UDP traffic
Datagrams matching asn:213182 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
3
Datagrams
1
Source addresses
1
Networks
1
Countries
3
Destination ports
Traffic by type
Unrecognised
3 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1900/udp
payload bytes
00000000 0a 2e 33 2e 21 31 39 47 0f 70 3f 3b 72 3a 1c 7c |..3.!19G.p?;r:.||
00000010 27 10 22 5e 09 38 4e 3b 58 74 6b 54 56 60 4d 60 |'."^.8N;XtkTV`M`|
00000020 4f 00 0f 70 31 48 37 40 38 77 7c 2b 31 18 27 58 |O..p1H7@8w|+1.'X|
00000030 28 49 36 32 01 04 6d 59 78 58 2e 4e 38 7b 2f 07 |(I62..mYxX.N8{/.|
00000040 7b 3e 77 2c 06 2e 6c 3e 25 68 69 56 01 10 2e 29 |{>w,..l>%hiV...)|
00000050 59 64 5b 5a 68 0d 84 |Yd[Zh..|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SSDP | 1900/udp | 1 | 1 | 30.8 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 93.170.12.102 | AS213182 CATV System Edver Ltd. | RU | Unrecognised | 3 | 2026-10-10 08:40 |
Latest datagrams
payload bytes
00000000 0a 2e 33 2e 21 31 39 47 0f 70 3f 3b 72 3a 1c 7c |..3.!19G.p?;r:.|| 00000010 27 10 22 5e 09 38 4e 3b 58 74 6b 54 56 60 4d 60 |'."^.8N;XtkTV`M`| 00000020 4f 00 0f 70 31 48 37 40 38 77 7c 2b 31 18 27 58 |O..p1H7@8w|+1.'X| 00000030 28 49 36 32 01 04 6d 59 78 58 2e 4e 38 7b 2f 07 |(I62..mYxX.N8{/.| 00000040 7b 3e 77 2c 06 2e 6c 3e 25 68 69 56 01 10 2e 29 |{>w,..l>%hiV...)| 00000050 59 64 5b 5a 68 0d 84 |Yd[Zh..|payload bytes
00000000 17 2e 66 25 2e 01 1b 66 5e 21 58 69 1a 3e 18 54 |..f%...f^!Xi.>.T| 00000010 09 4f 6a 55 6c 75 7d 43 5c 20 44 08 79 1d 1f 10 |.OjUlu}C\ D.y...| 00000020 69 05 35 17 07 51 7d 65 72 56 4e 0c 14 67 60 1e |i.5..Q}erVN..g`.| 00000030 36 4b 73 c7 de |6Ks..|
payload bytes
00000000 37 2e 5d 48 38 20 1b 6c 49 78 2e 48 06 5a 4f 71 |7.]H8 .lIx.H.ZOq| 00000010 74 4d 5d 65 20 18 42 3c 68 3b 49 43 04 18 5b 3c |tM]e .B<h;IC..[<| 00000020 6e 38 04 26 58 20 13 21 ea b2 |n8.&X .!..|