UDP traffic
Datagrams matching country:GH sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
5
Datagrams
1
Source addresses
1
Networks
1
Countries
4
Destination ports
Traffic by type
Unrecognised
5 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1027/udp
payload bytes
00000000 07 2e 71 65 7f 7f 55 28 1d 05 2f 02 1c 23 28 0c |..qe..U(../..#(.| 00000010 77 09 6e 56 50 77 23 6d 60 5e 05 63 40 6c 09 47 |w.nVPw#m`^.c@l.G| 00000020 26 7a 2c 25 7a 01 4e 17 06 7d 19 22 20 42 2e 17 |&z,%z.N..}." B..| 00000030 4b 1c 6d 1b 13 11 08 73 6f 0e 57 2f 7a 60 76 20 |K.m....so.W/z`v | 00000040 5a 22 46 54 23 14 6b 29 81 2d |Z"FT#.k).-|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| Memcached | 11211/udp | 1 | 1 | 10,000 to 51,000 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 102.216.212.122 | AS329009 Spectrum Internet Service Ltd | GH | Unrecognised | 5 | 2026-10-12 07:39 |
Latest datagrams
payload bytes
00000000 07 2e 71 65 7f 7f 55 28 1d 05 2f 02 1c 23 28 0c |..qe..U(../..#(.| 00000010 77 09 6e 56 50 77 23 6d 60 5e 05 63 40 6c 09 47 |w.nVPw#m`^.c@l.G| 00000020 26 7a 2c 25 7a 01 4e 17 06 7d 19 22 20 42 2e 17 |&z,%z.N..}." B..| 00000030 4b 1c 6d 1b 13 11 08 73 6f 0e 57 2f 7a 60 76 20 |K.m....so.W/z`v | 00000040 5a 22 46 54 23 14 6b 29 81 2d |Z"FT#.k).-|
payload bytes
00000000 33 2e 51 13 42 57 22 06 7f 10 3f 17 76 70 50 51 |3.Q.BW"...?.vpPQ| 00000010 45 39 0f 4d 46 1a 05 1c 77 00 70 5b 29 7e 59 5d |E9.MF...w.p[)~Y]| 00000020 05 2a 70 48 01 13 4e 01 23 0d 18 1a 7d 69 6b 42 |.*pH..N.#...}ikB| 00000030 22 7a 10 68 15 15 04 0c 16 74 68 3f 72 41 1c 78 |"z.h.....th?rA.x| 00000040 6c 0d 40 6d 20 0e 6e 43 1b 07 5d 18 70 49 b6 71 |l.@m .nC..].pI.q|
payload bytes
00000000 4a 2e 13 2f 7a 36 26 46 74 54 49 69 18 5f 1d 1b |J../z6&FtTIi._..| 00000010 1e 3a 33 12 54 3d 4e 3f 61 5c 76 47 29 13 46 73 |.:3.T=N?a\vG).Fs| 00000020 78 59 23 72 0f 49 38 03 1d 02 6c 36 61 0a 51 7f |xY#r.I8...l6a.Q.| 00000030 44 04 11 19 41 5f 58 e0 85 |D...A_X..|
payload bytes
00000000 35 2e 45 66 19 |5.Ef.|
payload bytes
00000000 6c 2e 6e 29 48 2c 47 6b 01 47 6b 15 78 79 3d 06 |l.n)H,Gk.Gk.xy=.| 00000010 00 2b 42 4f 28 7a 4e 3f 0d 4d 24 63 45 17 52 32 |.+BO(zN?.M$cE.R2| 00000020 5a 40 5b 22 6d 22 0e 6e 6a 79 03 62 72 40 69 73 |Z@["m".njy.br@is| 00000030 6c 2b 42 14 25 10 54 33 5d 78 16 23 0f 69 55 69 |l+B.%.T3]x.#.iUi| 00000040 29 30 b1 c7 |)0..|