UDP traffic
Datagrams matching asn:57043 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
3
Datagrams
1
Source addresses
1
Networks
1
Countries
3
Destination ports
Traffic by type
Unrecognised
3 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1900/udp
payload bytes
00000000 1e 2e 30 0b 71 35 6f 36 70 45 3e 3a 7c 07 2e 3f |..0.q5o6pE>:|..?| 00000010 1e 0d 3b 01 23 1e 5b 4b 19 4c 16 04 2d 28 70 4c |..;.#.[K.L..-(pL| 00000020 10 21 57 01 56 46 37 46 0c 75 00 08 7c 2f 47 1b |.!W.VF7F.u..|/G.| 00000030 3c 03 1c 60 21 77 2b 3a 44 41 3f 71 6a 2f 3d 7a |<..`!w+:DA?qj/=z| 00000040 50 15 78 48 |P.xH|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SSDP | 1900/udp | 1 | 1 | 30.8 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 141.11.209.245 | AS57043 Hostkey B.v. | NL | Unrecognised | 3 | 2026-10-11 08:46 |
Latest datagrams
payload bytes
00000000 1e 2e 30 0b 71 35 6f 36 70 45 3e 3a 7c 07 2e 3f |..0.q5o6pE>:|..?| 00000010 1e 0d 3b 01 23 1e 5b 4b 19 4c 16 04 2d 28 70 4c |..;.#.[K.L..-(pL| 00000020 10 21 57 01 56 46 37 46 0c 75 00 08 7c 2f 47 1b |.!W.VF7F.u..|/G.| 00000030 3c 03 1c 60 21 77 2b 3a 44 41 3f 71 6a 2f 3d 7a |<..`!w+:DA?qj/=z| 00000040 50 15 78 48 |P.xH|
payload bytes
00000000 39 2e 0a 40 09 41 65 0c 72 1e 1e 4f 29 33 51 72 |9..@.Ae.r..O)3Qr| 00000010 6a 3c 68 55 02 0f 4c 1f 65 4c 35 05 11 27 50 4b |j<hU..L.eL5..'PK| 00000020 63 5a 0b 6d 1b 70 79 0e 0f 18 5d 38 4b 2e 2a 36 |cZ.m.py...]8K.*6| 00000030 6b 12 0b 6d 22 57 0d 07 24 42 0c 35 69 5c 00 4c |k..m"W..$B.5i\.L| 00000040 37 0c 39 52 7c 33 60 0b 4b 3e 43 16 6c 6e 4c 57 |7.9R|3`.K>C.lnLW| 00000050 00 57 45 22 2f 52 29 53 14 35 08 7d 12 09 49 49 |.WE"/R)S.5.}..II| 00000060 a8 43 |.C|
payload bytes
00000000 12 2e 10 3a 49 3f 24 71 4e 2a 0f 65 64 5e 0e 6c |...:I?$qN*.ed^.l| 00000010 0b 36 0e 76 7d 6b 42 1d 46 39 16 67 17 24 20 29 |.6.v}kB.F9.g.$ )| 00000020 20 30 63 69 6f 6b 32 | 0ciok2|