UDP traffic
Datagrams matching asn:213877 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
10
Datagrams
2
Source addresses
1
Networks
1
Countries
6
Destination ports
Traffic by type
Unrecognised
10 datagrams from 2 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8080/udp
payload bytes
00000000 46 2e 35 65 3c 34 34 65 11 7d 04 59 25 26 68 0a |F.5e<44e.}.Y%&h.| 00000010 1b 62 0f 01 18 65 0d cc 35 |.b...e..5|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SSDP | 1900/udp | 2 | 2 | 30.8 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 179.254.163.155 | AS213877 U1 Digital Services Ltd | DE | Unrecognised | 7 | 2026-10-10 22:02 |
| 144.31.73.73 | AS213877 U1 Digital Services Ltd | DE | Unrecognised | 3 | 2026-10-07 14:12 |
Latest datagrams
payload bytes
00000000 46 2e 35 65 3c 34 34 65 11 7d 04 59 25 26 68 0a |F.5e<44e.}.Y%&h.| 00000010 1b 62 0f 01 18 65 0d cc 35 |.b...e..5|
payload bytes
00000000 3f 2e 56 4f 36 37 7c 18 28 68 77 02 6d 2e 1c 0e |?.VO67|.(hw.m...| 00000010 7a 34 6f 20 43 4f 62 60 1f 2a 32 32 74 57 34 33 |z4o COb`.*22tW43| 00000020 23 0a 02 59 41 7e 71 69 66 68 6b 53 17 07 62 11 |#..YA~qifhkS..b.| 00000030 3b 51 32 7e 20 14 5e 3f 3e 10 71 32 67 a8 06 |;Q2~ .^?>.q2g..|
payload bytes
00000000 35 2e 28 44 7b 23 19 6c 09 1c 4d 04 2d 08 1a 08 |5.(D{#.l..M.-...| 00000010 6d 70 11 1c 6b 54 00 3e 4f 66 0f 26 0e 25 75 43 |mp..kT.>Of.&.%uC| 00000020 36 1d 07 31 40 21 1d 49 3d 6b 4d 6b 73 67 73 61 |6..1@!.I=kMksgsa| 00000030 57 04 7d 43 58 7d 84 b4 |W.}CX}..|payload bytes
00000000 16 2e 34 37 70 3e 2a 42 01 18 60 16 49 7b 2a 69 |..47p>*B..`.I{*i| 00000010 1f 65 26 1c 4a 25 03 70 41 3d 21 47 11 3e 7b 27 |.e&.J%.pA=!G.>{'| 00000020 66 30 5e 56 6e 08 19 70 20 79 06 6a 74 31 53 14 |f0^Vn..p y.jt1S.| 00000030 16 79 30 60 1e 33 50 60 71 72 27 02 30 23 29 16 |.y0`.3P`qr'.0#).| 00000040 53 07 6d 41 0f 06 31 30 7f 38 1a 74 69 6d 08 7f |S.mA..10.8.tim..| 00000050 66 38 5f 05 6c 2f 1d 10 |f8_.l/..|payload bytes
00000000 5b 2e 12 2f 54 49 05 49 69 02 38 2e 4b 47 16 68 |[../TI.Ii.8.KG.h| 00000010 6e 68 12 17 13 2e 2f 12 0d 0d 08 73 7f 35 10 9f |nh..../....s.5..| 00000020 f4 |.|
payload bytes
00000000 7e 2e 0c 5d 2a 1e 50 2c 19 63 0b 48 3d 6f 6f 67 |~..]*.P,.c.H=oog| 00000010 2f 25 3d 0c 1a 11 70 04 64 23 7f 99 |/%=...p.d#..|
payload bytes
00000000 4e 2e 42 28 1a 51 02 1d 2c 1e 6f 2b 2c 08 42 49 |N.B(.Q..,.o+,.BI| 00000010 05 2f 0a 4f 7e 13 46 14 02 02 2c 72 08 01 69 56 |./.O~.F...,r..iV| 00000020 1d 2b 7e 37 83 60 |.+~7.`|
payload bytes
00000000 5d 2e 00 1f 5d 16 2a 6e 1c 47 1e 18 38 40 1b 45 |]...].*n.G..8@.E| 00000010 42 7a 21 5e 19 56 74 41 6c 12 40 6b 4c 6f 33 29 |Bz!^.VtAl.@kLo3)| 00000020 01 34 49 5e 4a 73 4d 66 61 a6 |.4I^JsMfa.|
payload bytes
00000000 58 2e 61 14 28 0f 3b 71 2d 0c 29 3e 63 4b 61 61 |X.a.(.;q-.)>cKaa| 00000010 27 12 38 |'.8|
payload bytes
00000000 40 2e 72 59 77 76 30 43 19 26 01 4a 7d 11 15 3e |@.rYwv0C.&.J}..>| 00000010 5f 47 3c 34 3e 0a 77 7a 31 75 5e 46 48 73 1b 09 |_G<4>.wz1u^FHs..| 00000020 08 0d 62 00 04 12 2a 05 |..b...*.|