UDP traffic
Datagrams matching asn:44027 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
13
Datagrams
1
Source addresses
1
Networks
1
Countries
9
Destination ports
Traffic by type
Unrecognised
11 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8000/udp
payload bytes
00000000 1d 2e 57 65 62 0f 2b 52 14 22 33 53 75 50 44 36 |..Web.+R."3SuPD6| 00000010 71 57 53 07 69 40 69 53 5f 55 47 34 39 0a 4d 57 |qWS.i@iS_UG49.MW| 00000020 31 24 3c 13 33 68 65 48 0a 19 1b 7f 69 5f 35 5a |1$<.3heH....i_5Z| 00000030 37 09 62 20 49 4b 74 28 20 3b 5c 5a 45 2a 31 76 |7.b IKt( ;\ZE*1v| 00000040 4e d8 87 |N..|
Peer-to-peer
2 datagrams from 1 sourceFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 91.200.217.81 | AS44027 Spitamen Alexander Internet LLC. | TJ | Unrecognised | 13 | 2026-10-10 19:38 |
Latest datagrams
payload bytes
00000000 1d 2e 57 65 62 0f 2b 52 14 22 33 53 75 50 44 36 |..Web.+R."3SuPD6| 00000010 71 57 53 07 69 40 69 53 5f 55 47 34 39 0a 4d 57 |qWS.i@iS_UG49.MW| 00000020 31 24 3c 13 33 68 65 48 0a 19 1b 7f 69 5f 35 5a |1$<.3heH....i_5Z| 00000030 37 09 62 20 49 4b 74 28 20 3b 5c 5a 45 2a 31 76 |7.b IKt( ;\ZE*1v| 00000040 4e d8 87 |N..|
payload bytes
00000000 1b 2e 40 4b 5a 4a 70 3a 4c 7b 0c 0e 41 64 52 26 |..@KZJp:L{..AdR&| 00000010 35 3b 48 7d 6d 4e 3a 63 43 64 19 6d 47 08 6f 62 |5;H}mN:cCd.mG.ob| 00000020 62 2f 2d 3c 79 1d 76 45 18 02 53 59 66 25 00 1b |b/-<y.vE..SYf%..| 00000030 61 48 19 4e 16 53 32 5a 37 4b 47 7e 53 36 43 fe |aH.N.S2Z7KG~S6C.|payload bytes
00000000 42 2e 38 72 75 49 70 01 3b 73 3e 42 3a 2e 30 0d |B.8ruIp.;s>B:.0.| 00000010 53 26 26 01 28 70 5a 43 56 53 25 1c 14 3c 2d 56 |S&&.(pZCVS%..<-V| 00000020 0a 65 48 00 2e 38 01 6a 2c 3f 2c 66 6d 5c 73 40 |.eH..8.j,?,fm\s@| 00000030 02 1a 41 2b 0a 1b 6e 60 6e 13 7c 02 4f 29 58 5a |..A+..n`n.|.O)XZ| 00000040 0e 21 5a 3d 59 5b 27 05 1a 53 6c 07 2f 5f 47 32 |.!Z=Y['..Sl./_G2| 00000050 79 08 4c 1c |y.L.|
payload bytes
00000000 78 2e 53 08 24 79 35 76 22 01 14 20 1c 50 3d 53 |x.S.$y5v".. .P=S| 00000010 51 30 61 53 33 41 06 5e 53 43 48 46 54 7f 36 4d |Q0aS3A.^SCHFT.6M| 00000020 02 09 55 26 03 0a 1c 25 0b 30 46 27 00 03 7b 51 |..U&...%.0F'..{Q| 00000030 34 5c 25 67 1d 2b 45 71 6e 0d 37 43 0d 6d 10 0f |4\%g.+Eqn.7C.m..| 00000040 77 65 35 7a 70 51 d8 bc |we5zpQ..|payload bytes
00000000 08 2e 2c 42 1e 01 1d 78 61 63 3b 46 01 04 59 64 |..,B...xac;F..Yd| 00000010 3d |=|
payload bytes
00000000 0a 2e 74 2a 5b 77 31 7f 5f 2a 19 21 0f 2b 51 68 |..t*[w1._*.!.+Qh| 00000010 0e 5a 49 6d 3e 72 2e 3e 0c 70 2b 7c 61 6f 45 6b |.ZIm>r.>.p+|aoEk| 00000020 2a 39 15 05 30 47 04 10 71 1d 31 01 48 02 69 56 |*9..0G..q.1.H.iV| 00000030 5c 33 44 1a 25 72 58 31 62 03 2d 43 73 72 2f 1d |\3D.%rX1b.-Csr/.| 00000040 2c 44 22 5c 0b 26 6c 7d 43 1d 7e fe 30 |,D"\.&l}C.~.0|
payload bytes
00000000 60 2e 1f 47 24 32 3e 04 74 45 32 3c 24 3b 35 6b |`..G$2>.tE2<$;5k| 00000010 61 3b 54 5f 45 71 27 3c 2e 49 1d 16 08 4a 1d 68 |a;T_Eq'<.I...J.h| 00000020 63 3c 30 07 6f 6e 0b 63 33 3d 1f 57 79 55 42 5a |c<0.on.c3=.WyUBZ| 00000030 10 17 3a 56 08 61 12 36 2a 30 4c 33 7a 69 1b 5d |..:V.a.6*0L3zi.]| 00000040 25 4b 64 14 39 70 78 6d 2d 17 44 26 6c 07 01 7d |%Kd.9pxm-.D&l..}| 00000050 1e 3b 53 9a a4 |.;S..|
payload bytes
00000000 22 2e 1a 5d 51 2f 23 41 23 41 54 11 46 52 58 1f |"..]Q/#A#AT.FRX.| 00000010 23 51 24 13 34 34 7f 40 7a 09 1e 22 71 5d 36 13 |#Q$.44.@z.."q]6.| 00000020 3d 50 70 0e 00 13 4f 23 54 24 34 1a 76 0d 39 1a |=Pp...O#T$4.v.9.| 00000030 5e 5e 2d 12 12 2c 52 0c 36 70 2e 27 4d 64 3b 0a |^^-..,R.6p.'Md;.| 00000040 35 2b 18 35 3f 68 58 13 0c 0d 2e 02 1a 67 1c 78 |5+.5?hX......g.x| 00000050 f8 7f |..|
payload bytes
00000000 11 2e 77 6f 2d 6a 42 39 33 38 4e 42 78 0b 17 2a |..wo-jB938NBx..*| 00000010 1f 0d 1f 60 08 7c 1a 67 2d 38 55 4d 12 2e 07 24 |...`.|.g-8UM...$| 00000020 5c 7f 13 09 69 56 43 1c 0e 11 5e 06 1c 75 30 3b |\...iVC...^..u0;| 00000030 02 4f 1b 0a 4b 36 72 79 6e 47 46 00 75 4d 24 51 |.O..K6rynGF.uM$Q| 00000040 4c 38 d9 d0 |L8..|
payload bytes
00000000 4a 2e 39 11 56 38 6d 49 47 37 04 5c 24 0f e1 |J.9.V8mIG7.\$..|
payload bytes
00000000 6d 2e 6a 6a 1e 1b 16 7b 24 5f 61 04 63 59 58 18 |m.jj...{$_a.cYX.| 00000010 15 33 1e 1e 32 28 5e 12 52 73 47 33 14 02 06 02 |.3..2(^.RsG3....| 00000020 40 70 6c 5e 0b 02 5a 2f 62 3b 34 45 14 0c 5d 29 |@pl^..Z/b;4E..])| 00000030 3f 7b 47 71 24 25 03 76 18 4a 2a 2d 4c 30 2f 0c |?{Gq$%.v.J*-L0/.| 00000040 20 1b 6a 2b 1d 44 5b 7f 00 0f 45 14 95 9a | .j+.D[...E...|payload bytes
00000000 49 2e 20 0f 79 32 51 6f 64 1b 4f 17 3f 52 68 7c |I. .y2Qod.O.?Rh|| 00000010 77 1f ec |w..|
payload bytes
00000000 40 2e 03 1b 2f 23 5d 0f 3c 30 3b 0d 08 03 2c 79 |@.../#].<0;...,y| 00000010 09 1e 27 71 0d 74 3c 45 03 4d 2f 22 70 7a 15 30 |..'q.t<E.M/"pz.0| 00000020 59 18 4b 09 3c 28 18 78 59 54 05 61 57 31 5a 60 |Y.K.<(.xYT.aW1Z`| 00000030 4f 01 51 5c 75 0d 21 78 5b 50 1b 4b 4b 30 7b 24 |O.Q\u.!x[P.KK0{$| 00000040 49 46 2d 05 6f 46 7d 48 1a 02 29 71 33 03 51 02 |IF-.oF}H..)q3.Q.| 00000050 05 22 5e 7a 73 5c |."^zs\|