UDP traffic
Datagrams matching asn:24875 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
3
Datagrams
1
Source addresses
1
Networks
1
Countries
3
Destination ports
Traffic by type
Unrecognised
3 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5060/udp
payload bytes
00000000 4f 2e 6c 44 51 06 56 73 0b 6a 45 19 15 57 43 46 |O.lDQ.Vs.jE..WCF|
00000010 07 54 4f 10 2a 42 56 3e 05 3b 1c 55 14 7b 1e 63 |.TO.*BV>.;.U.{.c|
00000020 59 0a 27 2a 11 7d 1d 1c 67 62 36 7c 39 79 42 41 |Y.'*.}..gb6|9yBA|
00000030 4d 11 51 77 54 27 35 59 df 4f |M.QwT'5Y.O|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SSDP | 1900/udp | 1 | 1 | 30.8 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 89.105.218.83 | AS24875 NovoServe B.V. | NL | Unrecognised | 3 | 2026-10-11 08:03 |
Latest datagrams
payload bytes
00000000 4f 2e 6c 44 51 06 56 73 0b 6a 45 19 15 57 43 46 |O.lDQ.Vs.jE..WCF| 00000010 07 54 4f 10 2a 42 56 3e 05 3b 1c 55 14 7b 1e 63 |.TO.*BV>.;.U.{.c| 00000020 59 0a 27 2a 11 7d 1d 1c 67 62 36 7c 39 79 42 41 |Y.'*.}..gb6|9yBA| 00000030 4d 11 51 77 54 27 35 59 df 4f |M.QwT'5Y.O|payload bytes
00000000 18 2e 03 2a 0e 4d 0a 63 47 7d 7f 2a 37 24 54 35 |...*.M.cG}.*7$T5| 00000010 6e 47 79 3a 5c 31 07 76 67 0d 35 60 56 6e 44 6e |nGy:\1.vg.5`VnDn| 00000020 72 48 19 00 15 23 63 5c 20 63 06 57 07 5a 0c 75 |rH...#c\ c.W.Z.u| 00000030 3e 75 |>u|
payload bytes
00000000 6c 2e 71 2f 7d 36 3f 66 36 44 14 58 32 3e 4a 05 |l.q/}6?f6D.X2>J.| 00000010 04 61 6c 5d 2b 26 78 33 41 7b 1a 48 58 46 57 44 |.al]+&x3A{.HXFWD| 00000020 30 48 73 2d 7e 33 13 34 77 27 0d 29 66 57 2e 6a |0Hs-~3.4w'.)fW.j| 00000030 38 1a 47 63 41 40 16 02 3b 31 4b 13 77 22 57 27 |8.GcA@..;1K.w"W'| 00000040 6b 4b 54 69 7e 67 1e 75 0e 2b 1e 74 02 4c 5e cb |kKTi~g.u.+.t.L^.| 00000050 e5 |.|