UDP traffic
Datagrams matching asn:11814 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
6
Datagrams
1
Source addresses
1
Networks
1
Countries
6
Destination ports
Traffic by type
Unrecognised
6 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8082/udp
payload bytes
00000000 39 2e 15 35 46 64 46 1d 76 0b 26 37 18 9c |9..5FdF.v.&7..|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
| SSDP | 1900/udp | 1 | 1 | 30.8 |
| Memcached | 11211/udp | 1 | 1 | 10,000 to 51,000 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 174.138.216.234 | AS11814 Distributel Communications Limited | CA | Unrecognised | 6 | 2026-10-11 06:11 |
Latest datagrams
payload bytes
00000000 39 2e 15 35 46 64 46 1d 76 0b 26 37 18 9c |9..5FdF.v.&7..|
payload bytes
00000000 1b 2e 6a 32 0f 77 59 19 5e 07 5d 37 55 0d 69 42 |..j2.wY.^.]7U.iB| 00000010 14 46 78 3f 35 1e 47 3b 65 1f 73 33 0f 44 76 2a |.Fx?5.G;e.s3.Dv*| 00000020 52 61 5c 61 58 36 7a 36 3d 58 6e 12 65 57 54 7a |Ra\aX6z6=Xn.eWTz| 00000030 1d 4d 39 52 6b 00 0d 50 1f 01 03 2e 45 79 59 18 |.M9Rk..P....EyY.| 00000040 5a 35 79 32 6b 74 69 28 4c 57 3a 31 1a 36 |Z5y2kti(LW:1.6|
payload bytes
00000000 12 2e 23 3e 0a 1b 00 12 5e 1f 57 79 71 39 36 4e |..#>....^.Wyq96N| 00000010 39 40 27 24 73 0a 19 6d 1c 70 3c 7c 7a 13 6f 0c |9@'$s..m.p<|z.o.| 00000020 0d 12 4a 17 2e 4b 2a 0c 6a 01 05 5b 3a 3c 29 74 |..J..K*.j..[:<)t| 00000030 7c 51 18 6f 5b 32 5c 77 22 00 01 ||Q.o[2\w"..|
payload bytes
00000000 5e 2e 0e 27 34 70 48 3c 1e 74 37 04 19 75 72 25 |^..'4pH<.t7..ur%| 00000010 5f 4a 10 20 34 3b 3d 24 38 3a 00 56 0e 71 3c 6c |_J. 4;=$8:.V.q<l| 00000020 10 4a 14 44 3a 5c 00 58 50 37 5c 69 2c 4e 0f 0c |.J.D:\.XP7\i,N..| 00000030 19 1f 2c 4d 5a 69 71 12 23 71 69 32 62 25 1e 72 |..,MZiq.#qi2b%.r| 00000040 6f 32 37 29 0f 37 01 5f 6f 5d 49 1b 2c 58 27 45 |o27).7._o]I.,X'E| 00000050 77 53 12 51 ec 31 |wS.Q.1|
payload bytes
00000000 5e 2e 47 4d 43 47 05 18 78 80 57 |^.GMCG..x.W|
payload bytes
00000000 04 2e 39 16 46 52 00 0d 02 3c 53 2b 19 39 76 29 |..9.FR...<S+.9v)| 00000010 29 4e 4e 78 65 57 78 32 5e 15 6e 33 03 17 03 07 |)NNxeWx2^.n3....| 00000020 55 3d 1e 1c 0f 1e 29 11 5a 7c 3c 2d 03 |U=....).Z|<-.|