HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching proto:memcached sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

19

Datagrams

18

Source addresses

1

Networks

1

Countries

1

Destination ports

Traffic by type

Service queries

19 datagrams from 18 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

Memcached 19

Latest Memcached datagram, to 10074/udp

stats

payload bytes
00000000  73 74 61 74 73 0a                                 |stats.|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

ServicePortDatagramsSourcesFactor
Memcached10074/udp191810,000 to 51,000

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
64.62.156.115AS6939 Hurricane Electric LLCUSMemcached22026-10-09 04:11
65.49.1.75AS6939 Hurricane Electric LLCUSMemcached12026-10-10 03:04
64.62.156.33AS6939 Hurricane Electric LLCUSMemcached12026-10-06 00:49
64.62.197.46AS6939 Hurricane Electric LLCUSMemcached12026-10-11 03:59
64.62.197.109AS6939 Hurricane Electric LLCUSMemcached12026-10-07 00:14
64.62.197.86AS6939 Hurricane Electric LLCUSMemcached12026-10-06 08:14
65.49.1.73AS6939 Hurricane Electric LLCUSMemcached12026-10-10 04:17
64.62.197.54AS6939 Hurricane Electric LLCUSMemcached12026-10-07 06:16
64.62.156.17AS6939 Hurricane Electric LLCUSMemcached12026-10-08 08:31
65.49.1.54AS6939 Hurricane Electric LLCUSMemcached12026-10-11 02:32
64.62.197.7AS6939 Hurricane Electric LLCUSMemcached12026-10-07 06:26
184.105.139.88AS6939 Hurricane Electric LLCUSMemcached12026-10-08 05:35
64.62.197.192AS6939 Hurricane Electric LLCUSMemcached12026-10-06 03:09
64.62.197.183AS6939 Hurricane Electric LLCUSMemcached12026-10-06 03:56
64.62.197.92AS6939 Hurricane Electric LLCUSMemcached12026-10-08 02:56
64.62.156.25AS6939 Hurricane Electric LLCUSMemcached12026-10-10 00:54
184.105.139.92AS6939 Hurricane Electric LLCUSMemcached12026-10-08 05:55
64.62.197.154AS6939 Hurricane Electric LLCUSMemcached12026-10-10 00:19

Latest datagrams