UDP traffic
Datagrams matching asn:19994 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
3
Datagrams
1
Source addresses
1
Networks
1
Countries
3
Destination ports
Traffic by type
Unrecognised
3 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5353/udp
payload bytes
00000000 69 2e 1e 33 0c 38 3f 03 43 7f 2e 48 6e 38 11 31 |i..3.8?.C..Hn8.1| 00000010 1a 25 4d 27 77 69 08 98 |.%M'wi..|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 166.78.113.115 | AS19994 Rackspace Hosting | US | Unrecognised | 3 | 2026-10-11 01:26 |
Latest datagrams
payload bytes
00000000 69 2e 1e 33 0c 38 3f 03 43 7f 2e 48 6e 38 11 31 |i..3.8?.C..Hn8.1| 00000010 1a 25 4d 27 77 69 08 98 |.%M'wi..|
payload bytes
00000000 7e 2e 29 45 3f 09 30 70 77 7b 7b 72 31 50 22 24 |~.)E?.0pw{{r1P"$| 00000010 48 21 20 0d 46 2d 20 04 65 47 62 45 6c 72 76 6b |H! .F- .eGbElrvk| 00000020 2e 20 30 6e 29 61 5e 20 5c 5a 12 0d 2a 34 32 73 |. 0n)a^ \Z..*42s| 00000030 56 52 00 1c 7f 20 21 64 67 03 29 54 76 20 3f 24 |VR... !dg.)Tv ?$| 00000040 40 6f 12 69 50 71 0a 2d 4b 1c 3a 75 51 6c 68 27 |@o.iPq.-K.:uQlh'| 00000050 3e 68 43 3d 08 64 22 70 68 4b 44 5e 6b 03 02 2b |>hC=.d"phKD^k..+| 00000060 72 f1 c8 |r..|payload bytes
00000000 22 2e 36 32 74 6c 1f 3f 02 06 72 29 51 1c 67 59 |".62tl.?..r)Q.gY| 00000010 0f 5d 29 3e 2c 26 63 62 4a 18 45 66 17 0a 3f 39 |.])>,&cbJ.Ef..?9| 00000020 2f 75 6b 23 62 0a 63 64 11 55 0d 62 72 6a 68 |/uk#b.cd.U.brjh|