.54.141  4001 1298 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 ->  148.135.54.141  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  148.135.54.141  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  148.135.54.141  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   148.135.56.96  4001  168 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  148.135.56.151  4001 1298 UDP
> 2024-02-16 23:21:46  23.88.xx.xx  4001 ->  148.135.56.151  4001   78 TCP
> 2024-02-16 23:21:46  23.88.xx.xx  4001 ->  148.135.56.151  4001 1298 UDP
> 2024-02-16 23:21:45  23.88.xx.xx  4001 ->  148.135.56.151  4001 1298 UDP
> 2024-02-16 23:21:35  23.88.xx.xx  4001 ->  148.135.61.243  4001 1298 UDP
> 2024-02-16 23:21:34  23.88.xx.xx  4001 ->  148.135.61.243  4001 1298 UDP
> 2024-02-16 23:21:42  23.88.xx.xx  4001 ->  148.135.61.243  4001 1298 UDP
> 2024-02-16 23:21:24  23.88.xx.xx  4001 ->  148.135.74.231  4001   78 TCP
> 2024-02-16 23:21:25  23.88.xx.xx  4001 ->  148.135.74.231  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  148.135.77.107  4001  168 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  148.135.77.107  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  148.135.77.107  4001  308 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  158.247.198.43  4001  122 UDP
> 2024-02-16 23:21:09  23.88.xx.xx  4001 ->  158.247.198.43  4001  168 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 158.247.231.129  4001  116 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 158.247.231.129  4001 1460 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 158.247.231.129  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 158.247.231.129  4001 1460 UDP
> 2024-02-16 23:21:09  23.88.xx.xx  4001 -> 158.247.234.103  4001  122 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 -> 158.247.234.103  4001   72 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->  164.90.179.125  4001 1298 UDP
> 2024-02-16 23:21:33  23.88.xx.xx  4001 ->  165.227.207.33  4001 1298 UDP
> 2024-02-16 23:21:06  23.88.xx.xx  4001 ->  167.71.172.216  4001   78 TCP
> 2024-02-16 23:21:30  23.88.xx.xx  4001 ->   167.71.250.74  4001   78 TCP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->  168.235.93.107  4001   78 TCP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 -> 172.104.141.127  4001   76 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 172.104.141.127  4001  168 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 172.104.141.127  4001   76 UDP
> 2024-02-16 23:21:29  23.88.xx.xx  4001 -> 172.245.126.133  4001 1298 UDP
> 2024-02-16 23:21:14  23.88.xx.xx  4001 -> 173.212.198.225  4001  116 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 -> 173.212.198.225  4001  162 UDP
> 2024-02-16 23:21:30  23.88.xx.xx 33652 ->  174.136.97.179  4002  114 UDP
> 2024-02-16 23:21:25  23.88.xx.xx  4001 ->   175.45.180.22  4001 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->   175.45.180.22  4001 1298 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->  183.96.188.133 35920   78 TCP
> 2024-02-16 23:21:11  23.88.xx.xx  4001 ->  183.230.248.80 58272   78 TCP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   185.182.9.193  4001  122 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->   185.182.9.193  4001  216 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->   185.182.9.193  4001   72 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  185.194.218.32  4001   76 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->  185.194.218.32  4001  143 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  185.194.218.32  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   188.227.87.41  4001  118 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->   188.227.87.41  4001  112 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   188.227.87.41  4001 1485 UDP
> 2024-02-16 23:21:14  23.88.xx.xx  4001 ->   188.227.87.41  4001  124 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->   188.227.87.41  4001   78 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 ->    192.3.80.119  4001 1298 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->  192.210.143.19  4001   78 TCP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->  192.210.143.19  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  192.210.143.19  4001 1298 UDP
> 2024-02-16 23:21:16  23.88.xx.xx  4001 ->  192.210.143.19  4001 1298 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  192.210.143.19  4001 1298 UDP
> 2024-02-16 23:21:15  23.88.xx.xx  4001 -> 192.248.182.253  4001 1298 UDP
> 2024-02-16 23:21:15  23.88.xx.xx  4001 -> 193.223.242.105  4001 1298 UDP
> 2024-02-16 23:21:27  23.88.xx.xx  4001 -> 193.223.242.106  4001  114 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 -> 193.223.242.106  4001  122 UDP
> 2024-02-16 23:21:29  23.88.xx.xx  4001 -> 193.223.242.106  4001  162 UDP
> 2024-02-16 23:21:27  23.88.xx.xx  4001 -> 193.223.242.106  4001 1448 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 -> 193.223.242.114  4001 1298 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 -> 193.223.242.122  4001  305 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 -> 193.223.242.122  4001   76 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 -> 193.223.242.122  4001  305 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 193.223.242.122  4001 1398 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 193.223.242.122  4001  122 UDP
> 2024-02-16 23:21:27  23.88.xx.xx  4001 -> 193.223.242.122  4001  168 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 -> 193.223.242.122  4001 1298 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 -> 193.223.242.136  4001 1118 UDP
> 2024-02-16 23:21:14  23.88.xx.xx  4001 -> 193.223.242.136  4001  122 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 -> 193.223.242.136  4001  114 UDP
> 2024-02-16 23:21:11  23.88.xx.xx  4001 -> 193.223.242.136  4001  262 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 193.223.242.136  4001  168 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 ->  202.22.153.106 38615   81 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  202.22.153.106 38615  114 UDP
> 2024-02-16 23:21:14  23.88.xx.xx  4001 ->  202.22.153.106 38615  122 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->  202.22.153.106 38615  114 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  202.22.153.106 38615  122 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->   203.159.94.79  4001  165 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   203.159.94.79  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   203.159.94.79  4001  116 UDP
> 2024-02-16 23:21:19  23.88.xx.xx  4001 ->  207.180.204.59  4001   85 UDP
> 2024-02-16 23:21:28  23.88.xx.xx  4001 ->  207.180.204.59  4001   91 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  207.180.204.59  4001  305 UDP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 ->  207.180.204.59  4001  116 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  207.180.204.59  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  207.180.204.59  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->  207.180.204.59  4001  114 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->  207.180.204.59  4001  114 UDP
> 2024-02-16 23:21:27  23.88.xx.xx  4001 ->  207.180.204.59  4001 1298 UDP
> 2024-02-16 23:21:23  23.88.xx.xx  4001 ->  207.180.204.59  4001  122 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->  207.180.204.59  4001   74 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->   208.76.221.72  4001  162 UDP
> 2024-02-16 23:21:08  23.88.xx.xx  4001 ->   208.76.221.72  4001  114 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->   208.76.221.72  4001  116 UDP
> 2024-02-16 23:21:12  23.88.xx.xx  4001 ->    208.85.22.41  4001  114 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->    208.85.22.41  4001  122 UDP
> 2024-02-16 23:21:20  23.88.xx.xx  4001 ->    208.85.22.41  4001  122 UDP
> 2024-02-16 23:21:22  23.88.xx.xx  4001 ->    208.85.22.41  4001   72 UDP
> 2024-02-16 23:21:10  23.88.xx.xx  4001 ->    208.85.22.41  4001  168 UDP
> 2024-02-16 23:21:17  23.88.xx.xx  4001 ->    208.85.22.41  4001  114 UDP
> 2024-02-16 23:21:15  23.88.xx.xx  4001 ->   209.97.191.24  4001 1298 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 209.250.234.183  4001  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   210.56.225.89 30996  168 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 ->   210.56.225.89 30996  122 UDP
> 2024-02-16 23:21:07  23.88.xx.xx  4001 -> 211.230.145.242 34402  137 TCP
> 2024-02-16 23:21:48  23.88.xx.xx  4001 ->   219.161.65.18 42128 1298 UDP
> 2024-02-16 23:21:45  23.88.xx.xx  4001 ->   219.161.65.18 42128 1298 UDP
> 2024-02-16 23:21:43  23.88.xx.xx  4001 ->   219.161.65.18 42128 1298 UDP
> 2024-02-16 23:21:48  23.88.xx.xx  4001 ->   219.161.65.18 42128   78 TCP
> 2024-02-16 23:21:30  23.88.xx.xx  4001 -> 221.144.149.100 57423   78 TCP
> 2024-02-16 23:21:27  23.88.xx.xx  4001 -> 221.144.149.100 57423   78 TCP
> 2024-02-16 23:21:28  23.88.xx.xx  4001 -> 221.144.149.100 57423   78 TCP
> 2024-02-16 23:21:13  23.88.xx.xx  4001 -> 221.144.149.100 57423  181 TCP

Feb 17 '24 10:02 SmaugPool

I got hit by this today using the ipfs/kubo docker image.

latest: Pulling from ipfs/kubo Digest: sha256:bfce363b878b8e1512009d9bb5b732b6bc8469296ca50f75ff3c6f227dc179b2

Apart from the aggressive timing, i also find the use of all those private IPs concerning. The node only has access to the 192.168.155.0/24 range. I also vaguely remember this already being an issue years ago...

#############################################################################
#       Netscan detected from host $ip                                      #
#############################################################################


TIME (UTC)           SRC        SRC-PORT -> DST          DST-PORT SIZE PROT
---------------------------------------------------------------------------
2024-03-11 16:37:55  $ip 58821 ->       10.0.0.81 44005 1298 UDP
2024-03-11 16:37:55  $ip 60155 ->       10.0.0.81 44005   78 TCP
2024-03-11 16:37:55  $ip 58821 ->       10.0.0.81 44005 1298 UDP
2024-03-11 16:38:03  $ip 63533 ->      10.0.0.106  4001 1298 UDP
2024-03-11 16:38:03  $ip 63533 ->      10.0.0.106  4001 1298 UDP
2024-03-11 16:38:03  $ip 61672 ->      10.0.0.106  4001   78 TCP
2024-03-11 16:38:03  $ip 63533 ->      10.0.0.106  4001 1298 UDP
2024-03-11 16:38:03  $ip 63533 ->      10.0.0.106  4001 1298 UDP
2024-03-11 16:37:39  $ip 54952 ->      10.0.0.112  4001 1298 UDP
2024-03-11 16:37:38  $ip 50121 ->      10.0.0.112  4001   78 TCP
2024-03-11 16:37:38  $ip 54952 ->      10.0.0.112  4001 1298 UDP
2024-03-11 16:38:23  $ip 58912 ->      10.0.0.120 44005   78 TCP
2024-03-11 16:35:14  $ip 57530 ->      10.0.0.146 44005 1298 UDP
2024-03-11 16:35:14  $ip 57530 ->      10.0.0.146 44005 1298 UDP
2024-03-11 16:35:14  $ip 57530 ->      10.0.0.146 44005 1298 UDP
2024-03-11 16:35:14  $ip 57530 ->      10.0.0.146 44005 1298 UDP
2024-03-11 16:35:14  $ip 52876 ->      10.0.0.146 44005   78 TCP
2024-03-11 16:36:02  $ip 52376 ->      10.0.0.217 44005   78 TCP
2024-03-11 16:36:02  $ip 64192 ->      10.0.0.217 44005 1298 UDP
2024-03-11 16:36:01  $ip 64192 ->      10.0.0.217 44005 1298 UDP
2024-03-11 16:38:38  $ip 55583 ->      10.0.0.217 44005   78 TCP
2024-03-11 16:35:23  $ip 61103 ->      10.0.1.225  4001 1298 UDP
2024-03-11 16:35:23  $ip 62850 ->      10.0.1.225  4001   78 TCP
2024-03-11 16:35:23  $ip 61103 ->      10.0.1.225  4001 1298 UDP
2024-03-11 16:37:41  $ip 56289 ->      10.0.3.195  4001   78 TCP
2024-03-11 16:37:42  $ip 56289 ->      10.0.3.195  4001   78 TCP
2024-03-11 16:36:14  $ip 54426 ->      10.0.3.195  4001   78 TCP
2024-03-11 16:38:38  $ip 64723 ->      10.0.3.195  4001   78 TCP
2024-03-11 16:38:39  $ip 64723 ->      10.0.3.195  4001   78 TCP
2024-03-11 16:38:41  $ip 64723 ->      10.0.3.195  4001   78 TCP
2024-03-11 16:38:29  $ip 59248 ->        10.5.0.7  4001   78 TCP
2024-03-11 16:35:23  $ip 65040 ->        10.9.9.2  4001 1298 UDP
2024-03-11 16:35:23  $ip 53991 ->        10.9.9.2  4001   78 TCP
2024-03-11 16:35:23  $ip 65040 ->        10.9.9.2  4001 1298 UDP
2024-03-11 16:35:23  $ip 65040 ->        10.9.9.2  4001 1298 UDP
2024-03-11 16:35:24  $ip 65040 ->        10.9.9.2  4001 1298 UDP
2024-03-11 16:38:23  $ip 57297 ->    10.13.137.23 44005 1298 UDP
2024-03-11 16:38:23  $ip 57297 ->    10.13.137.23 44005 1298 UDP
2024-03-11 16:38:23  $ip 57297 ->    10.13.137.23 44005 1298 UDP
2024-03-11 16:38:23  $ip 54088 ->    10.13.137.23 44005   78 TCP
2024-03-11 16:38:23  $ip 57297 ->    10.13.137.23 44005 1298 UDP
2024-03-11 16:37:57  $ip 51365 ->       10.16.0.8  4001   78 TCP
2024-03-11 16:35:24  $ip 52068 ->     10.17.30.30  4001   78 TCP
2024-03-11 16:37:41  $ip 64433 ->      10.19.10.7  4001   78 TCP
2024-03-11 16:38:42  $ip 58808 ->      10.19.10.7  4001   78 TCP
2024-03-11 16:37:43  $ip 64433 ->      10.19.10.7  4001   78 TCP
2024-03-11 16:37:40  $ip 64433 ->      10.19.10.7  4001   78 TCP
2024-03-11 16:38:43  $ip 58808 ->      10.19.10.7  4001   78 TCP
2024-03-11 16:38:15  $ip 55173 ->       10.21.0.3  4001   78 TCP
2024-03-11 16:36:14  $ip 60235 ->     10.21.21.93  4001   78 TCP
2024-03-11 16:37:41  $ip 64002 ->     10.21.21.93  4001   78 TCP
2024-03-11 16:37:55  $ip 59410 ->      10.32.2.80  4001   78 TCP
2024-03-11 16:37:58  $ip 59410 ->      10.32.2.80  4001   78 TCP
2024-03-11 16:37:56  $ip 59410 ->      10.32.2.80  4001   78 TCP
2024-03-11 16:35:27  $ip 61925 ->     10.74.38.33  4001 1298 UDP
2024-03-11 16:35:27  $ip 60733 ->     10.74.38.33  4001   78 TCP
2024-03-11 16:35:27  $ip 61925 ->     10.74.38.33  4001 1298 UDP
2024-03-11 16:35:27  $ip 61925 ->     10.74.38.33  4001 1298 UDP
2024-03-11 16:35:27  $ip 61925 ->     10.74.38.33  4001 1298 UDP
2024-03-11 16:35:55  $ip 58154 ->     10.80.36.60  4001   78 TCP
2024-03-11 16:35:14  $ip 53194 ->     10.80.36.60  4001   78 TCP
2024-03-11 16:35:13  $ip 53194 ->     10.80.36.60  4001   78 TCP
2024-03-11 16:38:42  $ip 61605 ->     10.97.21.50  4001 1298 UDP
2024-03-11 16:38:41  $ip 59696 ->     10.97.21.50  4001   78 TCP
2024-03-11 16:38:41  $ip 61605 ->     10.97.21.50  4001 1298 UDP
2024-03-11 16:38:41  $ip 61605 ->     10.97.21.50  4001 1298 UDP
2024-03-11 16:38:41  $ip 61605 ->     10.97.21.50  4001 1298 UDP
2024-03-11 16:37:57  $ip 51718 ->      10.106.0.4  4001   78 TCP
2024-03-11 16:35:44  $ip 56289 ->   10.122.44.166  4001   78 TCP
2024-03-11 16:35:21  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:22  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:22  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:47  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:22  $ip 59672 ->  10.126.172.219  4001   78 TCP
2024-03-11 16:35:22  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:47  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:47  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:47  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:47  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:35:47  $ip 55883 ->  10.126.172.219  4001 1298 UDP
2024-03-11 16:38:04  $ip 61712 ->      10.138.0.8  4001 1298 UDP
2024-03-11 16:38:04  $ip 57747 ->      10.138.0.8  4001   78 TCP
2024-03-11 16:38:04  $ip 61712 ->      10.138.0.8  4001 1298 UDP
2024-03-11 16:38:23  $ip 51734 ->  10.162.235.195  4001   78 TCP
2024-03-11 16:38:23  $ip 63056 ->  10.162.235.195  4004   78 TCP
2024-03-11 16:38:23  $ip 63687 ->  10.162.235.195  4004   78 TCP
2024-03-11 16:38:26  $ip 63687 ->  10.162.235.195  4004   78 TCP
2024-03-11 16:38:24  $ip 63687 ->  10.162.235.195  4004   78 TCP
2024-03-11 16:38:06  $ip 60336 ->  10.190.229.105  4001   78 TCP
2024-03-11 16:38:06  $ip 53190 ->  10.190.229.105  4001 1298 UDP
2024-03-11 16:38:05  $ip 53190 ->  10.190.229.105  4001 1298 UDP
2024-03-11 16:38:05  $ip 53190 ->  10.190.229.105  4001 1298 UDP
2024-03-11 16:38:05  $ip 60336 ->  10.190.229.105  4001   78 TCP
2024-03-11 16:38:05  $ip 53190 ->  10.190.229.105  4001 1298 UDP
2024-03-11 16:38:05  $ip 53190 ->  10.190.229.105  4001 1298 UDP
2024-03-11 16:38:05  $ip 53190 ->  10.190.229.105  4001 1298 UDP
2024-03-11 16:38:40  $ip 60371 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:38:40  $ip 60371 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:38:40  $ip 60371 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:38:40  $ip 60371 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:37:40  $ip 53838 ->   10.250.150.95  4001   78 TCP
2024-03-11 16:37:40  $ip 50183 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:37:40  $ip 50183 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:37:40  $ip 50183 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:37:40  $ip 50183 ->   10.250.150.95  4001 1298 UDP
2024-03-11 16:36:30  $ip 52279 ->      10.254.1.5  4001   78 TCP
2024-03-11 16:38:40  $ip 50690 ->    100.79.44.13 46218   78 TCP
2024-03-11 16:38:41  $ip 50690 ->    100.79.44.13 46218   78 TCP
2024-03-11 16:36:32  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:30  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:31  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:34  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:31  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:34  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:36  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:31  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:31  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:31  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:31  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:30  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:30  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:30  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:32  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:30  $ip 61584 -> 100.111.174.251 40796 1298 UDP
2024-03-11 16:36:30  $ip 55333 -> 100.111.174.251 40796   78 TCP
2024-03-11 16:36:34  $ip 64722 -> 100.111.174.251 56758   78 TCP
2024-03-11 16:36:32  $ip 64722 -> 100.111.174.251 56758   78 TCP
2024-03-11 16:36:31  $ip 64722 -> 100.111.174.251 56758   78 TCP
2024-03-11 16:37:45  $ip 64152 ->     172.16.0.28  4001   78 TCP
2024-03-11 16:35:14  $ip 62544 ->      172.18.0.1  4001   78 TCP
2024-03-11 16:35:13  $ip 62544 ->      172.18.0.1  4001   78 TCP
2024-03-11 16:36:12  $ip 53266 ->      172.18.0.1  4001   78 TCP
2024-03-11 16:35:17  $ip 62544 ->      172.18.0.1  4001   78 TCP
2024-03-11 16:36:15  $ip 53266 ->      172.18.0.1  4001   78 TCP
2024-03-11 16:36:13  $ip 53266 ->      172.18.0.1  4001   78 TCP
2024-03-11 16:37:51  $ip 55830 ->      172.18.0.2  4001   78 TCP
2024-03-11 16:38:04  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:05  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:36:30  $ip 63082 ->      172.18.0.3  4001   78 TCP
2024-03-11 16:37:56  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:37:56  $ip 53555 ->      172.18.0.3  4001   78 TCP
2024-03-11 16:37:56  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:37:56  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:37:57  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:04  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:04  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:04  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:04  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:04  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:04  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:05  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:29  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:29  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:29  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:29  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:38:05  $ip 59458 ->      172.18.0.3  4001 1298 UDP
2024-03-11 16:37:56  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:57  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:57  $ip 60988 ->      172.18.0.4  4001   78 TCP
2024-03-11 16:38:31  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:56  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:56  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:56  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:56  $ip 60988 ->      172.18.0.4  4001   78 TCP
2024-03-11 16:37:56  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:33  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:31  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:30  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:30  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:29  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:57  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:29  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:59  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:59  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:37:59  $ip 60988 ->      172.18.0.4  4001   78 TCP
2024-03-11 16:38:01  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:28  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:29  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:38:29  $ip 54008 ->      172.18.0.4  4001 1298 UDP
2024-03-11 16:35:23  $ip 57774 ->      172.18.0.7  4001 1298 UDP
2024-03-11 16:35:22  $ip 54787 ->      172.18.0.7  4001   78 TCP
2024-03-11 16:35:23  $ip 57774 ->      172.18.0.7  4001 1298 UDP
2024-03-11 16:37:50  $ip 64823 ->    172.18.62.20  4001 1298 UDP
2024-03-11 16:37:50  $ip 63083 ->    172.18.62.20  4001   78 TCP
2024-03-11 16:37:50  $ip 64823 ->    172.18.62.20  4001 1298 UDP
2024-03-11 16:38:04  $ip 62065 ->      172.19.0.6  4001 1298 UDP
2024-03-11 16:38:03  $ip 62065 ->      172.19.0.6  4001 1298 UDP
2024-03-11 16:38:03  $ip 62065 ->      172.19.0.6  4001 1298 UDP
2024-03-11 16:38:03  $ip 64235 ->      172.19.0.6  4001   78 TCP
2024-03-11 16:38:03  $ip 62065 ->      172.19.0.6  4001 1298 UDP
2024-03-11 16:38:03  $ip 61950 ->      172.19.0.6  8081   78 TCP
2024-03-11 16:38:38  $ip 55320 ->      172.20.0.2  4001   78 TCP
2024-03-11 16:36:13  $ip 62098 ->     172.20.2.16  4001 1298 UDP
2024-03-11 16:36:13  $ip 62098 ->     172.20.2.16  4001 1298 UDP
2024-03-11 16:36:13  $ip 62098 ->     172.20.2.16  4001 1298 UDP
2024-03-11 16:36:13  $ip 62098 ->     172.20.2.16  4001 1298 UDP
2024-03-11 16:36:13  $ip 50967 ->     172.20.2.16  4001   78 TCP
2024-03-11 16:38:33  $ip 51705 ->      172.21.0.2  4001   78 TCP
2024-03-11 16:38:32  $ip 51705 ->      172.21.0.2  4001   78 TCP
2024-03-11 16:38:05  $ip 52660 ->      172.29.0.5  4001   78 TCP
2024-03-11 16:38:09  $ip 54183 ->     172.31.1.15  4001 1298 UDP
2024-03-11 16:38:09  $ip 54183 ->     172.31.1.15  4001 1298 UDP
2024-03-11 16:38:09  $ip 54183 ->     172.31.1.15  4001 1298 UDP
2024-03-11 16:38:09  $ip 65230 ->     172.31.1.15  4001   78 TCP
2024-03-11 16:38:09  $ip 54183 ->     172.31.1.15  4001 1298 UDP
2024-03-11 16:37:41  $ip 61932 ->   172.31.25.122  4001   78 TCP
2024-03-11 16:38:31  $ip 58493 ->   172.31.30.196  4001   78 TCP
2024-03-11 16:35:24  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:24  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:25  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:24  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:25  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:23  $ip 62546 ->    172.31.35.81  4001   78 TCP
2024-03-11 16:35:23  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:26  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:25  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:25  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:24  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:24  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:35:24  $ip 61293 ->    172.31.35.81  4001 1298 UDP
2024-03-11 16:37:52  $ip 56849 ->    172.31.40.29  4001   78 TCP
2024-03-11 16:37:51  $ip 56849 ->    172.31.40.29  4001   78 TCP
2024-03-11 16:37:54  $ip 56849 ->    172.31.40.29  4001   78 TCP
2024-03-11 16:37:55  $ip 54007 ->    172.31.46.44  4001 1298 UDP
2024-03-11 16:37:54  $ip 54007 ->    172.31.46.44  4001 1298 UDP
2024-03-11 16:37:55  $ip 54007 ->    172.31.46.44  4001 1298 UDP
2024-03-11 16:37:55  $ip 62019 ->    172.31.46.44  4001   78 TCP
2024-03-11 16:37:55  $ip 54007 ->    172.31.46.44  4001 1298 UDP
2024-03-11 16:36:30  $ip 57397 ->     192.168.0.2  4001   78 TCP
2024-03-11 16:38:39  $ip 50790 ->     192.168.0.4 44005   78 TCP
2024-03-11 16:35:38  $ip 61135 ->    192.168.0.10 44005 1298 UDP
2024-03-11 16:35:38  $ip 61135 ->    192.168.0.10 44005 1298 UDP
2024-03-11 16:38:09  $ip 52629 ->    192.168.0.11 44005 1298 UDP
2024-03-11 16:38:09  $ip 52325 ->    192.168.0.11 44005   78 TCP
2024-03-11 16:38:09  $ip 52629 ->    192.168.0.11 44005 1298 UDP
2024-03-11 16:38:34  $ip 62059 ->    192.168.0.12  4001   78 TCP
2024-03-11 16:38:31  $ip 62059 ->    192.168.0.12  4001   78 TCP
2024-03-11 16:38:32  $ip 62059 ->    192.168.0.12  4001   78 TCP
2024-03-11 16:35:24  $ip 54504 ->    192.168.0.12 44005 1298 UDP
2024-03-11 16:35:24  $ip 54504 ->    192.168.0.12 44005 1298 UDP
2024-03-11 16:38:31  $ip 57982 ->    192.168.0.13  4001   78 TCP
2024-03-11 16:38:34  $ip 57982 ->    192.168.0.13  4001   78 TCP
2024-03-11 16:38:32  $ip 57982 ->    192.168.0.13  4001   78 TCP
2024-03-11 16:38:31  $ip 55165 ->    192.168.0.14  4001   78 TCP
2024-03-11 16:38:32  $ip 55165 ->    192.168.0.14  4001   78 TCP
2024-03-11 16:38:34  $ip 55165 ->    192.168.0.14  4001   78 TCP
2024-03-11 16:38:31  $ip 64751 ->    192.168.0.18  4001   78 TCP
2024-03-11 16:38:32  $ip 64751 ->    192.168.0.18  4001   78 TCP
2024-03-11 16:38:34  $ip 64751 ->    192.168.0.18  4001   78 TCP
2024-03-11 16:35:48  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:49  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:48  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:46  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:46  $ip 64495 ->    192.168.0.25 44005   78 TCP
2024-03-11 16:35:46  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:49  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:51  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:46  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:46  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:46  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:47  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:47  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:47  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:35:47  $ip 58744 ->    192.168.0.25 44005 1298 UDP
2024-03-11 16:38:31  $ip 58682 ->    192.168.0.29  4001   78 TCP
2024-03-11 16:38:34  $ip 58682 ->    192.168.0.29  4001   78 TCP
2024-03-11 16:38:32  $ip 58682 ->    192.168.0.29  4001   78 TCP
2024-03-11 16:35:27  $ip 54654 ->    192.168.0.30 44005 1298 UDP
2024-03-11 16:35:27  $ip 54654 ->    192.168.0.30 44005 1298 UDP
2024-03-11 16:35:27  $ip 54654 ->    192.168.0.30 44005 1298 UDP
2024-03-11 16:35:27  $ip 54654 ->    192.168.0.30 44005 1298 UDP
2024-03-11 16:35:27  $ip 60025 ->    192.168.0.30 44005   78 TCP
2024-03-11 16:38:31  $ip 57030 ->    192.168.0.31  4001   78 TCP
2024-03-11 16:38:32  $ip 57030 ->    192.168.0.31  4001   78 TCP
2024-03-11 16:38:34  $ip 57030 ->    192.168.0.31  4001   78 TCP
2024-03-11 16:38:39  $ip 53982 ->    192.168.0.33  4001   78 TCP
2024-03-11 16:38:36  $ip 53982 ->    192.168.0.33  4001   78 TCP
2024-03-11 16:38:37  $ip 53982 ->    192.168.0.33  4001   78 TCP
2024-03-11 16:38:03  $ip 59674 ->    192.168.0.34 44005   78 TCP
2024-03-11 16:38:36  $ip 63107 ->   192.168.0.100  4001   78 TCP
2024-03-11 16:38:39  $ip 63107 ->   192.168.0.100  4001   78 TCP
2024-03-11 16:38:37  $ip 63107 ->   192.168.0.100  4001   78 TCP
2024-03-11 16:37:58  $ip 64425 ->   192.168.0.100 44005   78 TCP
2024-03-11 16:37:58  $ip 64583 ->   192.168.0.101  4001   78 TCP
2024-03-11 16:37:59  $ip 64583 ->   192.168.0.101  4001   78 TCP
2024-03-11 16:38:39  $ip 62162 ->   192.168.0.101  4001   78 TCP
2024-03-11 16:38:01  $ip 64583 ->   192.168.0.101  4001   78 TCP
2024-03-11 16:38:36  $ip 62162 ->   192.168.0.101  4001   78 TCP
2024-03-11 16:38:37  $ip 62162 ->   192.168.0.101  4001   78 TCP
2024-03-11 16:38:36  $ip 60288 ->   192.168.0.102  4001   78 TCP
2024-03-11 16:38:37  $ip 60288 ->   192.168.0.102  4001   78 TCP
2024-03-11 16:38:39  $ip 60288 ->   192.168.0.102  4001   78 TCP
2024-03-11 16:38:39  $ip 51578 ->   192.168.0.103  4001   78 TCP
2024-03-11 16:38:37  $ip 51578 ->   192.168.0.103  4001   78 TCP
2024-03-11 16:38:36  $ip 51578 ->   192.168.0.103  4001   78 TCP
2024-03-11 16:38:39  $ip 52072 ->   192.168.0.104  4001   78 TCP
2024-03-11 16:38:37  $ip 52072 ->   192.168.0.104  4001   78 TCP
2024-03-11 16:37:58  $ip 61509 ->   192.168.0.104  4001   78 TCP
2024-03-11 16:37:59  $ip 61509 ->   192.168.0.104  4001   78 TCP
2024-03-11 16:38:01  $ip 61509 ->   192.168.0.104  4001   78 TCP
2024-03-11 16:38:36  $ip 52072 ->   192.168.0.104  4001   78 TCP
2024-03-11 16:35:38  $ip 57663 ->   192.168.0.104 44005 1298 UDP
2024-03-11 16:35:37  $ip 59234 ->   192.168.0.104 44005   78 TCP
2024-03-11 16:35:39  $ip 57663 ->   192.168.0.104 44005 1298 UDP
2024-03-11 16:35:38  $ip 57663 ->   192.168.0.104 44005 1298 UDP
2024-03-11 16:35:38  $ip 57663 ->   192.168.0.104 44005 1298 UDP
2024-03-11 16:38:37  $ip 64021 ->   192.168.0.105  4001   78 TCP
2024-03-11 16:38:36  $ip 64021 ->   192.168.0.105  4001   78 TCP
2024-03-11 16:38:39  $ip 64021 ->   192.168.0.105  4001   78 TCP
2024-03-11 16:38:41  $ip 51161 ->   192.168.0.106 44005   78 TCP
2024-03-11 16:38:39  $ip 62471 ->   192.168.0.107  4001   78 TCP
2024-03-11 16:38:36  $ip 62471 ->   192.168.0.107  4001   78 TCP
2024-03-11 16:38:37  $ip 62471 ->   192.168.0.107  4001   78 TCP
2024-03-11 16:35:22  $ip 58028 ->   192.168.0.111  4001   78 TCP
2024-03-11 16:35:25  $ip 58028 ->   192.168.0.111  4001   78 TCP
2024-03-11 16:35:23  $ip 58028 ->   192.168.0.111  4001   78 TCP
2024-03-11 16:37:44  $ip 62393 ->   192.168.0.111 44005   78 TCP
2024-03-11 16:37:42  $ip 62393 ->   192.168.0.111 44005   78 TCP
2024-03-11 16:37:41  $ip 62393 ->   192.168.0.111 44005   78 TCP
2024-03-11 16:38:01  $ip 62546 ->   192.168.0.113  4001   78 TCP
2024-03-11 16:37:59  $ip 62546 ->   192.168.0.113  4001   78 TCP
2024-03-11 16:37:58  $ip 62546 ->   192.168.0.113  4001   78 TCP
2024-03-11 16:38:41  $ip 52291 ->   192.168.0.113  4001   78 TCP
2024-03-11 16:38:42  $ip 52291 ->   192.168.0.113  4001   78 TCP
2024-03-11 16:38:42  $ip 61606 ->   192.168.0.116  4001   78 TCP
2024-03-11 16:38:41  $ip 61606 ->   192.168.0.116  4001   78 TCP
2024-03-11 16:38:41  $ip 57512 ->   192.168.0.120  4001   78 TCP
2024-03-11 16:38:42  $ip 57512 ->   192.168.0.120  4001   78 TCP
2024-03-11 16:35:17  $ip 55637 ->   192.168.0.141  4001   78 TCP
2024-03-11 16:35:14  $ip 55637 ->   192.168.0.141  4001   78 TCP
2024-03-11 16:35:13  $ip 55637 ->   192.168.0.141  4001   78 TCP
2024-03-11 16:36:12  $ip 50037 ->   192.168.0.141  4001   78 TCP
2024-03-11 16:36:13  $ip 50037 ->   192.168.0.141  4001   78 TCP
2024-03-11 16:36:15  $ip 50037 ->   192.168.0.141  4001   78 TCP
2024-03-11 16:35:46  $ip 53441 ->   192.168.0.184 44005 1298 UDP
2024-03-11 16:35:46  $ip 53441 ->   192.168.0.184 44005 1298 UDP
2024-03-11 16:37:55  $ip 54841 ->   192.168.0.188 44005 1298 UDP
2024-03-11 16:37:55  $ip 54841 ->   192.168.0.188 44005 1298 UDP
2024-03-11 16:36:02  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:02  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:03  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:02  $ip 50747 ->   192.168.0.200 44005   78 TCP
2024-03-11 16:36:02  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:03  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:05  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:05  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:02  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:02  $ip 59871 ->   192.168.0.200 44005 1298 UDP
2024-03-11 16:36:05  $ip 50747 ->   192.168.0.200 44005   78 TCP
2024-03-11 16:36:03  $ip 50747 ->   192.168.0.200 44005   78 TCP
2024-03-11 16:38:04  $ip 62362 ->     192.168.1.2  4001 1298 UDP
2024-03-11 16:38:04  $ip 62362 ->     192.168.1.2  4001 1298 UDP
2024-03-11 16:38:04  $ip 51116 ->     192.168.1.2  4001   78 TCP
2024-03-11 16:38:05  $ip 62362 ->     192.168.1.2  4001 1298 UDP
2024-03-11 16:38:04  $ip 62362 ->     192.168.1.2  4001 1298 UDP
2024-03-11 16:38:04  $ip 61737 ->     192.168.1.2  8081   78 TCP
2024-03-11 16:38:41  $ip 53950 ->     192.168.1.2  8081   78 TCP
2024-03-11 16:38:42  $ip 59318 ->     192.168.1.2 44005 1298 UDP
2024-03-11 16:38:43  $ip 59318 ->     192.168.1.2 44005 1298 UDP
2024-03-11 16:38:43  $ip 59318 ->     192.168.1.2 44005 1298 UDP
2024-03-11 16:38:39  $ip 55041 ->     192.168.1.2 44005   78 TCP
2024-03-11 16:38:38  $ip 55041 ->     192.168.1.2 44005   78 TCP
2024-03-11 16:38:41  $ip 55041 ->     192.168.1.2 44005   78 TCP
2024-03-11 16:38:42  $ip 59318 ->     192.168.1.2 44005 1298 UDP
2024-03-11 16:38:42  $ip 59318 ->     192.168.1.2 44005 1298 UDP
2024-03-11 16:37:59  $ip 52087 ->     192.168.1.3  4001   78 TCP
2024-03-11 16:38:01  $ip 52087 ->     192.168.1.3  4001   78 TCP
2024-03-11 16:37:58  $ip 52087 ->     192.168.1.3  4001   78 TCP
2024-03-11 16:37:49  $ip 50356 ->     192.168.1.3 44005 1298 UDP
2024-03-11 16:37:49  $ip 50356 ->     192.168.1.3 44005 1298 UDP
2024-03-11 16:38:42  $ip 50669 ->     192.168.1.3 57119 1298 UDP
2024-03-11 16:38:43  $ip 50669 ->     192.168.1.3 57119 1298 UDP
2024-03-11 16:38:42  $ip 50669 ->     192.168.1.3 57119 1298 UDP
2024-03-11 16:38:42  $ip 50669 ->     192.168.1.3 57119 1298 UDP
2024-03-11 16:38:43  $ip 50669 ->     192.168.1.3 57119 1298 UDP
2024-03-11 16:38:41  $ip 61219 ->     192.168.1.3 57119   78 TCP
2024-03-11 16:38:39  $ip 61219 ->     192.168.1.3 57119   78 TCP
2024-03-11 16:38:38  $ip 61219 ->     192.168.1.3 57119   78 TCP
2024-03-11 16:38:03  $ip 54915 ->     192.168.1.4  4001   78 TCP
2024-03-11 16:38:04  $ip 54915 ->     192.168.1.4  4001   78 TCP
2024-03-11 16:38:06  $ip 54915 ->     192.168.1.4  4001   78 TCP
2024-03-11 16:37:49  $ip 55926 ->     192.168.1.4 44005   78 TCP
2024-03-11 16:37:50  $ip 64692 ->     192.168.1.4 44005 1298 UDP
2024-03-11 16:37:50  $ip 64692 ->     192.168.1.4 44005 1298 UDP
2024-03-11 16:37:50  $ip 64692 ->     192.168.1.4 44005 1298 UDP
2024-03-11 16:37:50  $ip 64692 ->     192.168.1.4 44005 1298 UDP
2024-03-11 16:37:50  $ip 64692 ->     192.168.1.4 44005 1298 UDP
2024-03-11 16:37:49  $ip 64692 ->     192.168.1.4 44005 1298 UDP
2024-03-11 16:38:06  $ip 53367 ->     192.168.1.5  4001   78 TCP
2024-03-11 16:38:04  $ip 53367 ->     192.168.1.5  4001   78 TCP
2024-03-11 16:38:03  $ip 53367 ->     192.168.1.5  4001   78 TCP
2024-03-11 16:36:02  $ip 59155 ->     192.168.1.6 44005   78 TCP
2024-03-11 16:36:02  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:05  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:03  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:05  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:05  $ip 59155 ->     192.168.1.6 44005   78 TCP
2024-03-11 16:36:02  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:02  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:02  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:02  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:03  $ip 62292 ->     192.168.1.6 44005 1298 UDP
2024-03-11 16:36:03  $ip 59155 ->     192.168.1.6 44005   78 TCP
2024-03-11 16:38:06  $ip 62480 ->     192.168.1.8  4001   78 TCP
2024-03-11 16:38:03  $ip 62480 ->     192.168.1.8  4001   78 TCP
2024-03-11 16:38:04  $ip 62480 ->     192.168.1.8  4001   78 TCP
2024-03-11 16:38:04  $ip 52805 ->    192.168.1.10  4001   78 TCP
2024-03-11 16:38:03  $ip 52805 ->    192.168.1.10  4001   78 TCP
2024-03-11 16:35:15  $ip 58265 ->    192.168.1.10  4001   78 TCP
2024-03-11 16:38:06  $ip 52805 ->    192.168.1.10  4001   78 TCP
2024-03-11 16:38:08  $ip 54688 ->    192.168.1.13  4001   78 TCP
2024-03-11 16:38:09  $ip 54688 ->    192.168.1.13  4001   78 TCP
2024-03-11 16:35:56  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:56  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:56  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:56  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:56  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:56  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:59  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:56  $ip 56708 ->    192.168.1.14 44005   78 TCP
2024-03-11 16:35:56  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:59  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:58  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:58  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:57  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:35:57  $ip 56541 ->    192.168.1.14 44005 1298 UDP
2024-03-11 16:38:09  $ip 50671 ->    192.168.1.15  4001   78 TCP
2024-03-11 16:38:08  $ip 50671 ->    192.168.1.15  4001   78 TCP
2024-03-11 16:38:31  $ip 50175 ->    192.168.1.16  4001   78 TCP
2024-03-11 16:38:32  $ip 50175 ->    192.168.1.16  4001   78 TCP
2024-03-11 16:38:34  $ip 50175 ->    192.168.1.16  4001   78 TCP
2024-03-11 16:35:28  $ip 63779 ->    192.168.1.16 44005 1298 UDP
2024-03-11 16:35:28  $ip 63779 ->    192.168.1.16 44005 1298 UDP
2024-03-11 16:36:30  $ip 65416 ->    192.168.1.17 44005 1298 UDP
2024-03-11 16:36:30  $ip 65416 ->    192.168.1.17 44005 1298 UDP
2024-03-11 16:38:08  $ip 55335 ->    192.168.1.18  4001   78 TCP
2024-03-11 16:38:09  $ip 55335 ->    192.168.1.18  4001   78 TCP
2024-03-11 16:37:52  $ip 56655 ->    192.168.1.21  4001 1298 UDP
2024-03-11 16:37:51  $ip 56655 ->    192.168.1.21  4001 1298 UDP
2024-03-11 16:37:52  $ip 56655 ->    192.168.1.21  4001 1298 UDP
2024-03-11 16:37:52  $ip 56655 ->    192.168.1.21  4001 1298 UDP
2024-03-11 16:37:51  $ip 56655 ->    192.168.1.21  4001 1298 UDP
2024-03-11 16:37:51  $ip 56655 ->    192.168.1.21  4001 1298 UDP
2024-03-11 16:37:51  $ip 59540 ->    192.168.1.21  4001   78 TCP
2024-03-11 16:37:49  $ip 54764 ->    192.168.1.21 44005 1298 UDP
2024-03-11 16:37:49  $ip 57126 ->    192.168.1.21 44005   78 TCP
2024-03-11 16:37:49  $ip 54764 ->    192.168.1.21 44005 1298 UDP
2024-03-11 16:35:53  $ip 54479 ->    192.168.1.28 44005 1298 UDP
2024-03-11 16:35:53  $ip 54479 ->    192.168.1.28 44005 1298 UDP
2024-03-11 16:35:53  $ip 54479 ->    192.168.1.28 44005 1298 UDP
2024-03-11 16:35:53  $ip 54543 ->    192.168.1.28 44005   78 TCP
2024-03-11 16:35:54  $ip 54479 ->    192.168.1.28 44005 1298 UDP
2024-03-11 16:35:54  $ip 54479 ->    192.168.1.28 44005 1298 UDP
2024-03-11 16:35:54  $ip 54479 ->    192.168.1.28 44005 1298 UDP
2024-03-11 16:38:38  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:38  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:38  $ip 60758 ->    192.168.1.52 44005   78 TCP
2024-03-11 16:36:14  $ip 60646 ->    192.168.1.52 44005   78 TCP
2024-03-11 16:38:38  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:41  $ip 60758 ->    192.168.1.52 44005   78 TCP
2024-03-11 16:38:41  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:41  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:40  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:40  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:39  $ip 60758 ->    192.168.1.52 44005   78 TCP
2024-03-11 16:38:39  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:38:39  $ip 57828 ->    192.168.1.52 44005 1298 UDP
2024-03-11 16:35:30  $ip 53412 ->    192.168.1.62 44005 1298 UDP
2024-03-11 16:35:30  $ip 55983 ->    192.168.1.62 44005   78 TCP
2024-03-11 16:35:30  $ip 53412 ->    192.168.1.62 44005 1298 UDP
2024-03-11 16:36:13  $ip 63381 ->    192.168.1.71 44005 1298 UDP
2024-03-11 16:36:14  $ip 63381 ->    192.168.1.71 44005 1298 UDP
2024-03-11 16:36:14  $ip 63381 ->    192.168.1.71 44005 1298 UDP
2024-03-11 16:36:14  $ip 63381 ->    192.168.1.71 44005 1298 UDP
2024-03-11 16:36:13  $ip 63381 ->    192.168.1.71 44005 1298 UDP
2024-03-11 16:36:13  $ip 51127 ->    192.168.1.71 44005   78 TCP
2024-03-11 16:36:13  $ip 63381 ->    192.168.1.71 44005 1298 UDP
2024-03-11 16:36:30  $ip 62943 ->    192.168.1.76 44005 1298 UDP
2024-03-11 16:36:30  $ip 62943 ->    192.168.1.76 44005 1298 UDP
2024-03-11 16:37:55  $ip 56839 ->    192.168.1.88 44005 1298 UDP
2024-03-11 16:37:55  $ip 56839 ->    192.168.1.88 44005 1298 UDP
2024-03-11 16:37:55  $ip 57042 ->    192.168.1.88 44005   78 TCP
2024-03-11 16:37:55  $ip 56839 ->    192.168.1.88 44005 1298 UDP
2024-03-11 16:37:55  $ip 56839 ->    192.168.1.88 44005 1298 UDP
2024-03-11 16:37:55  $ip 53768 ->   192.168.1.103  4001   78 TCP
2024-03-11 16:37:55  $ip 56193 ->   192.168.1.103  4001 1298 UDP
2024-03-11 16:38:28  $ip 56193 ->   192.168.1.103  4001 1298 UDP
2024-03-11 16:38:28  $ip 56193 ->   192.168.1.103  4001 1298 UDP
2024-03-11 16:37:55  $ip 56193 ->   192.168.1.103  4001 1298 UDP
2024-03-11 16:35:53  $ip 60715 ->   192.168.1.105 44005   78 TCP
2024-03-11 16:35:53  $ip 54643 ->   192.168.1.105 44005 1298 UDP
2024-03-11 16:35:54  $ip 54643 ->   192.168.1.105 44005 1298 UDP
2024-03-11 16:38:42  $ip 57295 ->   192.168.1.131 44005 1298 UDP
2024-03-11 16:38:42  $ip 57295 ->   192.168.1.131 44005 1298 UDP
2024-03-11 16:38:29  $ip 57130 ->   192.168.1.142 44005 1298 UDP
2024-03-11 16:38:30  $ip 57130 ->   192.168.1.142 44005 1298 UDP
2024-03-11 16:38:30  $ip 57130 ->   192.168.1.142 44005 1298 UDP
2024-03-11 16:38:29  $ip 57130 ->   192.168.1.142 44005 1298 UDP
2024-03-11 16:38:29  $ip 51590 ->   192.168.1.142 44005   78 TCP
2024-03-11 16:38:30  $ip 57130 ->   192.168.1.142 44005 1298 UDP
2024-03-11 16:38:29  $ip 57130 ->   192.168.1.142 44005 1298 UDP
2024-03-11 16:35:37  $ip 61357 ->   192.168.1.151 44005   78 TCP
2024-03-11 16:38:29  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:55  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:56  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:29  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:29  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:28  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:55  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:33  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:58  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:31  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:58  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:31  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:55  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:58  $ip 60048 ->   192.168.1.152 25065   78 TCP
2024-03-11 16:38:29  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:56  $ip 60048 ->   192.168.1.152 25065   78 TCP
2024-03-11 16:37:55  $ip 60048 ->   192.168.1.152 25065   78 TCP
2024-03-11 16:37:55  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:28  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:56  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:28  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:37:55  $ip 65511 ->   192.168.1.152 25065 1298 UDP
2024-03-11 16:38:16  $ip 56222 ->   192.168.1.153 44005 1298 UDP
2024-03-11 16:38:16  $ip 50275 ->   192.168.1.153 44005   78 TCP
2024-03-11 16:38:16  $ip 56222 ->   192.168.1.153 44005 1298 UDP
2024-03-11 16:35:55  $ip 54458 ->   192.168.1.157 44005   78 TCP
2024-03-11 16:35:14  $ip 51312 ->   192.168.1.163 44005 1298 UDP
2024-03-11 16:35:14  $ip 51312 ->   192.168.1.163 44005 1298 UDP
2024-03-11 16:38:37  $ip 62266 ->   192.168.1.163 44005   78 TCP
2024-03-11 16:38:29  $ip 58895 ->   192.168.1.173 44005 1298 UDP
2024-03-11 16:38:29  $ip 58895 ->   192.168.1.173 44005 1298 UDP
2024-03-11 16:38:38  $ip 62423 ->   192.168.1.227 44005   78 TCP
2024-03-11 16:36:13  $ip 59751 ->   192.168.1.240 44005 1298 UDP
2024-03-11 16:36:13  $ip 59751 ->   192.168.1.240 44005 1298 UDP
2024-03-11 16:38:09  $ip 57072 ->     192.168.2.3  4001   78 TCP
2024-03-11 16:38:08  $ip 57072 ->     192.168.2.3  4001   78 TCP
2024-03-11 16:38:09  $ip 55139 ->     192.168.2.4  4001   78 TCP
2024-03-11 16:38:08  $ip 55139 ->     192.168.2.4  4001   78 TCP
2024-03-11 16:38:23  $ip 54814 ->     192.168.2.5 37989   78 TCP
2024-03-11 16:38:28  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:24  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:24  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:24  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:23  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:23  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:23  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:25  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:26  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:26  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:23  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:24  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:25  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:38:23  $ip 54577 ->     192.168.2.5 37989 1298 UDP
2024-03-11 16:37:58  $ip 57910 ->    192.168.2.13  4001   78 TCP
2024-03-11 16:37:59  $ip 57910 ->    192.168.2.13  4001   78 TCP
2024-03-11 16:38:01  $ip 57910 ->    192.168.2.13  4001   78 TCP
2024-03-11 16:38:06  $ip 61669 ->    192.168.2.21  4001   78 TCP
2024-03-11 16:38:03  $ip 61669 ->    192.168.2.21  4001   78 TCP
2024-03-11 16:38:04  $ip 61669 ->    192.168.2.21  4001   78 TCP
2024-03-11 16:38:04  $ip 51683 ->    192.168.2.31  4001   78 TCP
2024-03-11 16:38:03  $ip 51683 ->    192.168.2.31  4001   78 TCP
2024-03-11 16:38:06  $ip 51683 ->    192.168.2.31  4001   78 TCP
2024-03-11 16:36:14  $ip 57893 ->    192.168.3.62  4001 1298 UDP
2024-03-11 16:36:14  $ip 57893 ->    192.168.3.62  4001 1298 UDP
2024-03-11 16:35:43  $ip 58195 ->    192.168.4.74  4001 1298 UDP
2024-03-11 16:35:43  $ip 64449 ->    192.168.4.74  4001   78 TCP
2024-03-11 16:35:43  $ip 58195 ->    192.168.4.74  4001 1298 UDP
2024-03-11 16:38:00  $ip 60069 ->  192.168.10.161  4001 1298 UDP
2024-03-11 16:38:00  $ip 60069 ->  192.168.10.161  4001 1298 UDP
2024-03-11 16:38:00  $ip 64989 ->  192.168.10.161  4001   78 TCP
2024-03-11 16:38:23  $ip 52598 ->   192.168.12.32  4001   78 TCP
2024-03-11 16:36:30  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:36  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:34  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:30  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:32  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:32  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:34  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:30  $ip 64490 ->    192.168.19.8 44005   78 TCP
2024-03-11 16:36:30  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:36:31  $ip 57127 ->    192.168.19.8 44005 1298 UDP
2024-03-11 16:35:53  $ip 52397 ->   192.168.20.69 44005   78 TCP
2024-03-11 16:35:54  $ip 58383 ->   192.168.20.69 44005 1298 UDP
2024-03-11 16:35:53  $ip 58383 ->   192.168.20.69 44005 1298 UDP
2024-03-11 16:38:31  $ip 59186 ->  192.168.31.130  4001   78 TCP
2024-03-11 16:38:32  $ip 59186 ->  192.168.31.130  4001   78 TCP
2024-03-11 16:38:34  $ip 59186 ->  192.168.31.130  4001   78 TCP
2024-03-11 16:35:37  $ip 50478 ->  192.168.33.121 44005   78 TCP
2024-03-11 16:38:09  $ip 56605 ->    192.168.48.3  4001   78 TCP
2024-03-11 16:38:08  $ip 51183 ->   192.168.50.85  4001   78 TCP
2024-03-11 16:38:09  $ip 51183 ->   192.168.50.85  4001   78 TCP
2024-03-11 16:38:42  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:43  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:42  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:42  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:42  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:40  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:40  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:40  $ip 55026 ->    192.168.64.3  4001   78 TCP
2024-03-11 16:38:40  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:40  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:39  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:39  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:39  $ip 55026 ->    192.168.64.3  4001   78 TCP
2024-03-11 16:38:39  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:43  $ip 56851 ->    192.168.64.3  4001 1298 UDP
2024-03-11 16:38:09  $ip 56398 ->   192.168.68.56 44005 1298 UDP
2024-03-11 16:38:09  $ip 56398 ->   192.168.68.56 44005 1298 UDP
2024-03-11 16:38:30  $ip 55725 ->  192.168.68.151  4001   78 TCP
2024-03-11 16:38:08  $ip 56543 ->   192.168.71.29  4001   78 TCP
2024-03-11 16:38:09  $ip 56543 ->   192.168.71.29  4001   78 TCP
2024-03-11 16:38:03  $ip 63471 ->   192.168.71.73  4001   78 TCP
2024-03-11 16:38:06  $ip 63471 ->   192.168.71.73  4001   78 TCP
2024-03-11 16:38:04  $ip 63471 ->   192.168.71.73  4001   78 TCP
2024-03-11 16:38:03  $ip 56916 ->   192.168.71.79  4001   78 TCP
2024-03-11 16:38:04  $ip 56916 ->   192.168.71.79  4001   78 TCP
2024-03-11 16:38:06  $ip 56916 ->   192.168.71.79  4001   78 TCP
2024-03-11 16:38:42  $ip 50334 ->  192.168.71.100  4001   78 TCP
2024-03-11 16:38:41  $ip 50334 ->  192.168.71.100  4001   78 TCP
2024-03-11 16:38:42  $ip 64676 ->  192.168.71.104  4001   78 TCP
2024-03-11 16:38:41  $ip 64676 ->  192.168.71.104  4001   78 TCP
2024-03-11 16:38:41  $ip 53140 ->  192.168.71.106  4001   78 TCP
2024-03-11 16:38:42  $ip 53140 ->  192.168.71.106  4001   78 TCP
2024-03-11 16:37:58  $ip 57638 ->   192.168.72.24 33366   78 TCP
2024-03-11 16:37:56  $ip 57638 ->   192.168.72.24 33366   78 TCP
2024-03-11 16:37:55  $ip 57638 ->   192.168.72.24 33366   78 TCP
2024-03-11 16:35:16  $ip 54838 ->  192.168.75.220  4001   78 TCP
2024-03-11 16:38:31  $ip 62941 ->   192.168.86.41 44005   78 TCP
2024-03-11 16:35:30  $ip 54378 ->   192.168.86.52  4001 1298 UDP
2024-03-11 16:35:30  $ip 60485 ->   192.168.86.52  4001   78 TCP
2024-03-11 16:35:30  $ip 54378 ->   192.168.86.52  4001 1298 UDP
2024-03-11 16:38:16  $ip 64406 ->  192.168.100.11 57758   78 TCP
2024-03-11 16:38:42  $ip 50656 ->  192.168.101.14  4001   78 TCP
2024-03-11 16:38:41  $ip 50656 ->  192.168.101.14  4001   78 TCP
2024-03-11 16:37:48  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:49  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:48  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:48  $ip 50836 -> 192.168.101.144 44005   78 TCP
2024-03-11 16:37:47  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:47  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:47  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:47  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:47  $ip 50836 -> 192.168.101.144 44005   78 TCP
2024-03-11 16:37:47  $ip 51967 -> 192.168.101.144 44005 1298 UDP
2024-03-11 16:37:58  $ip 52441 ->  192.168.110.50  4001   78 TCP
2024-03-11 16:37:59  $ip 52441 ->  192.168.110.50  4001   78 TCP
2024-03-11 16:38:01  $ip 52441 ->  192.168.110.50  4001   78 TCP
2024-03-11 16:37:58  $ip 54387 -> 192.168.110.192  4001   78 TCP
2024-03-11 16:38:01  $ip 54387 -> 192.168.110.192  4001   78 TCP
2024-03-11 16:37:59  $ip 54387 -> 192.168.110.192  4001   78 TCP
2024-03-11 16:37:58  $ip 63976 ->  192.168.111.44  4001   78 TCP
2024-03-11 16:38:01  $ip 63976 ->  192.168.111.44  4001   78 TCP
2024-03-11 16:37:59  $ip 63976 ->  192.168.111.44  4001   78 TCP
2024-03-11 16:38:15  $ip 59492 ->  192.168.121.61  4001   78 TCP
2024-03-11 16:37:56  $ip 52518 -> 192.168.121.197  4001   78 TCP
2024-03-11 16:37:57  $ip 52518 -> 192.168.121.197  4001   78 TCP
2024-03-11 16:37:59  $ip 52518 -> 192.168.121.197  4001   78 TCP

Kinda angry response from their support:

IPFS offers a server mode for public networks in which such scans are prevented. Please refer to the IPFS documentation here and please note that Netscans are generally prohibited here! In addition, it is not allowed to send RFC1918 traffic to the Internet, as it cannot be routed there.

Mar 11 '24 17:03 cryptix

kubo kubo copied to clipboard

Unexpected quick connection retries to the same host: Outgoing DDoS Detection by Hetzner

Checklist

Installation method

Version

Config

Description

kubo
kubo copied to clipboard