UDP traffic
Datagrams matching asn:60024 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
6
Datagrams
1
Source addresses
1
Networks
1
Countries
5
Destination ports
Traffic by type
Other services
1 datagrams from 1 sourceFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest OOKLA datagram, to 8080/udp
payload bytes
00000000 35 2e 43 0c 64 24 11 2e 37 08 27 4b 1b 2e 2f 5c |5.C.d$..7.'K../\|
00000010 52 47 2c 63 2f 53 39 50 6c 38 30 4a 5d 45 43 12 |RG,c/S9Pl80J]EC.|
00000020 7c 07 1e 60 2b 30 0f 62 38 36 2d 54 64 5c 30 36 ||..`+0.b86-Td\06|
00000030 24 5c 1a 53 2f 53 23 1c 0c 54 66 69 19 2a 7b 15 |$\.S/S#..Tfi.*{.|
00000040 31 d7 c6 |1..|Unrecognised
4 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5353/udp
payload bytes
00000000 70 2e 10 1c 48 26 06 49 47 46 57 15 30 3c 74 01 |p...H&.IGFW.0<t.|
00000010 6f 6f 65 7f 77 62 7d 20 59 7b 5c 15 77 66 0a 68 |ooe.wb} Y{\.wf.h|
00000020 1c 1a 04 65 40 0a 2e 07 50 06 1c 01 42 11 02 31 |...e@...P...B..1|
00000030 00 67 30 77 4a 2d 17 23 29 73 38 20 59 43 08 75 |.g0wJ-.#)s8 YC.u|
00000040 5d 0d 5a 1e 17 09 25 68 0f 42 69 51 53 6b 03 53 |].Z...%h.BiQSk.S|
00000050 53 33 4a 1d 61 79 b8 |S3J.ay.|Peer-to-peer
1 datagrams from 1 sourceFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 82.115.30.245 | AS60024 Hk Cedoc Limited | AU | Unrecognised | 6 | 2026-10-10 09:20 |
Latest datagrams
payload bytes
00000000 70 2e 10 1c 48 26 06 49 47 46 57 15 30 3c 74 01 |p...H&.IGFW.0<t.| 00000010 6f 6f 65 7f 77 62 7d 20 59 7b 5c 15 77 66 0a 68 |ooe.wb} Y{\.wf.h| 00000020 1c 1a 04 65 40 0a 2e 07 50 06 1c 01 42 11 02 31 |...e@...P...B..1| 00000030 00 67 30 77 4a 2d 17 23 29 73 38 20 59 43 08 75 |.g0wJ-.#)s8 YC.u| 00000040 5d 0d 5a 1e 17 09 25 68 0f 42 69 51 53 6b 03 53 |].Z...%h.BiQSk.S| 00000050 53 33 4a 1d 61 79 b8 |S3J.ay.|payload bytes
00000000 7a 2e 5f 1d 3c 14 24 14 3c 4a 20 5c 00 08 2d 06 |z._.<.$.<J \..-.| 00000010 32 2b 0f 69 46 3c 59 99 |2+.iF<Y.|
payload bytes
00000000 77 2e 1b 7b 76 6b 7f 39 13 6b 4c 72 29 09 4b 05 |w..{vk.9.kLr).K.| 00000010 51 55 79 0f 6e 06 1b 5a 15 22 4a 5c 33 6e 1f 2a |QUy.n..Z."J\3n.*| 00000020 6f 3a 25 65 25 25 1f 38 10 6b 2a 39 74 75 3e 45 |o:%e%%.8.k*9tu>E| 00000030 4a 38 55 39 3e 70 13 53 13 5d 30 46 4b 4f 71 3b |J8U9>p.S.]0FKOq;| 00000040 0a 16 20 2f 3b 3f 68 4b 2a 12 04 1f 08 43 71 1d |.. /;?hK*....Cq.|payload bytes
00000000 73 2e 1e 01 7c 67 5e 12 3c 16 4e 57 03 06 36 69 |s...|g^.<.NW..6i| 00000010 35 1d 40 56 31 7f 3b 07 3e 24 27 46 78 76 3c 6b |5.@V1.;.>$'Fxv<k| 00000020 60 5a 6c 38 1c |`Zl8.|
payload bytes
00000000 21 2e 43 48 12 14 56 30 1d 55 6e 7f 25 66 6c 44 |!.CH..V0.Un.%flD| 00000010 08 59 44 7a 57 31 30 6c 58 3c 19 52 33 6b 17 55 |.YDzW10lX<.R3k.U| 00000020 3b 5a 1d 4e 6e 73 7e 0b 49 6c 0b 6e 52 77 32 5a |;Z.Nns~.Il.nRw2Z| 00000030 50 77 55 27 28 05 13 00 41 2c 52 75 17 69 4a 53 |PwU'(...A,Ru.iJS| 00000040 44 67 21 32 5b 1f 3e 24 0b 49 12 5d 40 44 37 10 |Dg!2[.>$.I.]@D7.| 00000050 3b 0c 37 64 24 1b |;.7d$.|
payload bytes
00000000 35 2e 43 0c 64 24 11 2e 37 08 27 4b 1b 2e 2f 5c |5.C.d$..7.'K../\| 00000010 52 47 2c 63 2f 53 39 50 6c 38 30 4a 5d 45 43 12 |RG,c/S9Pl80J]EC.| 00000020 7c 07 1e 60 2b 30 0f 62 38 36 2d 54 64 5c 30 36 ||..`+0.b86-Td\06| 00000030 24 5c 1a 53 2f 53 23 1c 0c 54 66 69 19 2a 7b 15 |$\.S/S#..Tfi.*{.| 00000040 31 d7 c6 |1..|