UDP traffic
Datagrams matching country:FI sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
5
Datagrams
2
Source addresses
2
Networks
1
Countries
5
Destination ports
Traffic by type
Unrecognised
5 datagrams from 2 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 11211/udp
payload bytes
00000000 7d 2e 1a 50 72 1f 26 59 66 66 4f 4e 6b 62 03 60 |}..Pr.&YffONkb.`| 00000010 48 42 33 5d 33 57 3f 4d 50 74 3e 05 5b 08 22 58 |HB3]3W?MPt>.[."X| 00000020 5a 3c 29 4d 5b 4f 26 41 35 76 0f 20 58 13 00 20 |Z<)M[O&A5v. X.. | 00000030 55 34 7e 09 0b 3d 56 5b 31 14 61 25 36 |U4~..=V[1.a%6|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| Memcached | 11211/udp | 1 | 1 | 10,000 to 51,000 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Destination ports
Networks
- AS210546 Chsl One Ltd from 1 source4
- AS215439 Play2go International Limited from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 144.31.132.58 | AS210546 Chsl One Ltd | FI | Unrecognised | 4 | 2026-10-11 08:04 |
| 144.31.156.191 | AS215439 Play2go International Limited | FI | Unrecognised | 1 | 2026-10-11 07:22 |
Latest datagrams
payload bytes
00000000 7d 2e 1a 50 72 1f 26 59 66 66 4f 4e 6b 62 03 60 |}..Pr.&YffONkb.`| 00000010 48 42 33 5d 33 57 3f 4d 50 74 3e 05 5b 08 22 58 |HB3]3W?MPt>.[."X| 00000020 5a 3c 29 4d 5b 4f 26 41 35 76 0f 20 58 13 00 20 |Z<)M[O&A5v. X.. | 00000030 55 34 7e 09 0b 3d 56 5b 31 14 61 25 36 |U4~..=V[1.a%6|
payload bytes
00000000 3d 2e 55 62 27 09 66 6d 31 3f 5f 13 10 76 3f 79 |=.Ub'.fm1?_..v?y| 00000010 4b 69 59 51 41 55 21 66 13 7a 2b 50 2b 65 5f 69 |KiYQAU!f.z+P+e_i| 00000020 52 34 4b 79 3d 31 66 6e 71 46 02 01 3c 41 7b 9d |R4Ky=1fnqF..<A{.| 00000030 a7 |.|payload bytes
00000000 07 2e 37 24 73 05 2a 22 0b 10 37 52 5d 02 1f 48 |..7$s.*"..7R]..H| 00000010 61 0f 09 19 4a 5a 32 20 6b 20 4c 01 51 29 2c 58 |a...JZ2 k L.Q),X| 00000020 70 64 7c 63 69 26 05 75 36 3c 47 13 3e 66 5b 1f |pd|ci&.u6<G.>f[.| 00000030 1f 3c |.<|
payload bytes
00000000 56 2e 12 6b 50 75 29 1f 5d 21 68 46 45 76 18 6d |V..kPu).]!hFEv.m| 00000010 14 3a 59 25 0f 75 31 41 65 50 19 09 22 0f 29 78 |.:Y%.u1AeP..".)x| 00000020 00 86 |..|
payload bytes
00000000 0d 2e 70 71 06 02 26 41 78 61 61 26 40 |..pq..&Axaa&@|