HoneyLabs

UDP traffic

Datagrams matching asn:7922 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

22

Datagrams

4

Source addresses

1

Networks

1

Countries

4

Destination ports

Traffic by type

Unrecognised

22 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 8000/udp

].2·l·u2ahq [p· =F?Do&z%/a·_eT:B lTu·J(g2·u· ·s·

payload bytes
00000000  5d 2e 32 12 6c 1a 75 32  61 68 71 0d 5b 70 16 0d  |].2.l.u2ahq.[p..|
00000010  3d 46 3f 44 6f 26 7a 25  2f 61 1a 5f 65 54 3a 42  |=F?Do&z%/a._eT:B|
00000020  09 6c 54 75 06 4a 28 67  32 19 75 0e 09 0b 73 c8  |.lTu.J(g2.u...s.|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

ServicePortDatagramsSourcesFactor
SNMPv2161/udp616.3

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
73.184.92.137AS7922 Comcast Cable Communications, LLCUSUnrecognised142026-10-09 03:48
73.213.113.73AS7922 Comcast Cable Communications, LLCUSUnrecognised62026-10-08 20:40
75.66.15.42AS7922 Comcast Cable Communications, LLCUSUnrecognised12026-10-06 14:15
173.10.2.113AS7922 Comcast Cable Communications, LLCUSUnrecognised12026-10-10 11:59

Latest datagrams