UDP traffic
Datagrams matching asn:135905 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
8
Datagrams
2
Source addresses
1
Networks
1
Countries
7
Destination ports
Traffic by type
Unrecognised
8 datagrams from 2 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8083/udp
payload bytes
00000000 45 2e 4f 4c 07 06 01 02 1d 3f 5e 14 3a 75 5d 6f |E.OL.....?^.:u]o| 00000010 07 7c 52 71 0f 37 27 34 3e 0c 11 64 52 5f fe f3 |.|Rq.7'4>..dR_..|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 14.225.217.73 | AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GRO | VN | Unrecognised | 7 | 2026-10-10 06:35 |
| 14.225.1.210 | AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GRO | VN | Unrecognised | 1 | 2026-10-05 17:12 |
Latest datagrams
payload bytes
00000000 45 2e 4f 4c 07 06 01 02 1d 3f 5e 14 3a 75 5d 6f |E.OL.....?^.:u]o| 00000010 07 7c 52 71 0f 37 27 34 3e 0c 11 64 52 5f fe f3 |.|Rq.7'4>..dR_..|
payload bytes
00000000 08 2e 45 59 1b 23 5f 7e 21 39 20 4d 17 5c 6c 58 |..EY.#_~!9 M.\lX| 00000010 21 25 3a 24 74 38 02 2b 5a 46 4a 11 03 32 57 0b |!%:$t8.+ZFJ..2W.| 00000020 49 ae b5 |I..|
payload bytes
00000000 30 2e 70 64 0a 16 7d 73 2b 67 1c 32 5f 2f 1b 72 |0.pd..}s+g.2_/.r| 00000010 2f 4d 57 53 56 45 0e 41 04 27 38 59 41 4c 54 72 |/MWSVE.A.'8YALTr| 00000020 49 44 56 53 5b 53 46 06 3b 62 38 1a 11 54 0c 40 |IDVS[SF.;b8..T.@| 00000030 21 63 14 77 28 22 39 2c 4a 71 40 ee |!c.w("9,Jq@.|payload bytes
00000000 47 2e 2e 49 6a 3d 77 1b 77 0d 21 2a 2e 04 7c 44 |G..Ij=w.w.!*..|D| 00000010 6e 3f 08 63 1e 47 56 13 10 61 5e 36 3c 6a 3e 03 |n?.c.GV..a^6<j>.| 00000020 2c 6c 4c 16 29 43 32 21 50 53 4b 7f 57 48 43 45 |,lL.)C2!PSK.WHCE| 00000030 af b9 |..|
payload bytes
00000000 77 2e 78 3c 52 38 09 91 49 |w.x<R8..I|
payload bytes
00000000 38 2e 27 6c 05 28 06 37 43 70 7b 58 1e 33 4f 16 |8.'l.(.7Cp{X.3O.| 00000010 6d 74 70 68 2b 33 46 79 7d 24 6e 19 6e 5d 70 26 |mtph+3Fy}$n.n]p&| 00000020 3e 17 12 43 3f 19 7b 02 09 ee 69 |>..C?.{...i|payload bytes
00000000 61 2e 08 1d 46 5d 1c 46 23 7a 19 41 1c 01 25 54 |a...F].F#z.A..%T| 00000010 65 03 5b 30 01 74 75 5c 37 06 1e 77 49 16 32 2a |e.[0.tu\7..wI.2*| 00000020 08 3a 47 4e 17 63 15 3a 5e 2e 7b 7a 2f 21 4e 15 |.:GN.c.:^.{z/!N.| 00000030 24 29 45 25 1d 3a 01 54 41 20 4b 0a 36 7d 34 3e |$)E%.:.TA K.6}4>| 00000040 37 7b 0d 4e 5e 22 09 3c 50 04 80 81 |7{.N^".<P...|payload bytes
00000000 33 2e 10 55 57 09 14 13 5f 28 1e 74 5f 2c 5f 40 |3..UW..._(.t_,_@| 00000010 05 25 1f 12 30 51 57 7e 49 7c 6f 5e 5e 1a 41 12 |.%..0QW~I|o^^.A.| 00000020 7e 51 67 55 5a 7b 69 3a 23 07 2e 02 33 0e 43 38 |~QgUZ{i:#...3.C8| 00000030 33 62 4a 63 33 22 62 7c 1e 51 5a 7c 6b 1b 0e 69 |3bJc3"b|.QZ|k..i| 00000040 6d 76 3f 47 71 28 01 15 2f 30 17 63 3e 5a 1b 71 |mv?Gq(../0.c>Z.q| 00000050 3c 66 55 6f 08 37 6b 26 b7 4b |<fUo.7k&.K|