UDP traffic
Datagrams matching asn:150968 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
9
Datagrams
1
Source addresses
1
Networks
1
Countries
5
Destination ports
Traffic by type
Unrecognised
9 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 11211/udp
payload bytes
00000000 44 2e 7b 6d 4d 47 72 1e 1c 6b 5f 36 7a 0d 0e 38 |D.{mMGr..k_6z..8|
00000010 2c 6d 19 06 52 42 20 |,m..RB |Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| Memcached | 11211/udp | 4 | 1 | 10,000 to 51,000 |
| SSDP | 1900/udp | 2 | 1 | 30.8 |
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 103.123.175.6 | AS150968 PT Jaringanku Media Telekomunikasi | ID | Unrecognised | 9 | 2026-10-10 22:57 |
Latest datagrams
payload bytes
00000000 44 2e 7b 6d 4d 47 72 1e 1c 6b 5f 36 7a 0d 0e 38 |D.{mMGr..k_6z..8| 00000010 2c 6d 19 06 52 42 20 |,m..RB |payload bytes
00000000 6a 2e 38 2f 00 3b 5b 78 10 7c 5a 5d 05 1e 2b 43 |j.8/.;[x.|Z]..+C| 00000010 58 3d 5d 06 79 30 3b 1c 0c 0b 1f 28 36 74 24 20 |X=].y0;....(6t$ | 00000020 3e 5c 4f 3e 17 2b 36 27 27 10 04 2d 2f 30 70 07 |>\O>.+6''..-/0p.| 00000030 6d 4e 0d 66 7e 48 03 0a 53 22 32 09 16 56 a3 a2 |mN.f~H..S"2..V..|
payload bytes
00000000 44 2e 56 39 2b 37 61 34 27 66 6c 01 5e 4e 36 61 |D.V9+7a4'fl.^N6a| 00000010 1b 5a 5b 45 73 10 6a 4d 2b 06 27 60 73 07 05 37 |.Z[Es.jM+.'`s..7| 00000020 19 5b 70 44 12 52 78 3a 38 64 3b 16 32 72 77 4d |.[pD.Rx:8d;.2rwM| 00000030 4c 52 13 3f 63 7d 0d 0e 03 34 6e 76 3b 73 2e 54 |LR.?c}...4nv;s.T| 00000040 4e 1e 18 f5 83 |N....|
payload bytes
00000000 46 2e 36 13 7f 5b 4e 44 6e 5c 79 5b 14 34 1e 54 |F.6..[NDn\y[.4.T| 00000010 76 5c 28 7d 23 2f 01 4c 22 53 74 0c 21 36 05 67 |v\(}#/.L"St.!6.g| 00000020 1b 3b 7b 1a 17 49 5e 05 26 58 60 3a 0c 7e 0e 02 |.;{..I^.&X`:.~..| 00000030 5b 36 00 7e 65 01 4b 07 54 3f 14 75 75 19 5d 10 |[6.~e.K.T?.uu.].| 00000040 54 58 2a 6b 21 09 50 0f |TX*k!.P.|payload bytes
00000000 7e 2e 34 09 7d 51 78 4f 54 08 3a 7b 3e 40 54 6f |~.4.}QxOT.:{>@To| 00000010 7b 6d 59 4c 04 10 7e 35 4d 3c 30 3f 7d 1d 6f 7c |{mYL..~5M<0?}.o|| 00000020 05 23 05 02 74 7d 51 48 05 0b 43 43 4b 18 32 46 |.#..t}QH..CCK.2F| 00000030 05 0b 12 09 1c 11 3f 69 4d 6f 28 4b 0c 17 47 11 |......?iMo(K..G.| 00000040 3b 4c 13 2f 49 64 78 4f 6f 3b 12 3a 53 45 01 59 |;L./IdxOo;.:SE.Y| 00000050 50 13 62 6c 24 21 f5 f4 |P.bl$!..|payload bytes
00000000 18 2e 28 3d 5d 08 22 6c 14 02 4e 24 27 21 38 6a |..(=]."l..N$'!8j| 00000010 04 2e 0b 04 1b 0b 1c 70 18 20 4c 30 30 35 77 48 |.......p. L005wH| 00000020 18 20 05 76 28 1b 91 |. .v(..|
payload bytes
00000000 5d 2e 7f 08 24 75 |]...$u|
payload bytes
00000000 30 2e 16 45 14 7b 1e 2b 36 66 61 66 23 3f 60 3e |0..E.{.+6faf#?`>| 00000010 1e 1d 17 13 63 3b 05 25 2c 4a 3e 68 1c 72 53 4c |....c;.%,J>h.rSL| 00000020 47 6a 11 5c 65 89 32 |Gj.\e.2|payload bytes
00000000 6d 2e 32 6f 41 5e 58 10 6d 35 10 53 46 62 fd e8 |m.2oA^X.m5.SFb..|