UDP traffic
Datagrams matching asn:210509 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
8
Datagrams
1
Source addresses
1
Networks
1
Countries
7
Destination ports
Traffic by type
Unrecognised
8 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 4000/udp
payload bytes
00000000 31 2e 1f 76 65 53 15 16 19 01 44 58 7f 4f 3f 1d |1..veS....DX.O?.| 00000010 7e 36 4e 42 45 7f 4d 73 33 6e 06 0c 14 4e 4a 46 |~6NBE.Ms3n...NJF| 00000020 07 69 3c 6c 3c 51 02 55 52 47 2e 51 16 6d 6f 14 |.i<l<Q.URG.Q.mo.| 00000030 23 3d 56 68 3d 23 5b 70 11 61 7c 26 92 28 |#=Vh=#[p.a|&.(|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 212.23.217.3 | AS210509 Optimum Line for Internet Services Ltd. | AE | Unrecognised | 8 | 2026-10-09 22:05 |
Latest datagrams
payload bytes
00000000 31 2e 1f 76 65 53 15 16 19 01 44 58 7f 4f 3f 1d |1..veS....DX.O?.| 00000010 7e 36 4e 42 45 7f 4d 73 33 6e 06 0c 14 4e 4a 46 |~6NBE.Ms3n...NJF| 00000020 07 69 3c 6c 3c 51 02 55 52 47 2e 51 16 6d 6f 14 |.i<l<Q.URG.Q.mo.| 00000030 23 3d 56 68 3d 23 5b 70 11 61 7c 26 92 28 |#=Vh=#[p.a|&.(|
payload bytes
00000000 68 2e 28 53 1d 06 21 22 54 2b 72 34 29 0b 6f 1a |h.(S..!"T+r4).o.| 00000010 69 5c 13 59 29 62 45 01 07 5c 78 76 5b 36 54 43 |i\.Y)bE..\xv[6TC| 00000020 36 7c 16 53 02 37 75 56 63 67 0a 0c 72 79 26 5b |6|.S.7uVcg..ry&[| 00000030 56 39 34 7f 1c 79 00 23 56 20 5d |V94..y.#V ]|
payload bytes
00000000 04 2e 33 09 66 7a 29 63 57 04 64 5c 16 61 00 2b |..3.fz)cW.d\.a.+| 00000010 76 58 7b 60 24 52 43 1a 42 1a 0b 22 2c 66 6e 30 |vX{`$RC.B..",fn0| 00000020 70 22 39 56 1c 62 39 73 66 1d 4f 7d 7e 4f 28 75 |p"9V.b9sf.O}~O(u| 00000030 28 23 55 4c 75 18 66 37 32 72 59 5f 58 d8 12 |(#ULu.f72rY_X..|payload bytes
00000000 28 2e 38 72 21 19 3e 15 47 7e 67 3c 3a 52 07 33 |(.8r!.>.G~g<:R.3| 00000010 12 41 1d 52 7c 0f 4e 12 45 41 02 61 29 22 08 52 |.A.R|.N.EA.a)".R| 00000020 71 40 44 12 59 02 28 20 00 0f 5c 3b 61 63 6e 73 |q@D.Y.( ..\;acns| 00000030 25 0b 45 21 1a 13 34 5f 55 36 41 7e 58 49 50 49 |%.E!..4_U6A~XIPI| 00000040 0a 15 5c 63 17 04 04 18 13 60 53 74 44 41 68 69 |..\c.....`StDAhi| 00000050 4d 2d 0a 67 41 3e 47 16 74 08 14 4d 51 65 16 5b |M-.gA>G.t..MQe.[| 00000060 7a 0a 99 |z..|
payload bytes
00000000 44 2e 13 6a 1d 23 2b 01 10 23 6d 00 1b 3d 21 50 |D..j.#+..#m..=!P| 00000010 5b 31 53 11 20 0c 58 22 48 7b 70 9d cd |[1S. .X"H{p..|payload bytes
00000000 5d 2e 4e 61 03 |].Na.|
payload bytes
00000000 65 2e 1c 2e 1d 44 4e 15 02 11 64 06 4d 52 34 79 |e....DN...d.MR4y| 00000010 31 6a 11 22 07 4c 0b 16 43 67 c9 |1j.".L..Cg.|
payload bytes
00000000 22 2e 0f 4d 3c 44 75 47 14 5a 79 73 34 1a 2f 42 |"..M<DuG.Zys4./B| 00000010 1f 6a 6e 47 2a 51 47 e8 |.jnG*QG.|