UDP traffic
Datagrams matching asn:24875 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
7
Datagrams
1
Source addresses
1
Networks
1
Countries
6
Destination ports
Traffic by type
Unrecognised
7 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5060/udp
payload bytes
00000000 4f 2e 6c 44 51 06 56 73 0b 6a 45 19 15 57 43 46 |O.lDQ.Vs.jE..WCF|
00000010 07 54 4f 10 2a 42 56 3e 05 3b 1c 55 14 7b 1e 63 |.TO.*BV>.;.U.{.c|
00000020 59 0a 27 2a 11 7d 1d 1c 67 62 36 7c 39 79 42 41 |Y.'*.}..gb6|9yBA|
00000030 4d 11 51 77 54 27 35 59 df 4f |M.QwT'5Y.O|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SSDP | 1900/udp | 1 | 1 | 30.8 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 89.105.218.83 | AS24875 NovoServe B.V. | NL | Unrecognised | 7 | 2026-10-11 08:03 |
Latest datagrams
payload bytes
00000000 4f 2e 6c 44 51 06 56 73 0b 6a 45 19 15 57 43 46 |O.lDQ.Vs.jE..WCF| 00000010 07 54 4f 10 2a 42 56 3e 05 3b 1c 55 14 7b 1e 63 |.TO.*BV>.;.U.{.c| 00000020 59 0a 27 2a 11 7d 1d 1c 67 62 36 7c 39 79 42 41 |Y.'*.}..gb6|9yBA| 00000030 4d 11 51 77 54 27 35 59 df 4f |M.QwT'5Y.O|payload bytes
00000000 18 2e 03 2a 0e 4d 0a 63 47 7d 7f 2a 37 24 54 35 |...*.M.cG}.*7$T5| 00000010 6e 47 79 3a 5c 31 07 76 67 0d 35 60 56 6e 44 6e |nGy:\1.vg.5`VnDn| 00000020 72 48 19 00 15 23 63 5c 20 63 06 57 07 5a 0c 75 |rH...#c\ c.W.Z.u| 00000030 3e 75 |>u|
payload bytes
00000000 6c 2e 71 2f 7d 36 3f 66 36 44 14 58 32 3e 4a 05 |l.q/}6?f6D.X2>J.| 00000010 04 61 6c 5d 2b 26 78 33 41 7b 1a 48 58 46 57 44 |.al]+&x3A{.HXFWD| 00000020 30 48 73 2d 7e 33 13 34 77 27 0d 29 66 57 2e 6a |0Hs-~3.4w'.)fW.j| 00000030 38 1a 47 63 41 40 16 02 3b 31 4b 13 77 22 57 27 |8.GcA@..;1K.w"W'| 00000040 6b 4b 54 69 7e 67 1e 75 0e 2b 1e 74 02 4c 5e cb |kKTi~g.u.+.t.L^.| 00000050 e5 |.|payload bytes
00000000 4d 2e 15 0e 0e 59 07 45 5e 57 2a 0b 02 4e 61 32 |M....Y.E^W*..Na2| 00000010 3c 33 5b 56 33 73 3f 06 5f 76 1b 5d 6b 21 68 38 |<3[V3s?._v.]k!h8| 00000020 0b 7e 46 19 57 4d 5e 35 24 08 40 26 57 21 58 13 |.~F.WM^5$.@&W!X.| 00000030 54 34 6a 07 02 35 |T4j..5|
payload bytes
00000000 5f 2e 61 18 30 30 27 53 36 6a 68 6e 46 11 28 26 |_.a.00'S6jhnF.(&| 00000010 7c |||
payload bytes
00000000 55 2e 3e 13 3f 2e 5f 26 7d 37 59 |U.>.?._&}7Y|
payload bytes
00000000 5f 2e 57 0b 6d 78 4e 6c 2c 69 66 08 66 27 0f 3e |_.W.mxNl,if.f'.>| 00000010 37 2d 1a 14 14 |7-...|