UDP traffic
Datagrams matching asn:7488 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
14
Datagrams
2
Source addresses
1
Networks
1
Countries
11
Destination ports
Traffic by type
Unrecognised
14 datagrams from 2 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1027/udp
payload bytes
00000000 5e 2e 0f 49 13 7a 09 00 40 24 08 25 3d 6f 0f 30 |^..I.z..@$.%=o.0| 00000010 4c 5f 15 04 35 25 6d 68 1b 3b 67 59 |L_..5%mh.;gY|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SSDP | 1900/udp | 2 | 2 | 30.8 |
| Memcached | 11211/udp | 2 | 2 | 10,000 to 51,000 |
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 144.225.124.188 | AS7488 CNServer LLC | US | Unrecognised | 7 | 2026-10-09 21:10 |
| 144.225.8.33 | AS7488 CNServer LLC | US | Unrecognised | 7 | 2026-10-11 08:54 |
Latest datagrams
payload bytes
00000000 5e 2e 0f 49 13 7a 09 00 40 24 08 25 3d 6f 0f 30 |^..I.z..@$.%=o.0| 00000010 4c 5f 15 04 35 25 6d 68 1b 3b 67 59 |L_..5%mh.;gY|
payload bytes
00000000 39 2e 72 4a 6f 43 3c 6e 7a 10 7e 1e 22 04 77 4c |9.rJoC<nz.~.".wL| 00000010 4c 39 7d 1f 24 12 47 41 6a 6c 7d 0a 17 34 0f 50 |L9}.$.GAjl}..4.P| 00000020 5b 01 1a 4b 44 57 39 3e 67 37 5d 09 3b 54 55 07 |[..KDW9>g7].;TU.| 00000030 0e 52 26 32 65 6e 73 4f 5a 71 59 71 25 69 41 00 |.R&2ensOZqYq%iA.| 00000040 6a 5c 4b 2f 33 04 6d 1a 3c 4a 23 77 1f 78 0e 45 |j\K/3.m.<J#w.x.E|
payload bytes
00000000 48 2e 05 22 6e 5b 57 35 4e 22 58 38 1a 51 0a 4e |H.."n[W5N"X8.Q.N| 00000010 5b 65 3b 5d 4d 03 77 3c 0a 26 33 74 36 1b 02 7f |[e;]M.w<.&3t6...| 00000020 1d 07 21 0c 62 78 41 30 1a 19 69 35 6a 73 03 46 |..!.bxA0..i5js.F| 00000030 58 3e 23 21 2e |X>#!.|
payload bytes
00000000 66 2e 34 4f 6a 41 50 4f 5e 32 1d 39 7f 69 23 68 |f.4OjAPO^2.9.i#h| 00000010 3c 72 37 43 7e 5e 0d 24 54 5c 00 62 5a 25 4c 41 |<r7C~^.$T\.bZ%LA| 00000020 67 00 10 51 41 60 20 20 12 3d 59 12 26 7c 7a 63 |g..QA` .=Y.&|zc| 00000030 6f 31 e0 02 |o1..|
payload bytes
00000000 57 2e 7d 17 35 71 73 0f 3b 25 3a 4f 65 40 24 4f |W.}.5qs.;%:Oe@$O| 00000010 63 31 25 4a 10 52 73 3f 15 5e 10 5f 33 2f 4e 0a |c1%J.Rs?.^._3/N.| 00000020 57 4c 22 0c 3d 15 1c 78 3a 56 47 20 16 6b 6f 79 |WL".=..x:VG .koy| 00000030 1c 14 44 2c 46 a8 |..D,F.|
payload bytes
00000000 7b 2e 15 10 10 05 74 44 6f 7a 36 5e 2e 0e 4c 10 |{.....tDoz6^..L.| 00000010 23 1e 19 4f 0b 40 55 53 59 19 63 22 0e 2c 50 09 |#..O.@USY.c".,P.| 00000020 0d 66 19 1d 6b 0d 61 5a 08 17 38 36 25 04 46 85 |.f..k.aZ..86%.F.| 00000030 6d |m|payload bytes
00000000 2f 2e 24 4f 77 6b 01 4a 0d 02 5a 5b 1a 10 16 2b |/.$Owk.J..Z[...+| 00000010 27 16 06 77 53 00 6b 19 0c 1f 46 7f 61 0e 21 10 |'..wS.k...F.a.!.| 00000020 61 45 5f 59 31 61 23 3e 63 7d 19 7d 0e 2f 29 35 |aE_Y1a#>c}.}./)5| 00000030 46 2f 2d 19 2f 18 32 3b 37 78 3a 19 06 5c 29 67 |F/-./.2;7x:..\)g| 00000040 21 09 40 52 6a 64 24 5e |!.@Rjd$^|
payload bytes
00000000 6a 2e 4b 22 2d 4c 11 20 4e 26 19 77 56 04 29 4c |j.K"-L. N&.wV.)L| 00000010 6e 5c 6b 10 5f 09 66 44 47 0b 71 47 1a 6c 68 04 |n\k._.fDG.qG.lh.| 00000020 1c 34 26 49 00 38 69 4f 5e 03 46 34 07 6f 00 76 |.4&I.8iO^.F4.o.v| 00000030 4c 6c 06 2b 75 6c 6f 3c 77 61 03 12 4d 6c 16 69 |Ll.+ulo<wa..Ml.i| 00000040 20 3d 33 20 75 1c 6f 53 1f 36 07 27 25 08 1d 71 | =3 u.oS.6.'%..q| 00000050 74 23 1c 69 10 0c 25 07 6d 28 19 3a e3 2e |t#.i..%.m(.:..|
payload bytes
00000000 30 2e 5c 3d 6a 46 42 6a 43 5d 4d 3e 09 69 28 01 |0.\=jFBjC]M>.i(.| 00000010 49 62 2a 39 3d 2e 69 5c 04 2a 67 04 38 2d 50 68 |Ib*9=.i\.*g.8-Ph| 00000020 35 2c 26 1f 72 68 09 35 46 57 74 4f 40 1c 50 09 |5,&.rh.5FWtO@.P.| 00000030 7e 7b 43 3b 29 2c 17 2d 56 7f 32 0f 2c 02 77 61 |~{C;),.-V.2.,.wa| 00000040 2f 1d 00 21 06 0a 57 4c 61 4b 1b 21 67 ec d8 |/..!..WLaK.!g..|payload bytes
00000000 31 2e 1f 2d 0c 23 7f 5b 1a 73 6d 7d 7c 63 2e 44 |1..-.#.[.sm}|c.D| 00000010 19 31 01 22 1a 33 06 00 02 48 6f 5c 75 40 3a 26 |.1.".3...Ho\u@:&| 00000020 18 59 53 25 7d 52 00 17 45 6d 15 41 50 43 05 69 |.YS%}R..Em.APC.i| 00000030 74 07 0b 0f 3a 12 0f 3c 5a 7e 19 4f 3e 53 75 57 |t...:..<Z~.O>SuW| 00000040 2d 48 7c 2a 1a 7c 41 60 69 56 21 39 19 27 22 0e |-H|*.|A`iV!9.'".| 00000050 2e 2d 1d 68 3f 2c 59 27 |.-.h?,Y'|
payload bytes
00000000 78 2e 11 61 74 45 52 68 1f 0d 33 63 37 4d 09 06 |x..atERh..3c7M..| 00000010 0f 61 6d 53 2b 7c 0e 2b 2d 0b 28 1e 56 50 6a 4e |.amS+|.+-.(.VPjN| 00000020 17 7b 2f 0b 40 02 73 5f 0f 27 42 46 74 4c 4c 04 |.{/.@.s_.'BFtLL.| 00000030 2d 3a 57 58 36 66 04 63 71 2c 01 47 7c 6c 15 13 |-:WX6f.cq,.G|l..| 00000040 67 44 1f 28 46 12 07 55 39 4a 1b 2e 16 68 32 43 |gD.(F..U9J...h2C| 00000050 22 09 1c 15 77 |"...w|payload bytes
00000000 05 2e 5c 73 0b 65 1f 1d 0b 47 1f 2f 25 73 |..\s.e...G./%s|
payload bytes
00000000 0a 2e 7b 33 32 01 6b 62 2d 15 1e 07 67 15 1e 06 |..{32.kb-...g...| 00000010 58 0f 50 98 00 |X.P..|payload bytes
00000000 30 2e 76 62 44 17 00 20 6a 49 2c 06 36 7e 0a 05 |0.vbD.. jI,.6~..| 00000010 25 53 30 67 0a 49 2a 2f 01 2a 28 1a 7c 29 3e 2d |%S0g.I*/.*(.|)>-| 00000020 55 75 3e |Uu>|