UDP traffic
Datagrams matching asn:398991 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
14
Datagrams
1
Source addresses
1
Networks
1
Countries
9
Destination ports
Traffic by type
Other services
1 datagrams from 1 sourceFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest Redis datagram, to 8082/udp
payload bytes
00000000 24 2e 2b 51 64 36 28 51 38 45 22 0c 24 7b b6 99 |$.+Qd6(Q8E".${..|Unrecognised
13 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8082/udp
payload bytes
00000000 57 2e 40 09 24 59 47 6d 54 5d 56 21 76 5e 74 7d |W.@.$YGmT]V!v^t}| 00000010 13 7f 39 20 07 64 37 44 0d 7e 5f 75 70 65 21 da |..9 .d7D.~_upe!.| 00000020 f2 |.|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| Memcached | 11211/udp | 2 | 1 | 10,000 to 51,000 |
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
| SSDP | 1900/udp | 1 | 1 | 30.8 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 38.99.239.208 | AS398991 X99 | US | Unrecognised | 14 | 2026-10-11 06:09 |
Latest datagrams
payload bytes
00000000 24 2e 2b 51 64 36 28 51 38 45 22 0c 24 7b b6 99 |$.+Qd6(Q8E".${..|payload bytes
00000000 57 2e 40 09 24 59 47 6d 54 5d 56 21 76 5e 74 7d |W.@.$YGmT]V!v^t}| 00000010 13 7f 39 20 07 64 37 44 0d 7e 5f 75 70 65 21 da |..9 .d7D.~_upe!.| 00000020 f2 |.|
payload bytes
00000000 7e 2e 0f 48 33 43 06 6f 2f 62 01 27 42 2c d0 93 |~..H3C.o/b.'B,..|
payload bytes
00000000 3b 2e 7c 35 61 11 6f 0c 64 36 6f 60 2b 68 3c 9d |;.|5a.o.d6o`+h<.|
payload bytes
00000000 03 2e 1d 23 66 30 42 17 68 14 2a 6d 71 67 31 6b |...#f0B.h.*mqg1k| 00000010 79 2e 6f 75 16 7c 51 65 71 63 2b 51 29 1a 19 2c |y.ou.|Qeqc+Q)..,| 00000020 76 6b 89 |vk.|
payload bytes
00000000 38 2e 74 30 38 70 4f 1a 08 6c 3d 71 4d 5e 3d 34 |8.t08pO..l=qM^=4| 00000010 33 22 65 63 76 2f 6b 71 5f 12 26 00 43 41 60 7b |3"ecv/kq_.&.CA`{| 00000020 0b 54 2b 43 44 7b 5d 4c 67 1a 3d 34 78 7a 68 2c |.T+CD{]Lg.=4xzh,| 00000030 1c 4d 0f 13 7d 7a 04 5c 5f cd |.M..}z.\_.|payload bytes
00000000 0e 2e 3a 06 5f 25 1a 06 01 13 79 00 57 1b 53 20 |..:._%....y.W.S | 00000010 13 51 7e 35 03 6a 0e 05 51 32 12 40 26 7a 56 34 |.Q~5.j..Q2.@&zV4| 00000020 37 10 3a 16 35 55 1c 36 68 27 f9 |7.:.5U.6h'.|
payload bytes
00000000 55 2e 59 1f 65 1d 20 60 1b 0a 5d 62 44 21 15 0a |U.Y.e. `..]bD!..| 00000010 7a 16 64 33 7d 64 43 37 5e 56 64 3d 25 37 23 7a |z.d3}dC7^Vd=%7#z| 00000020 0f 7c 1a 74 1a 3a 54 35 44 32 17 08 53 2d 12 4d |.|.t.:T5D2..S-.M| 00000030 43 76 00 40 5b 43 77 39 19 5b 77 3e 12 1a 39 22 |Cv.@[Cw9.[w>..9"| 00000040 17 53 16 31 0d 6b 66 51 1d 7d 59 70 2a 6c 3d 6d |.S.1.kfQ.}Yp*l=m| 00000050 62 3d 2d 3d 4a bd |b=-=J.|
payload bytes
00000000 2e 2e 24 2a 6c 12 31 68 13 3c 53 6e 56 35 36 60 |..$*l.1h.<SnV56`| 00000010 27 1e 3f 41 39 63 6f 69 65 4a 16 57 68 70 7b 16 |'.?A9coieJ.Whp{.| 00000020 4a 1f 40 37 32 72 1f 45 2e 73 33 04 28 6a 64 4f |J.@72r.E.s3.(jdO| 00000030 08 24 10 41 07 7f 2a 6c 49 40 43 31 31 3f 48 7b |.$.A..*lI@C11?H{| 00000040 5e 08 32 10 7a 52 56 28 45 09 2c 6d 73 11 3d 7b |^.2.zRV(E.,ms.={| 00000050 35 4d 3c 3c 4d 67 28 16 27 6b 48 58 2a 10 ef 71 |5M<<Mg(.'kHX*..q|payload bytes
00000000 48 2e 5c 59 7e 4c 0c 47 7f 0e 01 7c 04 6b 14 1b |H.\Y~L.G...|.k..| 00000010 0d 63 00 2c 72 3d 45 71 03 77 72 1f 34 1c 64 7c |.c.,r=Eq.wr.4.d|| 00000020 79 40 56 77 0d 62 3f 0c 70 40 08 74 2c 1d 0f 39 |y@Vw.b?.p@.t,..9| 00000030 00 10 66 73 4d 2b 64 50 22 56 6f 57 73 53 53 6c |..fsM+dP"VoWsSSl| 00000040 14 29 64 21 0c 23 2d 7c 63 35 71 55 10 |.)d!.#-|c5qU.|
payload bytes
00000000 3b 2e 13 24 35 4d 40 1b 4b 45 4b 24 6a 7d 74 |;..$5M@.KEK$j}t|
payload bytes
00000000 36 2e 18 6e 45 3b 09 4c 5e 7b 77 38 3a 4e 31 2d |6..nE;.L^{w8:N1-| 00000010 37 2c 37 09 42 03 40 3b 49 15 72 50 1a 6b 5b 50 |7,7.B.@;I.rP.k[P| 00000020 6e 74 3e 33 2f 47 7f 0d 42 76 45 7c 44 f7 95 |nt>3/G..BvE|D..|payload bytes
00000000 3a 2e 08 14 51 0c 67 7e 2f 21 14 44 06 59 7c 25 |:...Q.g~/!.D.Y|%| 00000010 11 35 01 93 9e |.5...|
payload bytes
00000000 6f 2e 19 5c 1b 2d 3a 65 6a 90 f1 |o..\.-:ej..|