UDP traffic
Datagrams matching asn:398991 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
5
Datagrams
1
Source addresses
1
Networks
1
Countries
4
Destination ports
Traffic by type
Other services
1 datagrams from 1 sourceFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest Redis datagram, to 8082/udp
payload bytes
00000000 24 2e 2b 51 64 36 28 51 38 45 22 0c 24 7b b6 99 |$.+Qd6(Q8E".${..|Unrecognised
4 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8082/udp
payload bytes
00000000 57 2e 40 09 24 59 47 6d 54 5d 56 21 76 5e 74 7d |W.@.$YGmT]V!v^t}| 00000010 13 7f 39 20 07 64 37 44 0d 7e 5f 75 70 65 21 da |..9 .d7D.~_upe!.| 00000020 f2 |.|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| Memcached | 11211/udp | 1 | 1 | 10,000 to 51,000 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 38.99.239.208 | AS398991 X99 | US | Unrecognised | 5 | 2026-10-11 06:09 |
Latest datagrams
payload bytes
00000000 24 2e 2b 51 64 36 28 51 38 45 22 0c 24 7b b6 99 |$.+Qd6(Q8E".${..|payload bytes
00000000 57 2e 40 09 24 59 47 6d 54 5d 56 21 76 5e 74 7d |W.@.$YGmT]V!v^t}| 00000010 13 7f 39 20 07 64 37 44 0d 7e 5f 75 70 65 21 da |..9 .d7D.~_upe!.| 00000020 f2 |.|
payload bytes
00000000 7e 2e 0f 48 33 43 06 6f 2f 62 01 27 42 2c d0 93 |~..H3C.o/b.'B,..|
payload bytes
00000000 3b 2e 7c 35 61 11 6f 0c 64 36 6f 60 2b 68 3c 9d |;.|5a.o.d6o`+h<.|
payload bytes
00000000 03 2e 1d 23 66 30 42 17 68 14 2a 6d 71 67 31 6b |...#f0B.h.*mqg1k| 00000010 79 2e 6f 75 16 7c 51 65 71 63 2b 51 29 1a 19 2c |y.ou.|Qeqc+Q)..,| 00000020 76 6b 89 |vk.|