UDP traffic

Datagrams matching port:11211 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Unrecognised

28 datagrams from 18 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 28

Latest Unrecognised datagram, to 11211/udp

·stats

payload bytes

00000000  00 00 00 00 00 01 00 00  73 74 61 74 73 0a        |........stats.|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
Memcached	11211/udp	28	18	10,000 to 51,000

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

11211/udp Memcached28

Networks

AS209588 Flyservers S.A. from 1 source5
AS11320 LightEdge Solutions from 1 source4
AS6939 Hurricane Electric LLC from 4 sources4
AS198545 Flex Network Sarl from 1 source3
AS213412 ONYPHE SAS from 2 sources2
AS264617 GRUPO PANAGLOBAL 15 S.A from 1 source2
AS14618 Amazon.com, Inc. from 2 sources2
AS150968 PT Jaringanku Media Telekomunikasi from 1 source1
AS11814 Distributel Communications Limited from 1 source1
AS398991 X99 from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
141.98.83.48	AS209588 Flyservers S.A.	PA	Unrecognised	5	2026-10-11 04:32
147.203.255.20	AS11320 LightEdge Solutions	US	Unrecognised	4	2026-10-11 04:31
217.71.127.125	AS198545 Flex Network Sarl	FR	Unrecognised	3	2026-10-11 06:11
185.191.236.38	AS264617 GRUPO PANAGLOBAL 15 S.A	CH	Unrecognised	2	2026-10-10 21:12
38.99.239.208	AS398991 X99	US	Unrecognised	1	2026-10-11 03:32
64.62.156.10	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-11 03:52
174.138.216.234	AS11814 Distributel Communications Limited	CA	Unrecognised	1	2026-10-10 19:44
44.220.185.189	AS14618 Amazon.com, Inc.	US	Unrecognised	1	2026-10-10 14:49
64.62.197.148	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-11 00:23
101.36.97.205	AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT	GB	Unrecognised	1	2026-10-10 18:54
212.103.118.144	AS57044 JSC ER-Telecom Holding	RU	Unrecognised	1	2026-10-10 09:33
44.220.188.56	AS14618 Amazon.com, Inc.	US	Unrecognised	1	2026-10-10 13:54
144.31.132.58	AS210546 Chsl One Ltd	FI	Unrecognised	1	2026-10-11 08:04
103.123.175.6	AS150968 PT Jaringanku Media Telekomunikasi	ID	Unrecognised	1	2026-10-10 22:57
216.218.206.101	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-11 08:16
64.62.156.18	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-11 03:42
91.231.89.91	AS213412 ONYPHE SAS	FR	Unrecognised	1	2026-10-10 16:34
91.230.168.219	AS213412 ONYPHE SAS	US	Unrecognised	1	2026-10-10 16:19

Latest datagrams

2026-10-11 08:16:18216.218.206.101to 11211/udpUnrecognisedUS
·stats
payload bytes
```
00000000  00 00 00 00 00 01 00 00  73 74 61 74 73 0a        |........stats.|
```

2026-10-11 08:04:09144.31.132.58to 11211/udpUnrecognisedFI

}.·Pr·&YffONkb·`HB3]3W?MPt>·[·"XZ<)M[O&A5v· X· U4~ ·=V[1·a%6

payload bytes

00000000  7d 2e 1a 50 72 1f 26 59  66 66 4f 4e 6b 62 03 60  |}..Pr.&YffONkb.`|
00000010  48 42 33 5d 33 57 3f 4d  50 74 3e 05 5b 08 22 58  |HB3]3W?MPt>.[."X|
00000020  5a 3c 29 4d 5b 4f 26 41  35 76 0f 20 58 13 00 20  |Z<)M[O&A5v. X.. |
00000030  55 34 7e 09 0b 3d 56 5b  31 14 61 25 36           |U4~..=V[1.a%6|

2026-10-11 06:11:06217.71.127.125to 11211/udpUnrecognisedFR

5..](S0·d)·wagri{ydj9·

payload bytes

00000000  35 2e 2e 5d 28 53 30 07  00 02 64 29 1d 77 61 67  |5..](S0...d).wag|
00000010  72 69 7b 79 64 6a 39 bf  0f                       |ri{ydj9..|

2026-10-11 04:32:31141.98.83.48to 11211/udpUnrecognisedPA

·stats

payload bytes

00000000  00 01 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |........stats..|

2026-10-11 04:31:13147.203.255.20to 11211/udpUnrecognisedUS
ZM·stats
payload bytes
```
00000000  5a 4d 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |ZM......stats..|
```

2026-10-11 04:25:05141.98.83.48to 11211/udpUnrecognisedPA

·stats

payload bytes

00000000  00 01 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |........stats..|

2026-10-11 04:17:08141.98.83.48to 11211/udpUnrecognisedPA

·stats

payload bytes

00000000  00 01 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |........stats..|

2026-10-11 03:55:59141.98.83.48to 11211/udpUnrecognisedPA

·stats

payload bytes

00000000  00 01 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |........stats..|

2026-10-11 03:54:30141.98.83.48to 11211/udpUnrecognisedPA

·stats

payload bytes

00000000  00 01 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |........stats..|

2026-10-11 03:52:2764.62.156.10to 11211/udpUnrecognisedUS
·stats
payload bytes
```
00000000  00 00 00 00 00 01 00 00  73 74 61 74 73 0a        |........stats.|
```
2026-10-11 03:42:0264.62.156.18to 11211/udpUnrecognisedUS
·stats
payload bytes
```
00000000  00 00 00 00 00 01 00 00  73 74 61 74 73 0a        |........stats.|
```
2026-10-11 03:32:4838.99.239.208to 11211/udpUnrecognisedUS
~.·H3C·o/b·'B,Г
payload bytes
```
00000000  7e 2e 0f 48 33 43 06 6f  2f 62 01 27 42 2c d0 93  |~..H3C.o/b.'B,..|
```
2026-10-11 01:39:25147.203.255.20to 11211/udpUnrecognisedUS
ZM·stats
payload bytes
```
00000000  5a 4d 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |ZM......stats..|
```
2026-10-11 01:05:14147.203.255.20to 11211/udpUnrecognisedUS
ZM·stats
payload bytes
```
00000000  5a 4d 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |ZM......stats..|
```
2026-10-11 00:45:16147.203.255.20to 11211/udpUnrecognisedUS
ZM·stats
payload bytes
```
00000000  5a 4d 00 00 00 01 00 00  73 74 61 74 73 0d 0a     |ZM......stats..|
```