UDP traffic

Datagrams matching asn:12430 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

501

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

36 datagrams from 1 source

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

SNMP 36

Latest SNMP datagram, to 161/udp

0)·public·G·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 98 e2 f2 47 02 01 00  02 01 00 30 0e 30 0c 06  |....G......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 1

Latest SOCKS5 datagram, to 16883/udp

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

5 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 5

Latest Unrecognised datagram, to 32299/udp

·_·Ѓ·y·Y·4VxL·wKY

payload bytes

00000000  01 5f a4 d0 83 af 79 98  59 00 ff ff 00 fe fe fe  |._....y.Y.......|
00000010  fe fd fd fd fd 12 34 56  78 4c 9a 13 03 fb 77 4b  |......4VxL....wK|
00000020  59                                                |Y|

Peer-to-peer

459 datagrams from 8 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 459

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
SNMPv2	161/udp	36	1	6.3

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

Networks

AS12430 Vodafone Spain from 13 sources501

Countries

ES Spain501

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
89.141.151.153	AS12430 Vodafone Spain	ES	BitTorrent	351	2026-10-11 05:07
37.223.243.133	AS12430 Vodafone Spain	ES	BitTorrent	37	2026-10-09 00:03
95.60.233.244	AS12430 Vodafone Spain	ES	SNMP	36	2026-10-09 16:11
77.227.49.72	AS12430 Vodafone Spain	ES	BitTorrent	23	2026-10-08 20:54
47.59.8.162	AS12430 Vodafone Spain	ES	BitTorrent	21	2026-10-10 06:34
5.225.146.87	AS12430 Vodafone Spain	ES	BitTorrent	11	2026-10-10 20:49
89.7.107.135	AS12430 Vodafone Spain	ES	BitTorrent	10	2026-10-08 23:16
5.225.251.160	AS12430 Vodafone Spain	ES	BitTorrent	5	2026-10-07 20:19
2.155.220.132	AS12430 Vodafone Spain	ES	Unrecognised	2	2026-10-08 05:05
95.62.152.65	AS12430 Vodafone Spain	ES	SOCKS5	2	2026-10-09 03:05
89.141.239.252	AS12430 Vodafone Spain	ES	BitTorrent	1	2026-10-09 21:16
2.155.233.208	AS12430 Vodafone Spain	ES	Unrecognised	1	2026-10-09 03:30
87.125.87.34	AS12430 Vodafone Spain	ES	Unrecognised	1	2026-10-11 04:54

Latest datagrams

2026-10-11 05:07:1389.141.151.153to 39131/udpBitTorrentES

A·a·`·

payload bytes

00000000  41 00 61 84 1a d3 60 a2  00 00 00 00 00 10 00 00  |A.a...`.........|
00000010  b4 84 00 00                                       |....|

2026-10-11 05:07:0789.141.151.153to 39131/udpBitTorrentES

A·a·uan·

payload bytes

00000000  41 00 61 84 1a 75 61 6e  00 00 00 00 00 10 00 00  |A.a..uan........|
00000010  b4 84 00 00                                       |....|

2026-10-11 05:07:0489.141.151.153to 39131/udpBitTorrentES

A·a·A·

payload bytes

00000000  41 00 61 84 1a 41 da e8  00 00 00 00 00 10 00 00  |A.a..A..........|
00000010  b4 84 00 00                                       |....|

2026-10-11 04:59:2989.141.151.153to 39131/udpBitTorrentES

A·?·*·Gm·

payload bytes

00000000  41 00 fe 3f ff 2a 80 94  00 00 00 00 00 10 00 00  |A..?.*..........|
00000010  47 6d 00 00                                       |Gm..|

2026-10-11 04:59:2389.141.151.153to 39131/udpBitTorrentES

A·?·FA·Gm·

payload bytes

00000000  41 00 fe 3f fe cd 46 41  00 00 00 00 00 10 00 00  |A..?..FA........|
00000010  47 6d 00 00                                       |Gm..|

2026-10-11 04:59:2089.141.151.153to 39131/udpBitTorrentES

A·?·x·Gm·

payload bytes

00000000  41 00 fe 3f fe 99 78 c0  00 00 00 00 00 10 00 00  |A..?..x.........|
00000010  47 6d 00 00                                       |Gm..|

2026-10-11 04:54:5087.125.87.34to 32299/udpUnrecognisedES

·_·Ѓ·y·Y·4VxL·wKY

payload bytes

00000000  01 5f a4 d0 83 af 79 98  59 00 ff ff 00 fe fe fe  |._....y.Y.......|
00000010  fe fd fd fd fd 12 34 56  78 4c 9a 13 03 fb 77 4b  |......4VxL....wK|
00000020  59                                                |Y|

2026-10-11 04:54:5089.141.151.153to 39131/udpBitTorrentES

A·A·j·/#·

payload bytes

00000000  41 00 c9 41 ee 84 6a 1d  00 00 00 00 00 10 00 00  |A..A..j.........|
00000010  2f 23 00 00                                       |/#..|

2026-10-11 04:54:4489.141.151.153to 39131/udpBitTorrentES

A·A·'· ·/#·

payload bytes

00000000  41 00 c9 41 ee 27 a8 0a  00 00 00 00 00 10 00 00  |A..A.'..........|
00000010  2f 23 00 00                                       |/#..|

2026-10-11 04:54:4189.141.151.153to 39131/udpBitTorrentES

A·A·X·/#·

payload bytes

00000000  41 00 c9 41 ed f8 58 92  00 00 00 00 00 10 00 00  |A..A..X.........|
00000010  2f 23 00 00                                       |/#..|

2026-10-11 04:50:1489.141.151.153to 39131/udpBitTorrentES

A·-·+·1·

payload bytes

00000000  41 00 2d ca de 16 2b b5  00 00 00 00 00 10 00 00  |A.-...+.........|
00000010  f9 31 00 00                                       |.1..|

2026-10-11 04:50:0889.141.151.153to 39131/udpBitTorrentES

A·-·ݸ·1·

payload bytes

00000000  41 00 2d ca dd b8 fa 12  00 00 00 00 00 10 00 00  |A.-.............|
00000010  f9 31 00 00                                       |.1..|

2026-10-11 04:50:0589.141.151.153to 39131/udpBitTorrentES

A·-·݅·-·1·

payload bytes

00000000  41 00 2d ca dd 85 07 2d  00 00 00 00 00 10 00 00  |A.-....-........|
00000010  f9 31 00 00                                       |.1..|

2026-10-11 04:46:5089.141.151.153to 39131/udpBitTorrentES

A·ߦ·@·

payload bytes

00000000  41 00 df a6 d1 e8 ad 18  00 00 00 00 00 10 00 00  |A...............|
00000010  40 a0 00 00                                       |@...|

2026-10-11 04:46:4489.141.151.153to 39131/udpBitTorrentES

A·ߦь1·@·

payload bytes

00000000  41 00 df a6 d1 8c 31 9a  00 00 00 00 00 10 00 00  |A.....1.........|
00000010  40 a0 00 00                                       |@...|