UDP traffic
Datagrams matching asn:19994 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
8
Datagrams
1
Source addresses
1
Networks
1
Countries
7
Destination ports
Traffic by type
Unrecognised
8 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5353/udp
payload bytes
00000000 69 2e 1e 33 0c 38 3f 03 43 7f 2e 48 6e 38 11 31 |i..3.8?.C..Hn8.1| 00000010 1a 25 4d 27 77 69 08 98 |.%M'wi..|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 166.78.113.115 | AS19994 Rackspace Hosting | US | Unrecognised | 8 | 2026-10-11 01:26 |
Latest datagrams
payload bytes
00000000 69 2e 1e 33 0c 38 3f 03 43 7f 2e 48 6e 38 11 31 |i..3.8?.C..Hn8.1| 00000010 1a 25 4d 27 77 69 08 98 |.%M'wi..|
payload bytes
00000000 7e 2e 29 45 3f 09 30 70 77 7b 7b 72 31 50 22 24 |~.)E?.0pw{{r1P"$| 00000010 48 21 20 0d 46 2d 20 04 65 47 62 45 6c 72 76 6b |H! .F- .eGbElrvk| 00000020 2e 20 30 6e 29 61 5e 20 5c 5a 12 0d 2a 34 32 73 |. 0n)a^ \Z..*42s| 00000030 56 52 00 1c 7f 20 21 64 67 03 29 54 76 20 3f 24 |VR... !dg.)Tv ?$| 00000040 40 6f 12 69 50 71 0a 2d 4b 1c 3a 75 51 6c 68 27 |@o.iPq.-K.:uQlh'| 00000050 3e 68 43 3d 08 64 22 70 68 4b 44 5e 6b 03 02 2b |>hC=.d"phKD^k..+| 00000060 72 f1 c8 |r..|payload bytes
00000000 22 2e 36 32 74 6c 1f 3f 02 06 72 29 51 1c 67 59 |".62tl.?..r)Q.gY| 00000010 0f 5d 29 3e 2c 26 63 62 4a 18 45 66 17 0a 3f 39 |.])>,&cbJ.Ef..?9| 00000020 2f 75 6b 23 62 0a 63 64 11 55 0d 62 72 6a 68 |/uk#b.cd.U.brjh|
payload bytes
00000000 59 2e 31 59 44 5d 03 2c 4c 21 65 36 29 42 15 56 |Y.1YD].,L!e6)B.V| 00000010 07 51 35 7f 5f 24 06 03 02 2d 50 7f 4c 31 3b 25 |.Q5._$...-P.L1;%| 00000020 6d 6c 7e 31 49 01 5d 16 22 42 4c 14 b8 |ml~1I.]."BL..|
payload bytes
00000000 1c 2e 7d 1e 4b 54 38 0d 27 54 60 47 09 66 4b 36 |..}.KT8.'T`G.fK6| 00000010 4e 5a 9f 0e |NZ..|
payload bytes
00000000 0b 2e 09 67 70 1e 77 64 1c 3c 47 4f 79 38 39 1d |...gp.wd.<GOy89.| 00000010 6c 1f 5d 65 5b 4c 58 7d 30 70 78 64 01 06 12 0d |l.]e[LX}0pxd....| 00000020 66 1b 74 57 39 6b 3b 56 27 02 25 20 3b 5e 3d 27 |f.tW9k;V'.% ;^='| 00000030 7e 1a 0c 59 67 64 56 17 54 4e 7b c0 d1 |~..YgdV.TN{..|payload bytes
00000000 38 2e 06 4b 20 67 29 44 06 57 6d 6b 60 6d 0f 4f |8..K g)D.Wmk`m.O| 00000010 66 2b 22 29 56 08 73 3f 18 70 69 18 24 3d 77 5c |f+")V.s?.pi.$=w\| 00000020 5d 7e 27 7e 65 50 42 6b 27 2f 57 08 1c 66 57 02 |]~'~ePBk'/W..fW.| 00000030 11 79 2b 67 02 1f 27 1a 0f 10 32 33 4d 2a 0f 2b |.y+g..'...23M*.+| 00000040 28 37 29 0d 07 6b 78 2f 1a df 99 |(7)..kx/...|
payload bytes
00000000 16 2e 52 06 62 13 35 7f 3e 2a 69 54 07 40 7c 3d |..R.b.5.>*iT.@|=| 00000010 38 65 48 53 08 50 0d 5c c0 f8 |8eHS.P.\..|