UDP traffic
Datagrams matching asn:11814 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
11
Datagrams
3
Source addresses
1
Networks
1
Countries
10
Destination ports
Traffic by type
Unrecognised
11 datagrams from 3 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5060/udp
payload bytes
00000000 1b 2e 6a 32 0f 77 59 19 5e 07 5d 37 55 0d 69 42 |..j2.wY.^.]7U.iB| 00000010 14 46 78 3f 35 1e 47 3b 65 1f 73 33 0f 44 76 2a |.Fx?5.G;e.s3.Dv*| 00000020 52 61 5c 61 58 36 7a 36 3d 58 6e 12 65 57 54 7a |Ra\aX6z6=Xn.eWTz| 00000030 1d 4d 39 52 6b 00 0d 50 1f 01 03 2e 45 79 59 18 |.M9Rk..P....EyY.| 00000040 5a 35 79 32 6b 74 69 28 4c 57 3a 31 1a 36 |Z5y2kti(LW:1.6|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| Memcached | 11211/udp | 2 | 1 | 10,000 to 51,000 |
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
| SSDP | 1900/udp | 1 | 1 | 30.8 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 174.138.216.234 | AS11814 Distributel Communications Limited | CA | Unrecognised | 9 | 2026-10-11 04:41 |
| 66.49.208.237 | AS11814 Distributel Communications Limited | CA | Unrecognised | 1 | 2026-10-06 01:01 |
| 172.97.151.195 | AS11814 Distributel Communications Limited | CA | Unrecognised | 1 | 2026-10-10 05:03 |
Latest datagrams
payload bytes
00000000 1b 2e 6a 32 0f 77 59 19 5e 07 5d 37 55 0d 69 42 |..j2.wY.^.]7U.iB| 00000010 14 46 78 3f 35 1e 47 3b 65 1f 73 33 0f 44 76 2a |.Fx?5.G;e.s3.Dv*| 00000020 52 61 5c 61 58 36 7a 36 3d 58 6e 12 65 57 54 7a |Ra\aX6z6=Xn.eWTz| 00000030 1d 4d 39 52 6b 00 0d 50 1f 01 03 2e 45 79 59 18 |.M9Rk..P....EyY.| 00000040 5a 35 79 32 6b 74 69 28 4c 57 3a 31 1a 36 |Z5y2kti(LW:1.6|
payload bytes
00000000 12 2e 23 3e 0a 1b 00 12 5e 1f 57 79 71 39 36 4e |..#>....^.Wyq96N| 00000010 39 40 27 24 73 0a 19 6d 1c 70 3c 7c 7a 13 6f 0c |9@'$s..m.p<|z.o.| 00000020 0d 12 4a 17 2e 4b 2a 0c 6a 01 05 5b 3a 3c 29 74 |..J..K*.j..[:<)t| 00000030 7c 51 18 6f 5b 32 5c 77 22 00 01 ||Q.o[2\w"..|
payload bytes
00000000 5e 2e 0e 27 34 70 48 3c 1e 74 37 04 19 75 72 25 |^..'4pH<.t7..ur%| 00000010 5f 4a 10 20 34 3b 3d 24 38 3a 00 56 0e 71 3c 6c |_J. 4;=$8:.V.q<l| 00000020 10 4a 14 44 3a 5c 00 58 50 37 5c 69 2c 4e 0f 0c |.J.D:\.XP7\i,N..| 00000030 19 1f 2c 4d 5a 69 71 12 23 71 69 32 62 25 1e 72 |..,MZiq.#qi2b%.r| 00000040 6f 32 37 29 0f 37 01 5f 6f 5d 49 1b 2c 58 27 45 |o27).7._o]I.,X'E| 00000050 77 53 12 51 ec 31 |wS.Q.1|
payload bytes
00000000 5e 2e 47 4d 43 47 05 18 78 80 57 |^.GMCG..x.W|
payload bytes
00000000 04 2e 39 16 46 52 00 0d 02 3c 53 2b 19 39 76 29 |..9.FR...<S+.9v)| 00000010 29 4e 4e 78 65 57 78 32 5e 15 6e 33 03 17 03 07 |)NNxeWx2^.n3....| 00000020 55 3d 1e 1c 0f 1e 29 11 5a 7c 3c 2d 03 |U=....).Z|<-.|
payload bytes
00000000 3e f0 95 9e 85 fe 77 8e 02 9e 40 53 d1 52 48 fa |>.....w...@S.RH.| 00000010 a6 59 6d cb 98 15 df fa 4f |.Ym.....O|
payload bytes
00000000 25 2e 14 66 bf |%..f.|
payload bytes
00000000 0e 2e 03 6f 47 48 0c 50 7a 1e 62 79 62 7e 10 07 |...oGH.Pz.byb~..| 00000010 07 63 3c 67 6d 0c 11 4f 1e 0f 68 4e 4c 53 19 5a |.c<gm..O..hNLS.Z| 00000020 38 1d 4a 7f 65 56 4f 5f 74 32 59 56 30 69 5e 37 |8.J.eVO_t2YV0i^7| 00000030 4c 1a 1e 39 27 2f 08 45 3f 71 13 0b 44 2d 65 7d |L..9'/.E?q..D-e}| 00000040 4a 2f 7c 2f 06 4c 0e 7a 7e 67 51 2e 50 7f 3f |J/|/.L.z~gQ.P.?|
payload bytes
00000000 05 2e 6a 77 36 7c 29 0b 60 77 44 5f 65 34 |..jw6|).`wD_e4|
payload bytes
00000000 3e 2e 11 06 3a 58 10 5f 35 6d 56 54 4c 30 42 78 |>...:X._5mVTL0Bx| 00000010 2d 23 45 6f 74 0d 43 39 34 29 23 23 52 4a 1f 10 |-#Eot.C94)##RJ..| 00000020 66 30 16 21 08 26 00 3d 14 56 11 60 b9 e6 |f0.!.&.=.V.`..|
payload bytes
00000000 17 2e 2d 25 76 0d 3a 5b 49 24 1a 70 76 0f 15 5f |..-%v.:[I$.pv.._| 00000010 35 09 3a 3c 56 02 42 3e 6b 17 69 3b 2c 20 2f 43 |5.:<V.B>k.i;, /C| 00000020 19 78 12 |.x.|