UDP traffic
Datagrams matching asn:8402 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
5
Datagrams
1
Source addresses
1
Networks
1
Countries
4
Destination ports
Traffic by type
Unrecognised
5 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1027/udp
payload bytes
00000000 2d 2e 4a 39 26 49 57 6c 34 3b 29 45 7b 72 09 70 |-.J9&IWl4;)E{r.p|
00000010 03 7a 2d 2c 17 4b 1b 71 5e 5e 46 21 5e 6e 37 0b |.z-,.K.q^^F!^n7.|
00000020 22 01 45 48 4a 1c 34 7f 57 5d 44 52 4f 4d 43 53 |".EHJ.4.W]DROMCS|
00000030 47 70 7f 5e 3c 1a 50 1a 79 16 3c 57 05 73 63 27 |Gp.^<.P.y.<W.sc'|
00000040 75 28 6f 3f 44 23 3e 1b 00 02 6d 8c b7 |u(o?D#>...m..|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 78.107.31.154 | AS8402 PVimpelCom | RU | Unrecognised | 5 | 2026-10-11 00:02 |
Latest datagrams
payload bytes
00000000 2d 2e 4a 39 26 49 57 6c 34 3b 29 45 7b 72 09 70 |-.J9&IWl4;)E{r.p| 00000010 03 7a 2d 2c 17 4b 1b 71 5e 5e 46 21 5e 6e 37 0b |.z-,.K.q^^F!^n7.| 00000020 22 01 45 48 4a 1c 34 7f 57 5d 44 52 4f 4d 43 53 |".EHJ.4.W]DROMCS| 00000030 47 70 7f 5e 3c 1a 50 1a 79 16 3c 57 05 73 63 27 |Gp.^<.P.y.<W.sc'| 00000040 75 28 6f 3f 44 23 3e 1b 00 02 6d 8c b7 |u(o?D#>...m..|payload bytes
00000000 3b 2e 47 32 27 6d 00 4b 5b 3a 44 74 2b 7f 0e 1f |;.G2'm.K[:Dt+...| 00000010 0d 25 27 4c 21 7b 63 23 2a 10 76 0a 16 7e 0b 51 |.%'L!{c#*.v..~.Q| 00000020 59 53 8a 66 |YS.f|payload bytes
00000000 6e 2e 62 59 3c 09 27 62 2f 58 3f 52 1e 35 04 3e |n.bY<.'b/X?R.5.>| 00000010 26 4e 6c 74 5f 2d 72 3a 43 65 54 0e 26 12 04 14 |&Nlt_-r:CeT.&...| 00000020 41 66 6e 25 ca |Afn%.|
payload bytes
00000000 3b 2e 7e 0c 4b 1a 66 25 44 5a 21 79 59 2a 5a 71 |;.~.K.f%DZ!yY*Zq| 00000010 51 73 29 75 25 77 22 56 1a 3c 75 03 74 67 47 2f |Qs)u%w"V.<u.tgG/| 00000020 19 45 3c 65 5f 22 0a 23 7c 2b 1c 55 55 76 47 26 |.E<e_".#|+.UUvG&| 00000030 69 70 1b 0e 67 3d 64 02 79 59 05 6d 41 4c 1d 5a |ip..g=d.yY.mAL.Z| 00000040 11 59 3f 70 7b 49 13 77 74 30 4d 49 26 14 70 10 |.Y?p{I.wt0MI&.p.| 00000050 04 0b 1e 6c 49 03 6e 42 5c 73 30 1d 3f 4d 78 00 |...lI.nB\s0.?Mx.| 00000060 cc |.|payload bytes
00000000 77 2e 0b 1f 49 3c 48 46 53 58 15 0c 70 4d bc 0c |w...I<HFSX..pM..|